Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/0YjvgGTB0wJJhPhruP9KWCrNfCM.roa
File: 0YjvgGTB0wJJhPhruP9KWCrNfCM.roa (raw, json)
Hash identifier: SIDuBF2N4OpZPuOpczIx+4rZBA6xn+jhTzoF+9TQdnE=
Subject key identifier: D1:88:EF:80:64:C1:D3:02:49:84:F8:6B:B8:FF:4A:58:2A:CD:7C:23
Certificate issuer: /CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Certificate serial: 01A120E3148056F381EA2CAD44E9A5696687
Authority key identifier: 8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/0YjvgGTB0wJJhPhruP9KWCrNfCM.roa
Signing time: Fri 09 Oct 2026 13:38:35 +0000
ROA not before: Fri 09 Oct 2026 13:38:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218479
IP address blocks: 2001:678:1370::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:e3:14:80:56:f3:81:ea:2c:ad:44:e9:a5:69:66:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Validity
Not Before: Oct 9 13:38:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d188ef8064c1d3024984f86bb8ff4a582acd7c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:9d:11:27:56:59:e3:fb:e4:c8:1f:90:a2:
73:57:7f:b3:8f:66:51:12:46:b4:58:a4:90:fa:5a:
34:8c:b6:b1:b9:6c:94:99:17:a8:77:4e:83:ef:08:
bc:b6:4b:0f:ed:c2:ea:e5:8a:b4:b6:b0:55:32:1a:
fa:30:02:85:af:9c:4d:05:bd:52:00:08:48:26:9d:
40:20:fd:34:98:14:68:fe:59:d4:d9:d0:31:9e:a9:
78:29:1c:2b:84:ef:a1:b4:62:f3:f2:b9:ac:5f:ad:
ef:e6:df:38:95:a6:65:2d:4c:03:01:12:61:52:ea:
4a:60:e4:03:ad:d9:99:5a:9c:5f:96:fd:37:2c:3f:
48:a6:31:dc:9a:82:b2:e9:f4:82:c8:d0:b3:1e:48:
c4:93:64:b3:82:f1:55:aa:80:0e:a0:bc:e2:e2:33:
de:98:dd:46:71:1e:a9:b7:84:38:ce:0a:90:5e:83:
9c:8d:ef:41:1b:4d:67:b4:02:42:a3:3c:fe:43:38:
6b:98:09:d7:52:62:7f:76:8b:e0:61:61:a8:76:8e:
d7:04:d2:cf:e7:97:17:a3:bc:09:7f:52:21:4a:3e:
ac:7f:5b:e2:3d:57:c2:74:6f:7e:e6:6e:0d:8d:2d:
ac:f8:4f:3e:6b:41:a7:aa:36:66:6d:3a:94:41:df:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:EF:80:64:C1:D3:02:49:84:F8:6B:B8:FF:4A:58:2A:CD:7C:23
X509v3 Authority Key Identifier:
keyid:8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/0YjvgGTB0wJJhPhruP9KWCrNfCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1370::/48
Signature Algorithm: sha256WithRSAEncryption
a7:4b:71:96:8a:7b:55:af:a5:ab:8c:87:13:fa:83:93:22:68:
a8:34:48:90:e9:79:0d:3d:c3:60:b5:2f:6f:d4:7f:c0:24:14:
47:e6:b6:f6:2c:07:3a:7b:19:4d:74:a8:16:a6:02:67:ff:e6:
16:4c:22:72:6f:f9:bd:40:c6:ff:20:63:2a:7f:23:78:13:7e:
c2:6f:78:fd:ce:56:44:24:a5:63:c2:f3:f3:62:1f:c1:ee:10:
bd:c7:6f:f5:4b:e3:e7:98:55:1d:8e:22:63:66:fd:bb:c6:e8:
a1:40:c4:9a:7b:18:12:a5:92:3c:47:d4:dc:d2:71:b0:b5:dd:
5a:c3:9f:86:3a:74:d9:6d:2a:1a:cc:96:8b:db:42:a6:d9:f4:
17:cf:b2:35:82:37:1e:85:ef:d1:f7:57:13:80:ea:f7:9e:39:
47:d9:36:67:50:f9:e3:c4:13:7c:f0:08:32:ad:69:1a:cf:89:
5a:43:e3:0b:80:6e:a8:a1:34:71:82:03:95:fe:32:55:02:05:
79:47:77:51:31:9a:48:ee:de:90:cc:df:d1:04:42:a8:39:b7:
9c:94:89:af:29:ec:3a:78:b8:17:b4:7b:0a:68:47:47:58:97:
de:f0:aa:2e:de:f6:55:89:9a:a0:37:8e:9b:01:ab:ae:f5:21:
14:21:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:35 2026 by rpki-client