Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YUR8NgwF7k_GGtLkwBAeBGufLPQ.roa
File: YUR8NgwF7k_GGtLkwBAeBGufLPQ.roa (raw, json)
Hash identifier: 0oiHbRHhznanUUR0ss8MvXtY74bJPTj/Rtk8jgWjndU=
Subject key identifier: 61:44:7C:36:0C:05:EE:4F:C6:1A:D2:E4:C0:10:1E:04:6B:9F:2C:F4
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A05C69DEDDB8140BD642E8335C0A4B7B10
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YUR8NgwF7k_GGtLkwBAeBGufLPQ.roa
Signing time: Tue 01 Sep 2026 10:00:37 +0000
ROA not before: Tue 01 Sep 2026 10:00:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218821
IP address blocks: 2a0c:9a40:e110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:69:de:dd:b8:14:0b:d6:42:e8:33:5c:0a:4b:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 1 10:00:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61447c360c05ee4fc61ad2e4c0101e046b9f2cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:9a:c4:a3:ac:46:2e:32:5c:a9:0e:f8:c4:
8b:3e:83:ef:66:33:5b:cb:c5:45:f1:19:a8:4c:11:
bb:a0:02:42:83:82:6a:bb:94:2d:34:e0:0d:71:8a:
64:41:5f:34:97:a6:ac:af:5d:8e:af:a2:5c:e0:ad:
df:1d:1f:b8:63:20:03:be:ce:5a:03:f5:b1:44:34:
c9:5a:cd:46:a9:f7:2a:22:53:2c:b0:f4:98:99:81:
05:f2:5e:1e:76:96:c5:e7:5f:c8:46:9a:80:e1:09:
37:25:91:33:f8:fe:37:1d:77:01:a3:87:2c:84:60:
6a:e0:19:df:08:54:ef:1c:e9:5f:53:31:15:a6:fb:
09:33:a7:fc:41:e0:80:a9:ff:18:f1:47:4f:92:23:
da:eb:13:2e:b7:d0:d5:8a:92:37:9d:66:10:65:f2:
7d:77:34:c7:a2:4d:76:58:7a:3a:c3:5e:74:66:97:
b2:1a:38:00:6f:00:db:a4:24:1c:43:95:da:c4:84:
6b:3f:9e:cf:8f:86:2a:86:5a:13:e7:e8:f3:b5:c8:
01:68:52:5d:0e:e0:81:d0:6f:bc:f2:0e:4a:60:37:
7a:68:3f:74:26:02:76:c3:b7:ce:05:8a:4c:fe:a8:
3b:bc:ad:f3:fc:67:58:3c:6d:8e:f5:15:22:f5:80:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:7C:36:0C:05:EE:4F:C6:1A:D2:E4:C0:10:1E:04:6B:9F:2C:F4
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YUR8NgwF7k_GGtLkwBAeBGufLPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e110::/48
Signature Algorithm: sha256WithRSAEncryption
08:98:bc:1f:8d:4a:d3:f5:d4:8c:47:6a:93:23:2a:4b:72:91:
d5:da:27:75:35:d4:e8:d5:ff:eb:ad:de:0a:e1:e4:d3:54:3a:
30:de:89:a4:ac:e9:63:57:39:8f:9e:88:09:47:43:7e:5b:74:
c6:9e:79:00:18:47:0e:d2:8c:e9:e4:88:fd:40:ea:9c:d7:02:
1c:ec:f2:f0:8f:93:e6:5b:1a:a7:0d:e9:b9:3f:1e:f9:e7:5a:
2d:fc:e7:25:36:7e:3f:3b:02:47:52:0e:72:05:06:25:2b:61:
6c:1d:47:c0:f8:dc:20:e7:1f:1f:90:e1:d1:16:8d:8e:c6:69:
86:eb:1f:62:e4:eb:05:e7:9c:f1:c0:88:d8:64:20:d9:c3:b3:
4c:bf:95:c9:68:52:2e:a3:22:44:69:2b:04:c6:b2:cd:38:99:
c6:39:c0:52:af:75:f9:56:71:37:0e:7e:06:ae:f9:07:fe:36:
20:5a:24:20:02:c6:e8:85:32:d3:23:51:fd:c5:31:f4:0e:bc:
cb:10:98:36:69:99:a2:6d:10:21:66:7a:54:83:1a:cf:cc:65:
b3:b2:ae:2d:f6:70:04:a4:f9:93:1d:52:80:4f:49:3e:db:7a:
a5:78:b2:3d:04:82:94:65:f6:ea:34:13:1d:fa:48:8b:b3:93:
f7:7a:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:15 2026 by rpki-client