Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/y0RTz8oEvJeMR3i3NtyBTMM8VyM.roa
File: y0RTz8oEvJeMR3i3NtyBTMM8VyM.roa (raw, json)
Hash identifier: lc+g55men/lvhlG200PETmddyFJf6cT7xvOTXAjFpq8=
Subject key identifier: CB:44:53:CF:CA:04:BC:97:8C:47:78:B7:36:DC:81:4C:C3:3C:57:23
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0E89290E0F8D8B053361978B9667AC478
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/y0RTz8oEvJeMR3i3NtyBTMM8VyM.roa
Signing time: Mon 28 Sep 2026 15:11:54 +0000
ROA not before: Mon 28 Sep 2026 15:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218591
IP address blocks: 2a09:3f00:1010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:92:90:e0:f8:d8:b0:53:36:19:78:b9:66:7a:c4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 28 15:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb4453cfca04bc978c4778b736dc814cc33c5723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:64:75:1f:9c:e1:ae:8c:6c:50:0b:be:8b:
e7:be:78:19:9c:d0:58:f6:cc:2c:18:d9:5a:03:e3:
09:b0:a2:4c:99:9c:50:f5:55:78:f7:9d:2c:f7:46:
d7:82:1e:ef:b6:ce:70:43:c0:c1:c9:6c:9c:ee:7f:
2e:cc:b7:6e:a2:38:86:81:66:70:18:98:b4:77:2c:
c5:0e:69:ef:62:2e:d4:75:f6:c8:0b:ae:6b:cd:1a:
40:1f:7d:b2:28:d9:b5:c9:e0:5a:3b:a9:25:74:d9:
f6:62:26:92:bc:97:75:b4:55:51:42:55:f7:a9:76:
ae:f7:36:90:30:b7:95:e0:b3:2d:86:ee:20:7d:08:
91:42:5d:d8:3b:a3:00:d3:de:27:90:d6:c7:7a:24:
ae:a7:d0:00:fd:51:40:5d:d2:9a:47:3c:1f:78:ce:
1d:5d:40:d2:6c:8b:7c:f8:a4:62:c2:e4:bd:ec:fc:
3d:3a:ee:24:41:db:49:92:ad:20:4d:67:88:ad:e9:
45:e9:14:cd:90:5d:5b:78:96:a2:83:b2:f4:b3:5e:
5b:44:49:b7:57:81:3c:5c:c0:8f:6e:99:0c:89:2e:
9b:32:0e:8f:a4:a3:ca:a4:fa:a9:bb:32:28:69:0e:
ec:a6:7e:a7:82:71:68:ea:57:7e:5d:fd:7d:8b:ed:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:53:CF:CA:04:BC:97:8C:47:78:B7:36:DC:81:4C:C3:3C:57:23
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/y0RTz8oEvJeMR3i3NtyBTMM8VyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1010::/48
Signature Algorithm: sha256WithRSAEncryption
79:89:d1:35:17:0c:f9:9c:90:b2:be:e8:25:b0:e7:44:80:ad:
10:15:69:fc:31:6f:2e:75:74:99:86:c1:2f:74:8d:d3:6b:8e:
17:dd:2c:e1:b8:ab:fb:78:a9:ad:0d:22:a2:72:32:91:f6:4e:
31:80:2a:b3:71:aa:c9:3c:27:11:51:7b:88:f1:a4:9d:f3:fb:
99:b7:c9:72:68:7a:ac:a2:5e:75:a7:0b:a1:d1:39:03:73:9d:
ec:42:67:d4:b0:7c:e0:44:59:1e:25:41:f4:0d:e6:94:e0:56:
23:18:29:c6:4b:0e:14:f5:46:c1:fd:7a:13:d2:c0:41:85:ba:
89:59:b8:b9:05:ea:f8:a4:34:e6:cb:8a:13:82:a1:9d:20:aa:
21:f1:f3:6c:ea:6d:91:53:b7:76:c9:3f:8d:b5:ff:66:ce:a8:
7d:bf:cf:57:b3:b8:f8:94:c5:5d:fd:10:68:a4:f3:9b:8e:eb:
66:3f:05:c3:50:f4:9d:24:a3:e2:c6:04:73:f4:4e:fe:64:49:
47:de:50:15:2e:3a:d8:e8:69:e0:ea:4e:4b:30:74:8a:d0:d2:
1e:36:1e:46:f4:c4:21:72:d4:ba:34:4e:07:43:f9:1b:62:62:
00:cd:56:39:50:44:e7:1b:0b:ba:e7:5d:75:fb:97:83:39:ba:
7c:85:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:42:45 2026 by rpki-client