Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/yZRAwMpHC1akIe-9W9g3h-5QSX4.roa
File: yZRAwMpHC1akIe-9W9g3h-5QSX4.roa (raw, json)
Hash identifier: ljnzF50X61C8aHXfYMqAVJlpP0BFkSFYVZ0ZKW6hN40=
Subject key identifier: C9:94:40:C0:CA:47:0B:56:A4:21:EF:BD:5B:D8:37:87:EE:50:49:7E
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FC800AF7096D455B3E673A0495C0CB2F0
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/yZRAwMpHC1akIe-9W9g3h-5QSX4.roa
Signing time: Mon 03 Aug 2026 14:21:55 +0000
ROA not before: Mon 03 Aug 2026 14:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 2a0d:d940:9009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:00:af:70:96:d4:55:b3:e6:73:a0:49:5c:0c:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 3 14:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c99440c0ca470b56a421efbd5bd83787ee50497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:1f:fe:0e:2a:36:76:20:3a:ae:ab:e3:05:
ab:21:e5:06:de:c7:45:46:bd:f9:f7:69:b2:9f:d0:
55:24:fb:a0:2c:b4:bc:8b:74:aa:a5:65:c6:29:b2:
71:57:53:29:c4:8b:5b:25:5b:ba:7c:25:34:b1:1a:
70:95:1a:9f:dc:fa:e7:48:c0:8f:f2:e2:93:cc:df:
ef:66:16:0a:b6:77:af:94:41:79:cc:a7:38:88:9f:
d0:9c:d4:8b:21:9c:2a:f8:a4:80:9a:c2:8a:14:60:
38:c6:6a:21:2c:60:eb:5e:f1:4e:88:13:77:a2:90:
77:35:17:be:2e:c7:ba:8d:d5:57:5c:3f:72:a0:83:
18:21:b4:be:d9:b7:aa:8b:dc:85:ba:4f:82:f9:6c:
3b:03:78:e9:0e:a5:e4:76:c5:11:d1:79:63:a0:64:
41:ee:fa:fe:6c:41:5d:68:2a:03:e9:ed:df:0c:c5:
48:d2:77:53:76:11:c8:8b:7a:f8:f9:01:c1:0f:42:
6d:03:a0:c4:b8:d1:9f:12:d1:c9:8b:50:e2:27:7c:
a5:de:40:b9:c1:c0:fb:db:bf:07:3d:85:73:be:da:
da:91:25:14:69:df:52:93:c0:e0:92:00:da:64:4b:
67:b6:7e:fd:99:ba:81:9a:9d:9b:28:9e:01:c6:a1:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:40:C0:CA:47:0B:56:A4:21:EF:BD:5B:D8:37:87:EE:50:49:7E
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/yZRAwMpHC1akIe-9W9g3h-5QSX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:9009::/48
Signature Algorithm: sha256WithRSAEncryption
b3:6c:9f:e7:db:ba:27:ed:ba:0d:15:ac:73:fd:1f:bb:cb:58:
b5:eb:be:24:93:4c:e7:70:77:18:84:4e:77:a3:0d:b0:49:c8:
1d:f3:b1:fb:6b:77:bd:9f:90:56:81:09:e1:20:48:e3:14:ff:
7d:47:03:26:f3:06:fe:90:db:0e:62:ef:be:46:a9:42:d2:e7:
fd:5e:b8:dd:77:ee:94:02:73:89:61:5f:74:af:a6:53:6f:06:
6d:7a:63:b7:6b:ed:64:c3:87:d5:0d:ff:72:cf:b7:fb:8c:c1:
07:48:00:af:dd:33:41:8a:52:fb:71:ad:68:1c:58:d7:cd:62:
f9:86:81:54:1c:1e:0d:03:cb:20:59:34:3f:f1:ef:b0:73:b9:
44:0d:4a:46:37:71:6a:37:e2:fc:8e:0c:a5:42:18:ab:e7:d6:
ee:d5:2d:20:35:71:a1:f3:69:12:ae:12:66:8c:3d:a3:99:b1:
b1:5e:0f:64:b6:85:4d:3d:c0:f3:f6:ae:20:2a:eb:28:6b:4f:
49:7f:24:ed:8f:f8:6a:e3:9a:35:fb:52:83:4c:a7:1d:7c:6e:
3a:28:2f:7c:85:05:2e:c8:5c:fe:6e:15:d8:0c:01:a1:b1:67:
0b:bf:84:33:c9:29:12:26:29:f9:85:5a:01:6e:44:ca:b5:33:
17:e6:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:56 2026 by rpki-client