Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/4YMSKNsUfIJZYY47MNVzndwjo04.roa
File: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (raw, json)
Hash identifier: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=
Subject key identifier: E1:83:12:28:DB:14:7C:82:59:61:8E:3B:30:D5:73:9D:DC:23:A3:4E
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019E877F5814D5EBFD655720C00FA6537FB7
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/4YMSKNsUfIJZYY47MNVzndwjo04.roa
Signing time: Tue 02 Jun 2026 08:42:10 +0000
ROA not before: Tue 02 Jun 2026 08:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:3a80:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:7f:58:14:d5:eb:fd:65:57:20:c0:0f:a6:53:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jun 2 08:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1831228db147c8259618e3b30d5739ddc23a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:a7:88:a4:22:58:42:cb:2b:5f:98:95:97:
10:53:fc:b7:51:be:61:d3:65:5a:79:f4:eb:ef:04:
3a:05:fd:a2:5d:53:c1:f3:44:ed:86:d1:06:58:2d:
77:d6:0e:1a:2c:ba:3e:1d:7e:c9:f6:76:15:82:3e:
fc:2a:3d:dd:f8:67:8e:91:9f:24:5d:d3:60:5b:76:
13:f3:95:94:e4:e1:16:80:ab:45:bf:38:ff:8b:cc:
1d:8b:4b:6f:5f:97:99:d5:fd:83:c7:b8:59:83:06:
47:13:0b:4a:c3:9f:01:7f:2f:e0:1b:64:17:5b:a7:
1d:b0:ec:d8:d3:b8:4a:b5:4c:2a:19:9a:bd:5a:de:
bd:f6:c1:ba:5e:0a:f8:fa:1c:ab:0c:c2:9e:84:4a:
2e:c8:35:ff:48:a7:60:ab:ec:62:80:2b:9f:85:a0:
d5:f7:5d:ff:78:18:7b:4a:41:0c:3f:42:bf:ad:6a:
63:20:65:ad:50:e4:27:45:36:2c:03:39:1e:01:d5:
8f:5c:69:da:79:e6:93:03:3b:c2:1f:37:6b:42:80:
f4:9f:d2:d1:04:92:b3:86:71:5c:fd:5c:d1:67:96:
c8:8a:34:5f:ea:70:c1:cc:49:f4:83:a7:77:f5:ac:
21:04:ef:24:88:6b:2b:cc:bf:a8:86:bf:80:7b:bd:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:12:28:DB:14:7C:82:59:61:8E:3B:30:D5:73:9D:DC:23:A3:4E
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/4YMSKNsUfIJZYY47MNVzndwjo04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3a80:600::/40
Signature Algorithm: sha256WithRSAEncryption
0d:91:7d:b9:1b:d2:26:c1:7d:be:8e:de:81:08:93:54:77:f5:
66:cf:a5:84:53:28:da:58:3a:14:62:a9:c3:8d:95:7c:62:7d:
9c:db:69:33:35:1e:f2:73:b3:4e:ad:e1:12:63:57:30:bf:c2:
92:9d:36:9f:1a:64:ac:01:29:8c:5d:a0:ba:98:20:ec:c5:23:
d7:f6:f1:e7:d0:b7:b1:a6:9b:92:07:f0:eb:91:2a:81:5b:f7:
df:e7:f8:73:18:9a:78:af:69:cd:ba:65:b0:9f:c4:69:85:fb:
26:0a:e8:98:a3:b4:a5:55:e4:43:25:f6:5d:de:9d:89:a1:c3:
2f:0d:a6:54:ff:e9:d6:61:6e:21:cf:3e:d8:47:89:99:db:27:
ed:cd:1f:de:35:a4:bc:bb:71:e5:44:01:8b:a6:08:0b:27:e9:
1d:67:f5:e4:37:d6:5a:69:10:b9:6f:43:4d:9b:0a:1e:81:dd:
92:f2:6d:ad:19:b2:97:99:7e:b4:7b:d2:66:50:19:20:b1:a0:
09:82:be:03:4f:85:09:a1:4d:6e:3d:99:61:8e:1f:7c:64:4e:
ec:b7:e6:da:e0:02:d2:98:04:78:bb:0f:89:e5:2e:be:d4:0c:
d0:b9:2f:36:ed:0a:57:10:a2:d7:8f:38:87:a8:4b:27:d9:51:
e5:84:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:44 2026 by rpki-client