Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ypq3zheWfc4DE8P4z1cwHhkjBYI.roa
File: ypq3zheWfc4DE8P4z1cwHhkjBYI.roa (raw, json)
Hash identifier: VKYU1qGd4RJ3o10B1EDz3EAb01WtMqx2qvaOQyXihWA=
Subject key identifier: CA:9A:B7:CE:17:96:7D:CE:03:13:C3:F8:CF:57:30:1E:19:23:05:82
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F2368987657B3E37CEBA100A7AAA9CBA7
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ypq3zheWfc4DE8P4z1cwHhkjBYI.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207960
IP address blocks: 2a0d:1a40:7900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:76:57:b3:e3:7c:eb:a1:00:a7:aa:a9:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca9ab7ce17967dce0313c3f8cf57301e19230582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:74:b7:11:4e:83:31:8e:c0:c7:cf:37:53:
17:e4:48:db:eb:2c:3a:54:dc:20:5f:95:5a:29:28:
1d:b9:23:99:56:47:fd:9a:7f:d1:4f:3c:07:1b:1c:
60:45:cb:60:e4:a1:61:dd:d8:57:10:cd:6b:c7:17:
1d:ca:8d:07:11:43:17:41:de:1d:07:f6:49:c8:ab:
af:5b:a5:06:b0:3c:26:5e:2d:58:45:f7:44:96:d5:
b0:8d:06:8c:3a:36:fa:b7:45:00:7e:bb:c4:70:7c:
1f:ab:3b:12:2a:94:b4:49:05:90:ba:fe:84:2e:9b:
8f:78:a8:b3:ad:8e:36:c7:9d:94:43:14:4b:04:1d:
d9:ae:6c:36:ea:d6:7c:43:f1:f9:8a:b5:d3:23:c2:
cc:2e:99:fb:88:3a:c6:2b:41:ec:33:f1:68:cc:fb:
9f:e8:48:da:3b:38:ab:e4:a3:fc:9d:f4:4d:af:c0:
74:6c:57:7e:23:73:81:aa:ca:55:11:d1:29:25:07:
a5:f2:22:d5:46:3b:86:9b:c2:57:e3:02:21:ee:14:
3c:31:af:7c:6e:c8:d4:9c:62:38:da:80:e0:26:3c:
94:6f:67:fa:2c:04:09:09:ac:99:b1:ea:b7:27:1f:
57:83:c1:25:e8:1e:24:b8:b4:0c:7c:1d:bd:07:c2:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9A:B7:CE:17:96:7D:CE:03:13:C3:F8:CF:57:30:1E:19:23:05:82
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ypq3zheWfc4DE8P4z1cwHhkjBYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7900::/40
Signature Algorithm: sha256WithRSAEncryption
bc:c9:b6:e5:98:92:8b:99:b0:33:28:d9:ec:69:33:24:b7:2b:
23:ee:d0:a5:0e:bd:0c:10:f7:cd:a8:d6:d7:a4:6b:97:22:fe:
7c:88:64:6c:47:44:49:f8:06:59:69:84:a7:2a:05:d4:f4:0c:
03:f8:4e:c6:2c:87:ac:4c:7a:14:aa:1b:30:6f:c5:d6:90:fc:
dd:6b:1a:04:2c:1e:f2:e7:ff:89:e5:3c:85:b6:9b:96:90:5a:
cd:97:ab:0f:09:ad:23:4d:2c:48:e1:9a:e5:94:f9:b3:6e:69:
01:1b:95:d9:2d:fb:ad:e3:de:f9:68:fd:df:89:78:c9:87:6a:
c8:3d:dd:1e:fc:55:73:01:43:01:b2:93:84:fd:c8:6a:af:45:
97:f1:6a:f1:be:50:e1:75:1b:b3:f3:77:47:09:aa:40:eb:f8:
8a:9e:53:42:f9:1f:71:c3:e2:ce:e5:2f:71:a3:b6:1c:1d:37:
4c:94:a9:b8:39:89:b9:ce:dc:81:9b:c6:5c:ea:74:54:de:ee:
f6:66:61:d3:a5:5f:53:96:cf:39:88:09:17:20:11:dc:89:e8:
e3:5f:22:e6:71:c6:61:d5:1f:b3:b4:41:03:44:d0:9f:b1:21:
9f:ae:25:4a:ea:4a:cd:fa:73:11:2f:b2:f7:66:d3:85:37:47:
66:79:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:43:08 2026 by rpki-client