Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Yp-cKosKfX1FQli00qB1k6Shqog.roa
File: Yp-cKosKfX1FQli00qB1k6Shqog.roa (raw, json)
Hash identifier: 0XCu74mdjuM4nd9uEtDA8JRXlR5B/7N5AVWHIxdVf14=
Subject key identifier: 62:9F:9C:2A:8B:0A:7D:7D:45:42:58:B4:D2:A0:75:93:A4:A1:AA:88
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A5B245F34D17F19860BF6DCDD94B0E5
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Yp-cKosKfX1FQli00qB1k6Shqog.roa
Signing time: Wed 14 Oct 2026 12:20:13 +0000
ROA not before: Wed 14 Oct 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a06:b3c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:5b:24:5f:34:d1:7f:19:86:0b:f6:dc:dd:94:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=629f9c2a8b0a7d7d454258b4d2a07593a4a1aa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:90:b4:d5:eb:dd:e9:17:0a:92:50:67:1c:
0b:10:4b:db:04:26:2e:ff:a5:a8:df:02:29:99:3b:
61:e9:e1:23:84:12:2c:af:dd:a2:97:40:ec:b5:f0:
e9:18:5e:1a:3b:ba:a4:39:12:cd:7e:16:fd:d8:04:
77:99:61:ba:a9:64:8e:20:e5:4c:3c:15:3c:fd:f5:
f5:a4:2d:4a:6a:09:cf:3f:a3:b2:b0:7f:75:15:f5:
5c:9b:64:a6:f1:58:e1:d1:1c:52:c5:3d:e9:de:2c:
55:a7:bc:8a:71:22:ad:51:f5:bb:e0:ff:b6:67:6e:
75:cd:b9:b3:8c:40:e9:eb:9d:f1:da:81:50:f4:5c:
99:df:ef:53:85:3b:f1:16:22:51:75:49:ad:6f:a3:
2f:71:e7:c6:ae:0d:f5:07:9a:9a:de:f2:ed:d8:09:
66:77:f0:6d:b5:63:ad:99:1d:43:92:60:d4:99:ff:
d8:c3:dd:41:26:f3:9e:3e:ea:45:79:5b:73:c4:e7:
e2:cf:fd:ef:c8:d6:d5:20:7c:2f:13:e6:6d:00:51:
70:02:9c:9d:04:96:c5:77:bf:66:66:c4:b5:3f:3c:
61:58:17:1d:27:41:8a:ef:b9:68:57:4f:aa:17:d0:
3a:00:35:21:fd:fa:72:d9:b4:81:10:c4:67:a2:5d:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:9C:2A:8B:0A:7D:7D:45:42:58:B4:D2:A0:75:93:A4:A1:AA:88
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Yp-cKosKfX1FQli00qB1k6Shqog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:d2:2b:02:c4:0a:d6:07:c4:08:56:e9:92:b2:a5:a8:9a:f9:
04:69:2b:5e:62:b9:16:6d:c0:02:d0:7f:fd:09:9c:56:4d:5f:
90:0e:d9:a6:2d:9e:47:b2:42:e6:7c:4d:2d:e4:d3:e0:2f:5c:
49:cc:a4:af:d5:e9:1b:d5:de:60:35:b5:a3:ec:26:17:6b:ff:
bc:77:9c:cc:6d:c9:0f:d0:d4:00:fd:d4:b4:1d:58:9d:e2:29:
8a:52:b5:93:d9:02:a1:36:23:c1:b5:55:73:e1:ad:4d:96:f7:
4b:05:1b:26:ed:40:2d:ca:c2:e3:3e:eb:d0:ad:92:5c:5a:16:
d8:5d:28:fb:12:55:24:00:07:59:11:86:70:7f:eb:9a:f0:b9:
63:e9:90:c1:42:ae:3c:92:6d:39:84:11:a9:85:3f:13:f5:d9:
9c:56:1b:94:59:a7:a6:b5:32:d4:7e:63:f6:d6:32:fa:0d:a5:
db:e9:d0:8a:a6:3e:ed:c3:55:8b:e6:a1:9f:16:6f:f1:eb:2b:
3e:f6:56:e1:87:5a:95:c5:75:8d:b5:06:8c:c9:ac:5b:32:89:
50:6e:d5:fb:02:cf:6a:d6:da:bb:5c:1e:3c:df:07:0e:44:b3:
93:34:1f:fe:5b:03:6d:36:c4:6f:02:ff:39:9c:00:fe:f1:bb:
71:95:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:27 2026 by rpki-client