Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y5xvabEos1s3fHySG_vgx9XVUSs.roa
File: Y5xvabEos1s3fHySG_vgx9XVUSs.roa (raw, json)
Hash identifier: uNwpgmz/oaS3jeYgbFGMjtaAAq1arThKxRBiLd8K4OY=
Subject key identifier: 63:9C:6F:69:B1:28:B3:5B:37:7C:7C:92:1B:FB:E0:C7:D5:D5:51:2B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FB42781FC40289CF3B251E3BE61101ABE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y5xvabEos1s3fHySG_vgx9XVUSs.roa
Signing time: Thu 30 Jul 2026 17:51:55 +0000
ROA not before: Thu 30 Jul 2026 17:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a13:bb40::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:27:81:fc:40:28:9c:f3:b2:51:e3:be:61:10:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 30 17:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=639c6f69b128b35b377c7c921bfbe0c7d5d5512b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:93:ed:e3:30:d0:fd:45:79:96:f9:70:49:
f7:e1:88:e1:dc:71:bc:49:8a:fd:25:33:1e:7d:ab:
8c:56:8b:32:e6:4c:54:25:0b:cd:21:ee:0d:68:5f:
76:83:67:81:4b:a4:45:0c:a0:2c:54:d5:0a:8b:fd:
47:e1:8a:a4:dc:3b:74:41:4a:ce:85:ce:d8:69:9e:
91:af:d0:de:ca:a7:10:e6:df:4d:be:1c:4b:f0:97:
98:a5:51:73:fc:61:eb:98:d1:5e:6c:17:25:cc:1c:
7d:05:ec:ab:88:2f:d6:44:b9:51:17:52:5c:13:5f:
d1:ba:86:32:e6:5f:21:62:53:d9:e5:15:5a:b6:8f:
41:be:10:59:3e:f8:04:8c:57:6d:4c:7b:84:45:1a:
00:ad:4c:ec:3f:0b:ca:e8:d3:37:c1:40:6b:0f:04:
3c:49:bc:80:3c:b1:59:89:14:c8:90:86:dd:9c:b8:
06:b9:61:ce:77:8b:55:3c:f4:b0:20:bc:f1:15:2d:
70:28:b4:ca:9c:2a:c0:05:3e:74:da:1d:62:ec:02:
32:13:31:47:d4:83:fa:0e:e1:8d:a2:12:61:76:70:
3f:50:f5:84:ec:e1:fa:5a:99:50:a1:85:fc:ff:d4:
cd:31:5e:76:3a:51:a7:70:6a:c7:bd:c0:ba:c7:fc:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:6F:69:B1:28:B3:5B:37:7C:7C:92:1B:FB:E0:C7:D5:D5:51:2B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y5xvabEos1s3fHySG_vgx9XVUSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a13:bb40::/29
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
09:3f:aa:4d:ec:00:e4:4b:a7:b8:73:24:22:42:71:73:5d:8b:
69:c8:4f:96:9b:93:c6:48:61:9b:84:cf:63:52:c6:49:ce:9c:
bb:a2:a5:1f:87:69:bf:67:38:85:ef:76:42:44:f6:ae:ed:da:
d7:4b:70:ea:73:4d:5d:6f:2c:28:7c:ca:9b:76:2a:17:c9:01:
d4:74:65:7e:94:91:38:13:4d:37:b2:68:5c:bf:f0:6c:32:e9:
51:00:41:17:03:c5:4b:31:84:e2:01:b8:47:c9:c3:f6:3a:01:
2b:50:c1:ba:3c:87:4d:0c:18:66:95:4a:01:60:7a:5b:02:55:
e5:62:79:1d:ca:0a:f6:6d:ed:86:99:6f:d5:22:8a:8f:19:f2:
ef:50:9e:e2:20:53:47:8c:31:14:8f:0b:d2:f3:db:9d:40:58:
66:02:0d:7e:44:50:26:3c:0c:59:a7:7e:39:dc:29:72:2a:5a:
70:33:e7:de:39:2d:10:c2:74:e3:5a:d8:99:2b:9d:51:12:03:
93:a2:60:3d:28:d7:6b:87:18:93:dd:bb:b6:47:93:89:3c:2b:
25:16:27:b6:a0:4e:c4:29:a6:c1:d8:a2:bc:ed:10:48:41:ac:
ac:fb:37:7e:e3:8e:99:ab:87:3d:90:52:11:be:0c:2b:b4:86:
e0:df:90:ba
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZ+0J4H8QCic87JR475hEBq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNzMwMTc1MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzljNmY2OWIxMjhiMzViMzc3YzdjOTIxYmZiZTBjN2Q1ZDU1MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+yT7eMw0P1FeZb5cEn34Yjh3HG8
SYr9JTMefauMVosy5kxUJQvNIe4NaF92g2eBS6RFDKAsVNUKi/1H4Yqk3Dt0QUrO
hc7YaZ6Rr9DeyqcQ5t9NvhxL8JeYpVFz/GHrmNFebBclzBx9BeyriC/WRLlRF1Jc
E1/RuoYy5l8hYlPZ5RVato9BvhBZPvgEjFdtTHuERRoArUzsPwvK6NM3wUBrDwQ8
SbyAPLFZiRTIkIbdnLgGuWHOd4tVPPSwILzxFS1wKLTKnCrABT502h1i7AIyEzFH
1IP6DuGNohJhdnA/UPWE7OH6WplQoYX8/9TNMV52OlGncGrHvcC6x/ye+QIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFGOcb2mxKLNbN3x8khv74MfV1VErMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvWTV4dmFiRW9zMXMzZkh5U0dfdmd4OVhWVVNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlAwUAKhA8gzAO
AwUAKhA8hQMFACoQPIYDBQMqE7tAAwUDKhPDQDANBgkqhkiG9w0BAQsFAAOCAQEA
CT+qTewA5EunuHMkIkJxc12LachPlpuTxkhhm4TPY1LGSc6cu6KlH4dpv2c4he92
QkT2ru3a10tw6nNNXW8sKHzKm3YqF8kB1HRlfpSROBNNN7JoXL/wbDLpUQBBFwPF
SzGE4gG4R8nD9joBK1DBujyHTQwYZpVKAWB6WwJV5WJ5HcoK9m3thplv1SKKjxny
71Ce4iBTR4wxFI8L0vPbnUBYZgINfkRQJjwMWad+OdwpcipacDPn3jktEMJ041rY
mSudURIDk6JgPSjXa4cYk927tkeTiTwrJRYntqBOxCmmwdiivO0QSEGsrPs3fuOO
mauHPZBSEb4MK7SG4N+Qug==
-----END CERTIFICATE-----
Generated at Sat Aug 1 15:36:49 2026 by rpki-client