Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/y3yKXi3woBHdhhPpHy-TZhyb0hY.roa
File: y3yKXi3woBHdhhPpHy-TZhyb0hY.roa (raw, json)
Hash identifier: HgeZ2K5/SDaND4M483UbtYS5HIR1NSo8TA2bftjIIoI=
Subject key identifier: CB:7C:8A:5E:2D:F0:A0:11:DD:86:13:E9:1F:2F:93:66:1C:9B:D2:16
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DBF18317C8016D7EB591CE81B2B681A8E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/y3yKXi3woBHdhhPpHy-TZhyb0hY.roa
Signing time: Fri 24 Apr 2026 10:45:26 +0000
ROA not before: Fri 24 Apr 2026 10:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:18:31:7c:80:16:d7:eb:59:1c:e8:1b:2b:68:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 24 10:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb7c8a5e2df0a011dd8613e91f2f93661c9bd216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:5d:b4:6a:5d:01:2a:2f:9b:31:2b:5c:81:
32:21:9d:b8:14:10:c8:99:7d:ef:44:92:ea:ea:27:
f8:80:74:50:db:53:94:70:f0:01:2b:c6:12:f9:2b:
2c:e7:6f:03:6c:ee:40:fe:73:49:7a:9a:8f:51:f2:
f9:a8:9c:87:2b:fe:1d:be:67:79:bd:b3:7d:5b:82:
5e:27:30:de:74:3d:5f:03:5c:16:fa:02:6e:4b:3d:
e2:09:a8:71:67:e1:37:9c:74:ff:06:6c:20:e5:2a:
90:93:09:90:74:f4:41:35:51:65:e9:a4:a2:ff:a7:
0b:d5:d0:f9:c5:44:7a:03:21:b0:5b:65:5d:bf:8e:
88:3e:a9:a7:01:03:00:92:59:53:0e:65:24:24:e3:
f8:66:c3:59:e0:11:65:f1:42:d4:37:ba:fa:f0:23:
16:94:c1:69:f7:4d:49:44:28:e5:56:71:10:e7:aa:
55:7f:b3:82:45:ab:a2:64:68:58:95:17:d6:b2:73:
94:65:98:3d:35:24:7f:39:1c:95:ec:38:21:dc:83:
19:c6:ae:55:34:ac:1f:5d:03:f0:d2:b3:cb:2c:d5:
d8:89:5b:61:2a:2e:6d:8b:0b:15:d0:56:e3:ab:f2:
29:f8:e0:3d:c9:55:54:03:61:83:91:5a:87:16:2e:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:8A:5E:2D:F0:A0:11:DD:86:13:E9:1F:2F:93:66:1C:9B:D2:16
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/y3yKXi3woBHdhhPpHy-TZhyb0hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a13:b9c0::/29
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
20:c5:de:dd:9d:bf:49:be:82:02:e3:85:29:c5:70:aa:bb:de:
27:bc:c4:03:12:e8:0c:6a:ae:8c:ef:0f:df:6c:bd:c9:77:28:
db:5d:73:28:2d:ed:68:60:cb:39:77:78:6b:af:55:24:95:dc:
c7:44:e0:0b:aa:10:9c:54:32:65:4e:31:2f:0b:28:fb:09:83:
1e:15:68:4f:ba:d3:e7:75:7b:82:5a:34:fe:2c:d7:b1:9a:5d:
1b:9d:4c:fe:65:f8:cb:e9:64:c4:3a:d8:be:64:0b:c0:07:40:
8d:ea:fa:96:d9:cb:4f:25:50:53:14:5e:e6:fd:8e:4d:e0:fc:
da:f6:22:9d:d6:20:3e:e7:74:e3:19:fe:a0:56:ed:c1:3f:5e:
44:c9:ec:1b:28:2d:ac:07:8c:82:5d:f5:f3:73:d0:5d:75:c9:
7e:37:20:b8:af:5b:92:01:51:58:03:f8:41:57:39:2a:5e:43:
e2:2b:9a:9c:2e:88:9a:39:c2:bd:74:02:80:c2:f3:c1:1f:9c:
b2:d6:e9:ec:e7:b3:10:04:79:a3:3c:f8:46:b4:47:44:08:42:
4d:ae:2e:a6:d9:33:1c:17:8e:a1:e0:04:09:13:4a:4f:bf:c7:
15:41:9f:96:24:b1:33:32:93:be:43:dd:1c:dd:fe:0b:91:55:
be:2a:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 03:39:27 2026 by rpki-client