Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x-YyLLMXzLym0LLEPBSZYNtGUmU.roa
File: x-YyLLMXzLym0LLEPBSZYNtGUmU.roa (raw, json)
Hash identifier: 655TxY2TsErU54kvtHcAEQt9NTC3s4lvLK1gk0cJWr8=
Subject key identifier: C7:E6:32:2C:B3:17:CC:BC:A6:D0:B2:C4:3C:14:99:60:DB:46:52:65
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236942B7A813CD7E180D05A5F916E359
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x-YyLLMXzLym0LLEPBSZYNtGUmU.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 93.120.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:42:b7:a8:13:cd:7e:18:0d:05:a5:f9:16:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7e6322cb317ccbca6d0b2c43c149960db465265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:cd:94:f3:f1:9c:0c:59:0c:fa:21:a3:24:
03:c4:68:89:e4:ba:db:85:f3:22:9b:10:2a:50:dc:
e6:9d:fe:c5:0c:71:1c:d8:b8:fc:3d:f4:c3:a9:6f:
e4:e2:d4:00:0b:d2:a3:8d:2f:9d:33:de:bf:74:e1:
34:bb:c7:1c:9c:e2:5f:a7:c4:c9:94:27:3e:a7:ac:
5e:1e:92:1c:ee:9d:93:96:0d:1a:ef:bb:f9:c4:54:
0a:ee:22:ab:91:c3:49:32:90:3e:b1:73:d6:f8:6d:
e7:82:67:aa:46:ec:76:52:d7:9f:31:6a:ba:a0:c7:
30:50:6d:2b:9a:bb:e3:79:04:9b:75:fc:33:91:a5:
d6:1f:3d:93:87:c9:77:3b:0b:0b:82:a1:68:8b:07:
9a:b2:4a:db:f1:3b:bd:c7:62:b8:70:0e:c5:7b:38:
3e:ba:0c:72:27:e8:1e:41:20:0b:d6:59:09:73:cf:
ec:1d:66:35:47:20:62:0c:ad:c2:32:b7:5a:37:a2:
1b:e5:30:09:8d:34:98:b5:6b:92:91:e6:df:4c:7d:
70:0d:9f:38:0a:04:9f:28:b1:d3:af:b5:ee:c6:d0:
7f:55:a4:fb:7b:c6:d1:19:42:0d:38:76:98:51:08:
48:42:30:2d:c9:da:0f:2b:79:58:db:b4:2d:58:a2:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:32:2C:B3:17:CC:BC:A6:D0:B2:C4:3C:14:99:60:DB:46:52:65
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x-YyLLMXzLym0LLEPBSZYNtGUmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.0.0/21
Signature Algorithm: sha256WithRSAEncryption
79:b3:69:fc:49:b0:79:51:38:d5:b6:7d:75:9c:2f:63:db:aa:
c5:86:74:48:29:9f:81:04:ae:de:79:1d:7b:90:2a:54:5d:c5:
f2:e7:67:1b:f4:cc:e2:3d:13:1a:09:05:fa:52:39:06:09:30:
39:e6:8e:43:de:35:a4:0e:81:96:9a:45:9b:32:cf:fe:39:a5:
5f:7d:4e:29:41:b6:26:42:2a:21:58:37:bf:d6:8f:b0:ae:6b:
3b:55:b3:fa:4e:c7:68:67:d7:96:c9:b7:8e:bc:cc:dd:c3:66:
c9:af:b8:6b:e9:28:27:c7:53:ec:7a:08:cd:c0:4b:71:c3:e0:
c1:20:29:58:3b:dd:9d:17:d1:73:3b:24:a1:5c:7a:9b:31:af:
e3:1f:5f:c6:aa:a3:3d:61:60:dc:76:a6:ed:70:4e:06:c5:b7:
89:0c:63:26:8d:37:6f:55:5b:a8:29:64:58:eb:ba:e2:7b:2c:
a8:00:a2:ae:63:41:d3:80:37:0b:90:45:b8:ee:5c:f5:92:7c:
85:95:47:bf:35:df:ff:66:fc:fd:a9:da:7d:8c:dd:3b:06:72:
ea:c9:5c:f4:ff:26:79:11:2d:12:5f:af:fb:05:2d:a3:2f:10:
8f:36:26:a2:d9:6c:e5:dd:e0:d5:7f:b5:43:96:1a:6a:5b:f2:
db:55:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:29 2026 by rpki-client