Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/SaLyrzOVkPMNcUgJ-agcEtNN_wE.roa
File: SaLyrzOVkPMNcUgJ-agcEtNN_wE.roa (raw, json)
Hash identifier: n/lhDwiBc2IlpI9ji0jtmUdFOMimdU+g53JEQ9lVips=
Subject key identifier: 49:A2:F2:AF:33:95:90:F3:0D:71:48:09:F9:A8:1C:12:D3:4D:FF:01
Certificate issuer: /CN=6d3afb688f6415a9b12db431eb9088c4325ca4db
Certificate serial: 01A1579B0203B9BFB0A118D71D19213011FF
Authority key identifier: 6D:3A:FB:68:8F:64:15:A9:B1:2D:B4:31:EB:90:88:C4:32:5C:A4:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTr7aI9kFamxLbQx65CIxDJcpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/SaLyrzOVkPMNcUgJ-agcEtNN_wE.roa
Signing time: Tue 20 Oct 2026 04:38:58 +0000
ROA not before: Tue 20 Oct 2026 04:38:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219216
IP address blocks: 2001:678:f7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTr7aI9kFamxLbQx65CIxDJcpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:9b:02:03:b9:bf:b0:a1:18:d7:1d:19:21:30:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3afb688f6415a9b12db431eb9088c4325ca4db
Validity
Not Before: Oct 20 04:38:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49a2f2af339590f30d714809f9a81c12d34dff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:49:eb:df:75:b6:44:22:79:67:ab:e5:15:
c5:98:1c:d3:dc:a3:1e:dd:46:53:f1:3f:b2:a3:67:
ec:f3:c4:e8:90:3f:c9:9f:7b:37:fd:01:2c:28:68:
df:69:37:96:ad:0d:c7:64:c4:6c:24:a2:cd:8b:3b:
be:55:64:aa:69:3e:ee:71:21:17:b0:09:20:a3:e9:
06:ca:02:50:78:ac:10:da:12:87:46:1d:cd:32:3b:
32:1f:20:72:c0:b8:98:f0:00:a6:9f:da:2a:8f:69:
ce:2d:60:83:e9:5d:16:55:30:9b:08:51:91:f1:98:
9e:be:29:02:a2:c7:8d:d9:1c:ea:9e:56:d7:77:84:
60:21:a5:e9:47:a9:d6:a6:0f:18:27:ba:a0:3c:54:
88:c6:bc:10:f7:74:30:1e:d8:06:2a:cc:74:bc:f2:
12:90:34:9a:26:1d:69:11:9c:77:c9:17:91:9d:82:
23:89:eb:87:7d:b5:91:3c:1f:aa:3c:1a:80:7b:37:
37:13:92:d6:32:6b:18:a4:93:dc:ca:12:92:7c:d9:
e9:da:f9:f5:d4:df:71:c5:a7:d3:23:81:2a:32:8f:
0e:c0:c9:46:20:b3:be:59:9b:59:e0:71:f5:9a:d7:
ec:82:6d:c1:36:02:81:4c:33:c3:6f:c8:06:d6:85:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:F2:AF:33:95:90:F3:0D:71:48:09:F9:A8:1C:12:D3:4D:FF:01
X509v3 Authority Key Identifier:
keyid:6D:3A:FB:68:8F:64:15:A9:B1:2D:B4:31:EB:90:88:C4:32:5C:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTr7aI9kFamxLbQx65CIxDJcpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/SaLyrzOVkPMNcUgJ-agcEtNN_wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f7c::/48
Signature Algorithm: sha256WithRSAEncryption
9f:6d:04:41:18:4c:83:3d:5f:40:b1:e9:e5:b7:30:81:b9:0d:
95:0d:0a:43:10:8a:bc:f9:68:ff:7a:19:6a:48:0f:dd:e9:12:
86:07:5b:68:6d:ba:79:da:9e:58:54:30:28:39:3f:0f:50:85:
39:d1:e3:68:be:49:a2:b9:fe:d6:88:eb:51:5d:70:cc:2e:46:
2f:5c:42:05:30:88:d3:03:cc:5a:dc:b4:a8:b2:c7:d6:cd:f3:
f7:36:41:d6:e0:7c:b5:0f:a9:a2:ae:12:21:a6:ae:16:73:0e:
a8:b5:1f:8b:9b:e2:aa:80:21:b9:2d:55:89:85:00:c9:d3:eb:
80:9a:2f:9a:31:40:47:fa:a6:47:61:51:e0:5b:90:12:2d:d2:
bd:43:6b:c3:ea:bf:fc:96:1b:38:78:99:51:0f:ba:af:b2:7e:
8b:9e:03:fe:c4:8c:04:d9:3e:6e:6a:52:70:09:b5:e1:4a:a9:
66:08:63:90:02:f6:6a:74:0e:ef:aa:37:12:36:8d:14:64:44:
8c:6a:43:98:c2:87:01:13:3e:1a:c2:94:05:27:04:3a:08:49:
52:a5:99:c2:c2:f2:38:f1:ee:ce:4b:2b:4a:be:a5:4a:31:c8:
41:b3:9a:09:f0:8f:d4:f6:5e:34:c0:19:c3:43:c6:fc:c1:29:
c0:67:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:20 2026 by rpki-client