Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/YzrPc4Y4pPlN55hEgIkEkXkzmOg.roa
File: YzrPc4Y4pPlN55hEgIkEkXkzmOg.roa (raw, json)
Hash identifier: L7XMntrSf8P0FuNYCf1vgwakPu4Zitwf+8q5pJAB5Uw=
Subject key identifier: 63:3A:CF:73:86:38:A4:F9:4D:E7:98:44:80:89:04:91:79:33:98:E8
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 01A187F2E5257EF046E190C98C8C8F28BE4F
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/YzrPc4Y4pPlN55hEgIkEkXkzmOg.roa
Signing time: Thu 29 Oct 2026 13:56:44 +0000
ROA not before: Thu 29 Oct 2026 13:56:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41783
IP address blocks: 2a00:7c00::/32 maxlen: 39
2a00:7c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f2:e5:25:7e:f0:46:e1:90:c9:8c:8c:8f:28:be:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Oct 29 13:56:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=633acf738638a4f94de7984480890491793398e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:3b:2c:5c:70:35:ac:e4:45:ce:84:f4:47:
8b:68:8a:db:c4:f6:9a:e1:82:42:11:f8:f0:4b:50:
b7:0a:56:00:ee:7a:81:16:31:5d:e7:c0:53:7a:ee:
03:4e:59:94:27:d2:8b:b4:ee:2e:e0:c1:c1:12:de:
bf:ab:45:d8:75:cb:50:76:1e:0d:b2:35:94:4d:4f:
ba:25:0d:71:22:f4:2a:af:20:ee:ce:2f:e1:56:c4:
f4:d3:d4:fd:f7:42:d6:21:57:a0:c0:f1:13:4d:0f:
8a:2b:7a:b8:6b:20:61:96:20:fe:a2:08:28:06:92:
29:e2:c9:0e:8f:74:f5:72:d5:b6:45:ae:48:67:9b:
50:3f:02:8f:87:a0:9c:98:73:53:e0:0e:ed:4d:a3:
1f:a8:57:95:6a:d2:02:1c:2f:6a:2f:f8:c9:27:8b:
44:4d:26:09:86:f2:b2:ef:32:6f:96:50:48:56:8e:
18:83:a5:60:8f:de:24:62:f6:9b:93:08:85:21:e5:
5c:c7:f4:e0:7d:c4:6e:6d:82:14:cb:15:21:a6:24:
25:c1:11:6b:c9:84:9d:4a:11:69:b6:ef:b2:c7:5c:
89:fc:66:86:91:73:fd:b6:4c:27:e2:d5:55:ec:9e:
b4:12:ff:7f:36:e0:2f:4f:c1:a3:c1:9c:5f:a9:9a:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:CF:73:86:38:A4:F9:4D:E7:98:44:80:89:04:91:79:33:98:E8
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/YzrPc4Y4pPlN55hEgIkEkXkzmOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
16:43:4d:ea:d0:05:25:8d:45:c3:3e:91:7b:49:a7:80:c9:5a:
a0:6a:f0:64:f8:cf:e1:01:56:81:c1:06:45:f3:66:60:c4:1b:
3a:6b:d1:7f:c9:2f:73:c5:1e:4a:32:fd:fd:be:81:45:26:f0:
16:1d:64:b2:db:ec:ff:0e:f2:7d:52:d2:45:71:2c:76:25:84:
a6:87:91:13:81:c9:0d:a7:a6:00:08:3f:71:e7:f9:02:b4:12:
f2:f9:82:dc:03:41:bd:df:c4:d8:a6:7e:3f:23:82:20:e1:0e:
7a:53:39:87:3e:81:a7:4a:1d:56:47:ee:78:70:98:21:51:9d:
24:8d:38:ed:42:99:01:c0:32:cc:64:2d:6f:c0:1a:b2:94:66:
8c:1e:b7:59:2b:c0:da:50:45:1d:ea:83:87:52:6f:0a:2c:22:
96:dd:90:88:32:65:43:df:49:e4:a0:58:ae:31:1e:ad:ee:19:
3b:c2:01:3e:38:ca:ee:de:3a:80:3d:db:f9:5a:08:c5:68:7c:
fd:fa:4f:77:6e:71:2d:cb:55:ce:f7:28:b0:e7:61:78:14:70:
15:87:49:bb:11:17:6e:54:4f:6d:e3:b9:57:7d:44:fe:28:80:
ed:22:11:a3:b3:52:b9:70:92:53:8d:f1:85:31:d8:fa:03:14:
a1:36:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:45 2026 by rpki-client