Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/_yaKaBJToAURUuy5J_2ZX4emX3Q.roa
File: _yaKaBJToAURUuy5J_2ZX4emX3Q.roa (raw, json)
Hash identifier: vHbpbkcmG93GMQUubXccTbTZeqYaiq3hArr0LKitXxY=
Subject key identifier: FF:26:8A:68:12:53:A0:05:11:52:EC:B9:27:FD:99:5F:87:A6:5F:74
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A1534563FA5A0D9A7A790B25445BEF53A1
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/_yaKaBJToAURUuy5J_2ZX4emX3Q.roa
Signing time: Mon 19 Oct 2026 08:26:58 +0000
ROA not before: Mon 19 Oct 2026 08:26:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a0d:36c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:45:63:fa:5a:0d:9a:7a:79:0b:25:44:5b:ef:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 08:26:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff268a681253a0051152ecb927fd995f87a65f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:22:db:4e:fe:f0:28:14:bf:35:b8:c2:2e:
6b:55:a6:db:56:91:40:47:6a:35:0d:26:f8:4f:3d:
78:0e:ea:ae:67:fb:b6:b1:04:c4:da:d4:14:28:ce:
7e:a3:e3:b7:7f:5e:61:7f:b2:ff:04:37:14:0a:33:
8e:8f:9b:2e:38:cc:d8:11:25:7f:70:36:0b:f3:f2:
c1:67:ad:6c:95:72:fd:90:46:a9:de:c0:89:6a:8d:
e3:c4:87:82:a2:f5:98:45:4d:34:66:0f:05:30:d9:
45:f5:18:7c:32:92:88:dc:0d:98:b4:ab:b0:30:ab:
41:a9:76:49:7e:6f:ca:13:ad:11:ef:43:92:90:46:
d2:dc:84:fb:ce:2e:48:3b:fc:18:1a:1a:eb:c6:23:
9e:7c:6a:7d:72:eb:eb:c2:bf:69:23:84:86:0d:c0:
f1:d9:14:97:47:a9:60:09:96:ea:d3:2f:d5:61:d3:
00:f9:44:7e:82:43:9d:39:3c:78:e6:5e:51:8c:00:
e8:8b:e3:49:55:37:7d:c2:f9:07:e4:2f:d3:40:97:
ca:12:df:af:26:15:3c:fd:a9:6e:4c:1b:4f:bb:4d:
8f:fe:48:98:54:2c:32:38:c8:a0:a2:75:42:06:a7:
10:3e:c1:e3:0d:87:53:31:fe:e0:5e:f9:40:dd:5a:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:26:8A:68:12:53:A0:05:11:52:EC:B9:27:FD:99:5F:87:A6:5F:74
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/_yaKaBJToAURUuy5J_2ZX4emX3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:ce:ff:c4:b4:f4:af:e1:10:6b:f5:7b:96:a3:6c:89:b5:83:
48:2b:9f:2f:a0:59:a0:f4:2a:66:3e:5a:49:b4:2b:8a:66:66:
49:9c:88:3b:40:95:ac:99:6b:7b:be:ed:62:b3:f7:0d:aa:6f:
82:76:d9:54:bc:d4:1c:df:33:f1:bc:43:c9:94:20:66:15:40:
ea:8b:15:20:e6:75:c0:fc:29:0b:20:ed:4c:56:b3:a2:3a:06:
8e:4f:39:5b:b3:c9:fa:47:8e:40:f5:96:bc:b6:ce:cd:2a:43:
80:5f:b0:28:c0:eb:6d:32:91:ed:35:99:f8:b9:bb:cf:23:14:
8a:db:56:69:bf:5d:43:5c:a1:c2:0a:8c:fa:5a:73:c7:8b:02:
73:c4:41:41:26:23:74:ec:4f:34:6c:71:bd:c2:b6:81:1f:d3:
48:53:4d:8f:11:1e:90:65:e9:53:2f:12:9b:4c:67:55:cf:ba:
c2:7b:d5:ea:7b:10:6b:27:29:4c:92:18:8e:30:85:36:81:d4:
6a:28:a2:01:fb:05:86:62:71:69:ef:14:a6:94:0b:23:5c:f6:
49:ab:99:0e:3f:9f:5d:92:05:89:de:48:a5:ed:df:ba:b6:f0:
46:30:00:b3:0c:68:e1:8b:44:13:cf:93:9d:4b:e7:cc:40:c1:
18:0c:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:58:29 2026 by rpki-client