Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/9JYN1wYmxe_AVEYEb-tvNJt4wXs.roa
File: 9JYN1wYmxe_AVEYEb-tvNJt4wXs.roa (raw, json)
Hash identifier: RDG6KFAF2TBM/tVB3Upl2HxfF3n9lpu5tr8kAIb8xhc=
Subject key identifier: F4:96:0D:D7:06:26:C5:EF:C0:54:46:04:6F:EB:6F:34:9B:78:C1:7B
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 01A159F50C25659D3371764660E3C1C96283
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/9JYN1wYmxe_AVEYEb-tvNJt4wXs.roa
Signing time: Tue 20 Oct 2026 15:36:33 +0000
ROA not before: Tue 20 Oct 2026 15:36:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10104
IP address blocks: 2a12:f8c0::/32 maxlen: 48
2a12:f8c0:2100::/40 maxlen: 40
2a12:f8c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:f5:0c:25:65:9d:33:71:76:46:60:e3:c1:c9:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Oct 20 15:36:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4960dd70626c5efc05446046feb6f349b78c17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:16:16:7c:93:6e:98:7d:20:1a:d5:52:94:
27:45:f3:3a:5b:9a:6d:e1:29:ae:1c:2a:f7:64:ef:
f0:f6:17:85:77:4c:cf:62:ea:91:a8:c9:8a:b1:e7:
9a:29:72:c0:64:bf:69:03:75:6b:38:bc:51:b2:36:
02:34:8e:3b:ce:11:c5:3a:62:63:5d:8b:3c:c6:0c:
cd:32:f3:ca:af:e8:8f:70:06:ff:5f:7f:84:44:29:
5c:d7:4e:1b:e7:ba:ec:0e:7a:e5:6f:ac:91:8f:75:
01:bd:9c:a3:10:22:bd:64:2a:43:4c:b1:b4:9c:a4:
39:13:f3:20:ff:ef:ad:37:04:b6:01:7b:2b:95:b4:
5d:07:17:12:23:15:17:26:17:31:e9:3b:1a:c9:5d:
bd:00:ad:e0:87:5b:6e:57:bf:f8:08:58:2d:85:0a:
ff:42:6a:a9:a1:1b:83:38:1d:86:80:4d:96:ca:81:
60:2b:64:0f:5e:e3:28:02:b7:3c:35:82:f2:62:38:
f8:bf:c0:2f:7f:4a:17:7f:f7:f4:c9:76:02:2b:57:
68:bf:35:5e:63:24:17:9e:fb:a2:3f:4c:92:4d:60:
55:3f:08:f0:3d:54:2c:90:cf:d6:a4:4c:0d:e5:88:
7e:48:6c:45:40:0a:16:a9:40:ce:6a:6b:98:0c:18:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:0D:D7:06:26:C5:EF:C0:54:46:04:6F:EB:6F:34:9B:78:C1:7B
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/9JYN1wYmxe_AVEYEb-tvNJt4wXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c0::-2a12:f8c1:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:cc:8a:86:4a:62:21:52:30:f1:f6:38:3b:09:a5:19:70:52:
d5:80:81:e5:17:22:cd:20:19:f5:a3:33:22:2d:b1:ce:4b:41:
20:78:b4:99:d7:a5:76:20:26:0d:16:dc:d7:95:12:4b:e9:61:
1f:47:5c:64:e4:98:96:7a:fe:96:f6:16:1f:db:4a:cb:93:df:
ca:dc:36:8e:9a:53:f3:45:e5:2a:46:94:ff:9e:0f:3b:43:52:
62:94:eb:28:81:af:e8:b9:7e:a2:1f:84:24:4c:4b:41:d4:6b:
a1:e4:c6:80:ba:28:1d:51:f7:d4:4e:71:f8:ca:ec:f0:ac:91:
15:af:90:fc:fd:1c:ac:8b:70:8d:a7:17:df:b2:96:62:45:5e:
f5:a6:0d:1a:87:a2:d9:fc:0d:a8:fe:92:ab:d2:4d:be:64:94:
a0:69:61:a4:54:bf:7d:d0:3c:e0:be:75:5d:19:1e:be:8b:44:
3f:2f:0b:39:5a:05:e5:e6:0f:f6:c1:b5:b2:2c:53:d5:4e:02:
15:e2:7e:f6:5e:a7:5a:88:4c:18:58:81:39:65:9e:33:e1:3d:
29:aa:ac:5c:17:b0:19:19:8c:89:39:0f:17:a0:cc:90:96:c7:
24:4d:65:e3:b9:72:67:e2:46:e2:cf:42:85:c9:e8:8c:4d:2a:
a0:df:f0:b1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFZ9QwlZZ0zcXZGYOPByWKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjYxMDIwMTUzNjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDk2MGRkNzA2MjZjNWVmYzA1NDQ2MDQ2ZmViNmYzNDliNzhjMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0toWFnyTbph9IBrVUpQnRfM6W5pt
4SmuHCr3ZO/w9heFd0zPYuqRqMmKseeaKXLAZL9pA3VrOLxRsjYCNI47zhHFOmJj
XYs8xgzNMvPKr+iPcAb/X3+ERClc104b57rsDnrlb6yRj3UBvZyjECK9ZCpDTLG0
nKQ5E/Mg/++tNwS2AXsrlbRdBxcSIxUXJhcx6TsayV29AK3gh1tuV7/4CFgthQr/
QmqpoRuDOB2GgE2WyoFgK2QPXuMoArc8NYLyYjj4v8Avf0oXf/f0yXYCK1dovzVe
YyQXnvuiP0ySTWBVPwjwPVQskM/WpEwN5Yh+SGxFQAoWqUDOamuYDBhj+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPSWDdcGJsXvwFRGBG/rbzSbeMF7MB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvOUpZTjF3WW14ZV9BVkVZRWItdHZOSnQ0d1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQYqEvjA
AwcAKhL4wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQAezIqGSmIhUjDx9jg7CaUZcFLV
gIHlFyLNIBn1ozMiLbHOS0EgeLSZ16V2ICYNFtzXlRJL6WEfR1xk5JiWev6W9hYf
20rLk9/K3DaOmlPzReUqRpT/ng87Q1JilOsoga/ouX6iH4QkTEtB1Guh5MaAuigd
UffUTnH4yuzwrJEVr5D8/Rysi3CNpxffspZiRV71pg0ah6LZ/A2o/pKr0k2+ZJSg
aWGkVL990DzgvnVdGR6+i0Q/Lws5WgXl5g/2wbWyLFPVTgIV4n72XqdaiEwYWIE5
ZZ4z4T0pqqxcF7AZGYyJOQ8XoMyQlsckTWXjuXJn4kbiz0KFyeiMTSqg3/Cx
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:35 2026 by rpki-client