Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RYAorAaCA-6hzLtyZthDp1xk9ko.roa
File: RYAorAaCA-6hzLtyZthDp1xk9ko.roa (raw, json)
Hash identifier: bnIMSAzbvOzKFr/vKhK8uq4LXGgyPwtgUFiibLtyRHY=
Subject key identifier: 45:80:28:AC:06:82:03:EE:A1:CC:BB:72:66:D8:43:A7:5C:64:F6:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019C827542510EDF8B29704284B2BF76D664
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RYAorAaCA-6hzLtyZthDp1xk9ko.roa
Signing time: Sat 21 Feb 2026 23:07:28 +0000
ROA not before: Sat 21 Feb 2026 23:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 2a06:de00:f0d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:82:75:42:51:0e:df:8b:29:70:42:84:b2:bf:76:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 21 23:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=458028ac068203eea1ccbb7266d843a75c64f64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:8d:eb:c6:8b:ff:8c:97:2f:30:25:b6:b5:
b0:cd:a1:9a:28:4f:0b:89:3d:dd:91:4f:33:c6:a0:
32:4c:8a:83:84:86:64:e1:11:e0:2d:8c:0b:60:19:
15:ff:a3:b2:37:7d:64:e9:ca:14:69:eb:1c:6d:2e:
49:66:08:03:60:0c:03:76:6b:34:d5:2c:2a:dc:61:
9a:4b:11:f0:fb:44:e6:65:08:0f:e6:87:f8:99:e6:
af:66:72:14:20:06:5f:7e:74:d8:b5:64:25:d6:d7:
c0:ab:8c:fc:21:ac:31:74:13:37:26:f9:05:5c:2b:
90:dd:26:0d:d3:b9:d3:41:46:de:f9:e5:d1:85:31:
07:bc:fe:5c:2c:d2:9f:cb:61:ae:e2:6b:52:f4:8d:
da:39:cf:47:0c:2e:a2:40:fe:ee:bd:3c:a8:b9:db:
2a:1e:ee:35:51:fb:9f:8d:ed:b5:f8:1f:28:96:ef:
34:8a:08:2a:5d:61:5b:77:09:b3:75:b2:57:d5:46:
a8:9d:75:f0:1e:6a:dc:07:c5:fc:5e:da:ce:07:b2:
23:df:e6:10:7e:d1:8a:a3:59:fe:27:af:0d:b0:8d:
be:9b:f1:1f:5e:59:b8:a9:da:8c:0e:72:ef:f3:ca:
1c:85:32:45:44:76:5d:82:f6:6a:71:36:0c:0e:e2:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:28:AC:06:82:03:EE:A1:CC:BB:72:66:D8:43:A7:5C:64:F6:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RYAorAaCA-6hzLtyZthDp1xk9ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0d0::/44
Signature Algorithm: sha256WithRSAEncryption
ab:3b:88:5b:f7:3a:36:00:39:aa:3f:77:e2:30:63:ef:31:7a:
0c:65:9b:2c:18:ba:1c:bb:9c:4c:56:32:53:34:7f:00:3c:d9:
42:c4:ec:5a:73:45:30:f1:d6:7a:f4:85:35:27:b3:be:35:f8:
f3:e4:1c:63:26:9f:28:3d:a8:19:99:f4:c9:13:23:ad:b8:59:
db:13:4a:5b:01:ab:a4:ae:d8:b6:7e:63:cf:55:a6:10:40:1f:
10:71:a8:d9:6b:8b:06:8d:f8:10:7b:64:2e:2a:23:22:d2:db:
5b:4d:87:e5:e3:a3:43:bc:c0:60:a1:50:9d:9b:33:54:8b:a7:
cf:c2:d3:21:ce:61:d3:b1:3a:3f:5c:53:18:d3:fa:54:ab:f3:
5e:eb:7d:fc:6b:e9:11:2f:42:57:ee:8e:b0:ee:6b:f5:f9:6a:
27:51:17:1e:eb:84:bf:d3:ea:92:36:68:f2:ec:fc:97:ec:82:
a6:0c:d1:b5:cd:e4:40:7b:da:d1:19:07:01:c1:80:d5:b6:90:
f9:33:34:d9:fe:b4:5c:d1:92:73:85:d5:18:64:07:6b:b3:ad:
15:04:d1:ef:1d:90:ed:b8:65:b6:1f:24:bc:bf:ca:14:e9:9a:
78:f4:89:0c:bc:cf:14:a9:11:7b:76:fb:bb:d8:e5:1e:7e:62:
55:05:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:39 2026 by rpki-client