Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YMjIQgC9PRRNHRjW7XfLmp1YG44.roa
File: YMjIQgC9PRRNHRjW7XfLmp1YG44.roa (raw, json)
Hash identifier: J3lyVvrX02DkjekpSdbALvSempvl22wZtSmNUfKcOrk=
Subject key identifier: 60:C8:C8:42:00:BD:3D:14:4D:1D:18:D6:ED:77:CB:9A:9D:58:1B:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ED3FF61034FDC2229D93EC86008E5A8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YMjIQgC9PRRNHRjW7XfLmp1YG44.roa
Signing time: Mon 14 Sep 2026 07:31:28 +0000
ROA not before: Mon 14 Sep 2026 07:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209218
IP address blocks: 2a0e:b107:a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d3:ff:61:03:4f:dc:22:29:d9:3e:c8:60:08:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60c8c84200bd3d144d1d18d6ed77cb9a9d581b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:90:da:d7:2d:60:05:a3:45:ac:55:6a:86:
0d:28:b8:bf:12:f3:5a:aa:9a:ec:17:7a:32:88:f7:
1b:d7:8e:78:ca:6b:43:f2:ad:72:c3:e9:92:bc:e3:
ca:d3:13:3e:e1:31:a0:4d:20:9b:cf:72:19:34:d7:
68:e4:63:7e:d9:9b:c7:23:d7:b4:ad:f2:fd:aa:95:
7e:5d:62:5e:82:59:23:3b:12:d6:0e:41:42:51:4e:
52:73:ad:5e:b2:a0:39:51:54:89:56:66:ee:4c:47:
6e:54:b8:49:b3:17:3c:4e:d1:e4:0b:69:6e:19:72:
fb:21:a7:23:75:1c:49:32:22:d0:52:68:ab:97:80:
25:15:45:2c:68:37:35:30:35:40:a1:95:cd:a2:16:
d0:42:ed:3e:3c:61:a1:1d:f8:6a:d8:b4:8f:cd:e7:
b1:76:d1:17:a2:b2:a3:16:93:4f:9d:9d:fe:42:61:
dd:31:15:0e:7f:b6:b3:bb:01:3f:99:38:d2:d3:65:
85:e4:39:cf:ac:95:54:dc:ce:b9:b8:2e:4a:0f:23:
17:db:4b:13:b7:1f:f6:1e:ba:e5:ff:0f:74:de:36:
cc:fa:b1:d0:d4:13:95:a8:37:8e:94:08:bd:df:87:
ba:ad:d3:de:8f:e6:2d:93:25:10:82:fd:23:5a:20:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C8:C8:42:00:BD:3D:14:4D:1D:18:D6:ED:77:CB:9A:9D:58:1B:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YMjIQgC9PRRNHRjW7XfLmp1YG44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:a0::/44
Signature Algorithm: sha256WithRSAEncryption
9b:94:54:6c:24:b6:ee:63:f7:a8:a5:43:13:e6:c0:7a:49:d8:
74:30:fd:ab:41:40:5e:ff:19:54:18:2a:83:38:18:c7:64:5b:
1f:fd:98:6e:52:1a:32:45:da:0b:77:ef:c2:c6:23:e2:7e:94:
85:4a:5f:b1:f8:69:37:b9:d2:77:97:ef:83:4f:66:db:d3:2c:
76:32:48:03:c2:2d:9c:37:db:11:24:5f:8c:50:bc:4b:81:6d:
60:07:9c:11:67:0c:2d:47:8a:b8:e9:5a:3f:33:c9:63:23:b1:
77:49:e2:f2:7b:3f:98:85:f5:37:6a:13:63:e1:75:66:e2:ec:
3e:e6:05:cb:0d:f0:6a:41:90:77:92:d9:6c:c9:07:62:4a:3e:
f6:ca:cc:1a:e1:a6:bf:f3:7a:73:0b:f6:0a:8f:c3:a8:bc:7e:
77:7b:72:69:d5:c5:49:17:53:64:f5:04:5a:85:c0:e9:a1:89:
d2:cc:20:5e:da:88:99:24:1e:c5:86:b7:18:f8:78:58:7e:04:
9e:54:c8:34:3d:8b:08:c6:0a:20:53:d5:b2:89:9c:38:82:d5:
25:39:d9:02:1c:be:d1:6f:84:3f:39:7a:e3:da:9d:e4:56:c2:
dd:7e:1a:67:34:d1:1b:00:e3:31:2b:d9:ed:89:3c:d0:d2:ea:
b1:60:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:05 2026 by rpki-client