Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yb6nglPXnI0i_NzfvKKeAmlH03E.roa
File: yb6nglPXnI0i_NzfvKKeAmlH03E.roa (raw, json)
Hash identifier: k/Qzjb20TzfNDZ9dOGumR5wBCcO9spf+nOa1a6/D1P0=
Subject key identifier: C9:BE:A7:82:53:D7:9C:8D:22:FC:DC:DF:BC:A2:9E:02:69:47:D3:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF6A352050220868D7E7187B76FE6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yb6nglPXnI0i_NzfvKKeAmlH03E.roa
Signing time: Sun 13 Sep 2026 09:14:30 +0000
ROA not before: Sun 13 Sep 2026 09:14:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59922
IP address blocks: 2a0e:b107:13de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f6:a3:52:05:02:20:86:8d:7e:71:87:b7:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9bea78253d79c8d22fcdcdfbca29e026947d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:2d:4e:17:3c:be:14:1c:b2:5a:0f:cd:45:
d6:f9:2c:e6:d6:41:7c:28:69:c4:6f:59:e4:d8:6c:
52:b3:25:84:ac:68:bc:fe:3f:b1:3b:23:65:2a:62:
bf:62:ed:63:0e:ec:ca:30:da:63:49:27:a8:57:99:
cd:22:54:16:e4:ae:1b:28:72:98:b8:08:a6:d5:95:
33:35:9c:25:39:b7:df:73:6f:b1:0d:0c:1e:3a:8a:
36:57:4c:72:35:ce:19:57:e7:1e:94:df:87:59:5e:
52:a0:26:3d:dc:27:e5:c9:66:10:dc:a5:93:a5:f5:
40:05:91:be:ca:77:99:82:3c:81:ae:e4:3a:01:0c:
f0:0c:4d:63:41:7c:99:bf:a2:f8:c5:81:59:e6:34:
0f:fa:cc:bd:f8:f2:79:01:74:55:50:c2:7a:31:40:
4e:59:b9:de:86:66:03:89:c2:51:74:cf:ad:4d:0b:
b8:69:bd:1f:a7:39:77:96:04:bd:92:46:27:b2:11:
68:87:15:a2:5f:b5:71:0d:e7:8c:50:5f:22:4d:90:
da:e5:e1:54:3a:d6:a4:d9:0e:0e:16:e8:b6:c3:aa:
d0:51:04:08:b8:38:ae:e7:b3:53:b0:94:f8:97:72:
95:6b:0a:b0:8b:85:4d:bf:6c:a8:3c:28:b6:3e:92:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:A7:82:53:D7:9C:8D:22:FC:DC:DF:BC:A2:9E:02:69:47:D3:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yb6nglPXnI0i_NzfvKKeAmlH03E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13de::/48
Signature Algorithm: sha256WithRSAEncryption
94:bb:f2:08:8a:a0:db:33:6a:12:ea:52:3c:49:bf:c6:3a:4f:
01:be:28:8d:a8:0b:84:5c:32:50:ae:a0:e8:47:ae:0e:65:43:
6a:0f:47:b7:b1:64:5f:5c:d8:91:a7:c8:0a:f9:b7:55:64:d3:
b4:84:c7:93:91:58:8c:88:76:65:2e:77:b2:28:76:19:7e:ab:
ca:43:cf:15:7c:00:4d:a6:d3:ac:38:81:32:4c:c9:87:10:af:
44:54:ba:71:44:fc:98:e5:e5:b2:66:5b:43:6a:75:09:ef:74:
ac:26:fc:07:85:e5:3e:66:d2:1f:0b:e2:42:3c:86:2b:43:44:
30:71:ca:cd:00:a7:06:f7:8d:b9:19:14:91:ce:57:12:75:79:
29:9a:cc:6d:6a:63:ed:18:ff:c3:69:50:00:76:d1:2f:63:9b:
79:a0:cf:05:6c:b8:ea:b3:2a:b0:f5:ad:b9:e0:99:40:5e:0d:
88:f6:53:3e:f2:12:b4:17:b7:9c:fa:d0:c5:6e:39:d2:87:16:
28:8e:3e:21:e0:af:ea:19:59:9a:91:c7:e1:e9:4f:8a:99:c7:
e2:08:87:19:5a:d0:8e:a9:05:2d:da:2b:f4:dc:a3:d4:ea:05:
93:64:80:78:a0:19:b3:93:f9:23:90:fc:54:ca:34:f3:1c:44:
9f:9b:88:48
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCaC/ajUgUCIIaNfnGHt2/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTEzMDkxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWJlYTc4MjUzZDc5YzhkMjJmY2RjZGZiY2EyOWUwMjY5NDdkMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+QtThc8vhQcsloPzUXW+Szm1kF8
KGnEb1nk2GxSsyWErGi8/j+xOyNlKmK/Yu1jDuzKMNpjSSeoV5nNIlQW5K4bKHKY
uAim1ZUzNZwlObffc2+xDQweOoo2V0xyNc4ZV+celN+HWV5SoCY93CflyWYQ3KWT
pfVABZG+yneZgjyBruQ6AQzwDE1jQXyZv6L4xYFZ5jQP+sy9+PJ5AXRVUMJ6MUBO
WbnehmYDicJRdM+tTQu4ab0fpzl3lgS9kkYnshFohxWiX7VxDeeMUF8iTZDa5eFU
Otak2Q4OFui2w6rQUQQIuDiu57NTsJT4l3KVawqwi4VNv2yoPCi2PpKHlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMm+p4JT15yNIvzc37yingJpR9NxMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveWI2bmdsUFhuSTBpX056ZnZLS2VBbWxIMDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxPe
MA0GCSqGSIb3DQEBCwUAA4IBAQCUu/IIiqDbM2oS6lI8Sb/GOk8BviiNqAuEXDJQ
rqDoR64OZUNqD0e3sWRfXNiRp8gK+bdVZNO0hMeTkViMiHZlLneyKHYZfqvKQ88V
fABNptOsOIEyTMmHEK9EVLpxRPyY5eWyZltDanUJ73SsJvwHheU+ZtIfC+JCPIYr
Q0QwccrNAKcG9425GRSRzlcSdXkpmsxtamPtGP/DaVAAdtEvY5t5oM8FbLjqsyqw
9a254JlAXg2I9lM+8hK0F7ec+tDFbjnShxYojj4h4K/qGVmakcfh6U+KmcfiCIcZ
WtCOqQUt2iv03KPU6gWTZIB4oBmzk/kjkPxUyjTzHESfm4hI
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:45 2026 by rpki-client