Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ytRLSY1CbGiBe5zYt958h9wYsCE.roa
File: ytRLSY1CbGiBe5zYt958h9wYsCE.roa (raw, json)
Hash identifier: zccJJuwnMpZnEQ5y7Y01z2OE+66jJMg8/rH8gYtFO3U=
Subject key identifier: CA:D4:4B:49:8D:42:6C:68:81:7B:9C:D8:B7:DE:7C:87:DC:18:B0:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019DD123F6B158F0DBA4574D4AF70A3D3B7F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ytRLSY1CbGiBe5zYt958h9wYsCE.roa
Signing time: Mon 27 Apr 2026 22:51:28 +0000
ROA not before: Mon 27 Apr 2026 22:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de02:400::/38 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:23:f6:b1:58:f0:db:a4:57:4d:4a:f7:0a:3d:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 27 22:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cad44b498d426c68817b9cd8b7de7c87dc18b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:18:c9:8b:e8:bb:db:ba:b1:a0:de:4c:a9:
0f:63:a9:3c:64:1f:53:4e:6d:1b:6e:60:4b:aa:fd:
d0:5a:73:f9:40:03:1e:c1:14:74:d2:14:aa:12:56:
7a:ca:5e:f8:e3:d5:0e:13:33:0c:5e:23:d5:01:95:
92:f2:7a:b5:e3:1c:ed:cd:01:e9:4d:6d:e0:15:83:
6f:b4:16:6a:a0:cc:26:53:94:37:f0:5e:dd:77:d1:
59:59:f5:5b:39:ff:de:0d:70:f9:19:81:07:90:5b:
ae:e7:2b:aa:bd:3d:b1:31:ce:ca:64:6c:f6:99:06:
c0:af:fc:20:67:1f:f3:5e:1f:22:55:e4:d6:0a:93:
91:b0:a7:43:70:9c:25:0c:41:13:da:1b:60:ef:7e:
60:26:e0:b9:0b:63:e7:4c:30:b4:6b:75:9c:b4:23:
dd:74:0c:5e:ee:fc:67:7e:ab:d7:01:4d:ac:04:ba:
da:7e:a3:63:a7:44:cf:1e:3c:64:49:50:f3:b1:70:
5c:46:f9:cf:fa:72:c3:e3:31:ea:89:f6:b9:02:0c:
0a:7a:ab:97:28:04:40:c4:32:01:ee:24:b3:22:d0:
52:9a:a3:70:36:ea:c5:18:f2:35:ba:f8:ca:50:c2:
90:5b:c7:3a:07:15:67:ad:09:1b:2f:20:57:51:fe:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D4:4B:49:8D:42:6C:68:81:7B:9C:D8:B7:DE:7C:87:DC:18:B0:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ytRLSY1CbGiBe5zYt958h9wYsCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:400::/38
2a0c:3b87:ff00::/40
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
Signature Algorithm: sha256WithRSAEncryption
87:b1:50:80:2d:72:e5:89:24:48:98:e6:25:34:ac:15:c9:79:
0c:30:95:e6:bb:6c:e2:4a:87:46:e3:1e:86:18:a2:5c:c4:3a:
4e:a3:2c:1a:69:f8:dd:5c:bd:85:96:ec:06:72:11:80:ba:21:
1a:fe:7a:60:66:ec:6b:cd:eb:4d:fd:bd:f8:68:bc:da:72:1c:
31:1d:17:29:34:0f:ad:84:87:00:a3:68:a8:f1:70:61:b3:e1:
f0:08:27:1c:9a:f7:8e:15:a7:4e:17:4f:97:14:75:89:c3:99:
f4:2d:0e:93:ea:72:b6:73:6f:b6:24:2a:bb:c0:44:dc:a9:fc:
b6:57:61:d3:3a:07:c9:c5:7e:44:3e:c4:6d:54:4f:f0:dd:1b:
c0:ee:47:04:94:13:c7:79:09:d8:b6:6f:24:cf:c9:3d:17:65:
eb:0c:34:9f:d2:0a:c4:c1:64:28:f5:63:6f:00:a2:7b:1c:00:
48:90:69:8d:30:11:3b:b4:05:a1:58:2c:94:a6:a2:8a:64:10:
e9:04:99:11:a5:cc:fd:79:55:83:16:6a:3f:c9:3b:5b:a8:73:
05:71:87:23:65:82:ff:ef:49:46:11:75:c9:25:d4:56:67:e1:
e2:47:45:d4:19:b4:f4:d2:9d:4a:72:d1:0a:25:53:e1:37:13:
b8:06:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 15:57:23 2026 by rpki-client