Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/pY_d7PzwdRe72ZyovRiTQ9CbMek.roa
File: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (raw, json)
Hash identifier: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=
Subject key identifier: A5:8F:DD:EC:FC:F0:75:17:BB:D9:9C:A8:BD:18:93:43:D0:9B:31:E9
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 019F23691758B08959FFBF0E477ED3D47E3F
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/pY_d7PzwdRe72ZyovRiTQ9CbMek.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a02:fa8:c800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:17:58:b0:89:59:ff:bf:0e:47:7e:d3:d4:7e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a58fddecfcf07517bbd99ca8bd189343d09b31e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:08:23:44:16:dc:3a:ac:0c:10:fa:6f:b4:
1e:df:59:9f:d6:74:40:29:3c:30:b0:fa:14:e7:94:
98:75:b1:1e:36:4b:a7:d8:88:4f:44:f0:06:cd:a8:
33:17:7a:46:8e:6c:a3:9c:7f:c8:f4:24:d8:61:f5:
53:38:dd:b4:47:a5:92:8a:c0:41:5e:73:5b:5c:9c:
bc:8c:8c:0d:4d:41:e0:f0:6c:80:97:40:bf:d1:a6:
94:58:d7:e2:fd:bd:c4:2e:0a:9b:62:02:46:05:80:
ee:d6:90:20:80:96:76:0e:5f:3f:1e:cf:f6:a6:18:
be:3f:80:31:fd:78:7e:5c:19:32:6b:19:2e:af:12:
0c:ce:31:94:2d:3e:04:78:6c:6a:eb:ea:38:44:6a:
a5:f7:03:d4:0b:7e:7a:f8:b0:b6:25:43:28:a7:f9:
5c:72:23:8c:49:2d:9e:ac:6f:35:5d:db:1a:69:2f:
ee:95:d2:02:c2:bb:81:90:94:39:e2:04:65:67:f0:
3e:e4:28:3a:b9:cc:77:ed:17:17:c7:8b:21:5d:6f:
77:99:c6:f1:0b:eb:1e:03:a8:64:ff:04:24:36:a5:
12:6b:1f:97:be:63:86:ea:27:9c:cc:58:a0:f5:e0:
05:6a:47:9d:d0:19:c3:07:0c:ba:ca:ae:7c:6b:3e:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:DD:EC:FC:F0:75:17:BB:D9:9C:A8:BD:18:93:43:D0:9B:31:E9
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/pY_d7PzwdRe72ZyovRiTQ9CbMek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:fa8:c800::/40
Signature Algorithm: sha256WithRSAEncryption
24:00:b3:e3:95:30:48:85:e0:80:e5:e0:61:1e:ac:8a:51:3b:
08:f1:d9:0d:08:20:d8:0a:44:9d:29:ce:d8:b6:eb:32:0e:1a:
10:62:d7:be:72:49:bc:2a:e8:fc:90:aa:ac:b6:02:77:1a:56:
f7:80:b8:33:ea:ca:a9:8c:df:b9:9e:ed:38:b1:34:d3:d7:1e:
1d:60:67:d0:a0:68:cb:ad:94:5c:75:c3:ec:12:95:3c:85:46:
77:ee:76:5a:23:b8:89:0f:47:a6:1b:c2:25:ae:e2:7c:97:72:
f3:43:11:5b:b3:06:c2:1a:2a:af:52:e6:d6:26:a5:53:e3:3a:
dc:11:2d:00:82:75:56:82:6b:9c:fc:b6:4c:1d:d2:f4:00:e2:
be:1e:eb:8f:c3:8d:54:c8:ec:1f:fc:96:95:81:e7:ed:89:a2:
ee:45:6f:4c:20:fa:12:1b:05:ee:ad:80:54:8f:54:05:ba:19:
b7:ed:20:41:3e:2c:48:d8:bf:ad:12:a2:56:3a:b0:f3:57:86:
c6:53:4c:63:f1:20:20:c6:73:8b:30:6b:a5:f7:ec:27:23:f9:
09:19:ef:0c:2c:3c:43:4b:12:fa:62:cf:53:c8:23:92:cd:5f:
bf:41:59:44:31:a9:5e:2f:c5:b3:91:13:79:c3:35:35:91:dc:
53:2e:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:05 2026 by rpki-client