Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ycnm2cens5bCRtTeD39ckMoXXxM.roa
File: ycnm2cens5bCRtTeD39ckMoXXxM.roa (raw, json)
Hash identifier: Ryt1cg2xEdBRniHULv+E+GghFRPcni7T5mhKRi+y2DY=
Subject key identifier: C9:C9:E6:D9:C7:A7:B3:96:C2:46:D4:DE:0F:7F:5C:90:CA:17:5F:13
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019CB41602998D8382BE5457F51ACC5A7501
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ycnm2cens5bCRtTeD39ckMoXXxM.roa
Signing time: Tue 03 Mar 2026 14:24:27 +0000
ROA not before: Tue 03 Mar 2026 14:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62282
IP address blocks: 2a0f:7b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:16:02:99:8d:83:82:be:54:57:f5:1a:cc:5a:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Mar 3 14:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9c9e6d9c7a7b396c246d4de0f7f5c90ca175f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:20:80:36:14:b2:f6:49:f7:2e:bc:fb:fe:
6b:1e:ea:40:52:d3:97:e9:c9:50:ee:e2:b3:40:53:
a6:c2:ef:52:8c:28:33:1d:15:e7:b3:f0:ba:7c:4c:
b7:bf:b0:d4:78:2e:15:1e:94:2b:fc:57:3e:3b:4a:
a2:7e:2e:47:45:7f:d5:c2:e9:a6:d8:70:a7:6b:a0:
e8:03:ba:aa:2f:d1:24:b9:30:21:1b:5d:42:ad:8e:
ca:30:4f:88:b2:d1:e9:4a:43:e0:0e:d0:05:08:85:
c7:2b:ef:d3:ec:48:45:36:73:57:e7:1c:a6:31:0f:
d7:62:26:ce:b6:1a:03:f3:35:ad:41:d9:48:fc:f7:
50:71:ad:f6:00:c5:49:75:15:9c:e6:84:3d:8a:86:
1a:c7:95:db:c9:d2:73:eb:2f:c7:1b:b1:44:d7:a8:
b9:dd:33:2c:c4:66:9b:19:13:aa:22:9a:bb:1d:a9:
61:fd:4c:a7:d5:b9:41:70:3c:27:bf:0c:91:13:d3:
3b:3b:2e:b9:4f:75:51:51:50:38:d3:8c:c6:ce:fc:
ae:73:d3:8d:04:34:29:ea:22:74:39:6d:15:83:c7:
4b:02:64:df:f3:9a:9d:06:65:b9:82:b5:08:21:b7:
f4:0a:39:ac:8f:48:b4:2d:c8:d4:ea:67:73:ad:23:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:E6:D9:C7:A7:B3:96:C2:46:D4:DE:0F:7F:5C:90:CA:17:5F:13
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ycnm2cens5bCRtTeD39ckMoXXxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7b80::/48
Signature Algorithm: sha256WithRSAEncryption
7a:f8:d8:e4:cb:6c:b6:de:8c:a8:9b:68:96:eb:de:ea:e9:37:
50:3d:0a:c3:8d:59:af:b2:e8:c4:d7:e3:f8:cb:56:55:91:7e:
82:79:68:40:37:a3:df:c3:f2:00:0e:7d:b8:05:80:02:e9:0c:
b1:f4:95:14:c0:45:8a:cf:47:70:7e:de:12:f1:2f:34:77:f9:
47:4b:c8:c3:21:84:8d:89:60:b5:9d:d8:a2:81:6f:6e:bc:22:
76:43:93:b8:00:d7:a2:57:04:cb:c5:b0:23:db:24:09:5d:71:
b2:ab:71:d9:6c:51:bd:5c:b5:9d:3a:30:4a:48:40:0a:ff:1f:
8a:be:01:53:23:b3:3b:7f:24:14:0a:cc:fb:c4:19:73:ee:f3:
76:42:5a:b7:68:a9:d9:6d:b1:10:82:e6:fc:58:5b:54:f6:e3:
7d:00:98:40:eb:c3:c9:d8:c3:cd:ee:19:df:26:aa:07:67:9d:
36:d0:ce:16:b4:70:5e:bc:4d:ef:43:d6:95:77:74:d5:7d:6a:
d8:a3:46:d8:4c:e6:3f:27:e1:8a:35:3a:eb:1b:42:7e:28:8f:
24:b7:7f:74:9a:6e:31:49:09:0b:ad:73:72:93:ce:5a:0c:2b:
15:f7:3d:68:d4:8d:d9:ac:21:39:f5:63:cb:d6:c0:f9:0e:2a:
ee:b1:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 06:32:41 2026 by rpki-client