Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ykUSB7SnDLYVNU1H24F4Mon4faM.roa
File: ykUSB7SnDLYVNU1H24F4Mon4faM.roa (raw, json)
Hash identifier: qPljEv+Z7LpzikYCD2M1dh9iUZJ4rfcvFPJ/0nMq3UQ=
Subject key identifier: CA:45:12:07:B4:A7:0C:B6:15:35:4D:47:DB:81:78:32:89:F8:7D:A3
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01A0F2D8F4F1D4672CE914FCDB31DE1E99F5
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ykUSB7SnDLYVNU1H24F4Mon4faM.roa
Signing time: Wed 30 Sep 2026 15:04:59 +0000
ROA not before: Wed 30 Sep 2026 15:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3614
IP address blocks: 2a01:6f40:3200::/48 maxlen: 48
2a01:6f40:f100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d8:f4:f1:d4:67:2c:e9:14:fc:db:31:de:1e:99:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Sep 30 15:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca451207b4a70cb615354d47db81783289f87da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:28:92:82:3d:6b:cf:fe:6f:4c:a5:b0:ce:
45:c2:3d:fb:0d:e4:9e:05:fb:f1:49:d3:23:5c:9a:
39:2e:cb:a6:a1:dd:0e:87:72:35:58:89:f6:f4:09:
58:e4:4d:4c:c3:c7:2b:6e:ee:57:18:60:98:b5:d8:
83:bc:6a:8a:d1:ec:b6:8b:ed:bd:65:b9:47:ba:6b:
7e:bc:d4:ff:b6:e5:fb:6d:2c:89:21:cd:34:6c:4d:
3f:e7:f1:00:78:de:c5:5f:bb:2c:d2:fe:38:dc:1e:
65:64:95:14:02:a8:d7:94:9f:96:54:36:09:78:33:
40:48:55:2c:a0:77:5a:9c:59:1e:7f:e8:8c:c2:7a:
83:1e:74:be:7a:9b:fd:be:e1:1e:96:65:02:d1:52:
23:59:85:4f:11:4a:67:43:c3:1d:04:23:98:04:cf:
78:0b:a5:b8:ba:30:0b:b3:af:8d:12:83:84:55:6e:
f8:53:f8:dc:da:9b:91:78:1e:ff:9b:99:3e:f5:72:
2e:a0:b9:90:37:dd:fb:19:95:ce:36:e1:c6:06:96:
67:d1:05:eb:60:7c:2d:4d:eb:cf:db:4b:84:28:f8:
33:6d:1d:76:68:bc:c1:da:99:7f:32:1a:6c:01:8e:
bb:2f:ab:29:91:e8:47:44:6d:e4:e5:c9:9c:dd:5a:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:12:07:B4:A7:0C:B6:15:35:4D:47:DB:81:78:32:89:F8:7D:A3
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ykUSB7SnDLYVNU1H24F4Mon4faM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f40:3200::/48
2a01:6f40:f100::/48
Signature Algorithm: sha256WithRSAEncryption
62:d1:63:0c:72:63:f7:27:5d:78:72:c0:26:7c:08:9f:1f:f9:
6b:01:52:81:58:09:da:94:90:96:d8:0e:45:a2:2a:8b:f6:0c:
7a:ec:d2:a3:bd:88:3d:58:f3:ca:93:02:1d:a5:cb:91:b5:cf:
81:2b:81:b6:96:b9:8f:0a:aa:60:b6:0e:90:da:50:a3:d6:ed:
45:9b:ba:cf:9e:d5:e9:93:3d:49:af:9a:cf:7d:df:ef:48:2b:
dc:0c:f2:8f:9a:39:7c:c1:6d:39:97:d1:50:07:79:30:fd:af:
a9:09:01:5b:53:cc:b7:29:e6:9c:07:3f:be:ac:75:51:4a:fc:
f7:3e:62:29:e4:73:45:19:01:a5:4d:c8:4c:c0:6c:0a:24:d1:
ed:d0:30:5e:41:24:f5:ab:c8:6f:6c:27:2a:a8:b9:47:63:09:
3b:15:82:28:ee:20:2f:48:fa:63:e6:8e:c5:62:0b:9c:11:eb:
26:c3:5e:10:3d:51:07:0a:ee:4e:d7:2a:40:d0:6f:40:1d:72:
ab:28:f5:65:43:d6:15:be:5f:ec:84:92:80:24:39:7c:f1:51:
7b:b1:5b:ed:3e:0f:9b:ef:3a:62:74:90:20:35:21:09:83:1c:
93:13:9e:68:b6:65:04:8f:d2:a5:31:8f:17:84:02:fd:54:58:
f6:32:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:24:33 2026 by rpki-client