Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/fyrwpSpHOQ51MD8HtpifeJqSkG4.roa
File: fyrwpSpHOQ51MD8HtpifeJqSkG4.roa (raw, json)
Hash identifier: o8gKMzDK7KI5j5Qki30gQMXdbKnHqlaCMrDbLfOew8Q=
Subject key identifier: 7F:2A:F0:A5:2A:47:39:0E:75:30:3F:07:B6:98:9F:78:9A:92:90:6E
Certificate issuer: /CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Certificate serial: 019CFAC91BBD881FDF57326F92ACD9B836E7
Authority key identifier: 1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/fyrwpSpHOQ51MD8HtpifeJqSkG4.roa
Signing time: Tue 17 Mar 2026 07:53:29 +0000
ROA not before: Tue 17 Mar 2026 07:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200394
IP address blocks: 2001:678:11f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:c9:1b:bd:88:1f:df:57:32:6f:92:ac:d9:b8:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Validity
Not Before: Mar 17 07:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f2af0a52a47390e75303f07b6989f789a92906e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:b5:ac:57:e4:5a:d9:21:ed:09:53:e2:3a:
b5:a7:1b:5e:69:1e:d0:76:b8:77:81:3d:b7:14:22:
bf:a7:d3:d2:6d:a5:b1:50:64:f3:00:fe:1a:94:8e:
aa:34:7c:27:30:19:2a:68:02:0f:22:3d:b4:fe:30:
bc:d6:09:2d:47:0e:30:b9:52:bc:94:cd:07:a2:83:
70:76:eb:72:90:a5:af:b4:ad:81:72:c3:0d:63:84:
a8:ea:1b:9a:bb:69:8d:8c:ce:f2:c1:1e:32:81:ff:
40:1d:83:af:8c:85:3b:f2:7b:65:64:9a:9a:77:c6:
8f:17:ae:16:07:5f:d8:1b:ef:43:e9:67:fe:3e:10:
79:19:5a:f0:3e:e9:15:25:e5:23:d2:2c:4f:86:14:
f6:27:68:f0:ec:a7:27:e3:2f:cd:a2:ab:ed:3c:92:
6b:58:3c:58:90:e1:12:af:93:ae:96:2f:bc:f0:cd:
1b:8b:aa:42:a9:ff:9c:46:49:5e:ca:26:5f:37:1c:
e2:3d:50:37:7a:6d:1b:b6:18:5b:98:50:db:15:45:
9f:b2:62:aa:b0:1b:31:9b:4f:9c:c1:a0:2d:61:9c:
37:f6:b2:54:03:ce:1c:94:f8:8d:50:1d:7e:3f:0e:
0f:c0:03:1f:30:d4:9f:ed:0e:96:15:8c:bd:a0:63:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:F0:A5:2A:47:39:0E:75:30:3F:07:B6:98:9F:78:9A:92:90:6E
X509v3 Authority Key Identifier:
keyid:1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/fyrwpSpHOQ51MD8HtpifeJqSkG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11f0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ed:7a:d8:fc:bc:c8:1a:fd:0a:ba:7c:f0:ba:2f:2e:73:b5:
5e:4d:64:3a:73:18:b4:7a:85:30:aa:61:59:d4:ca:1f:2b:ba:
a9:27:ac:a0:02:79:7d:47:b4:ba:7c:8b:52:76:4e:cb:37:9a:
3e:b0:b7:3d:53:73:50:19:0d:30:55:f5:46:50:b6:65:2a:64:
eb:dc:1f:dc:1f:38:27:ee:36:d0:23:d9:96:db:b2:04:28:f7:
1f:91:a7:ac:70:b9:08:7d:c9:8d:e6:79:55:fd:14:47:67:7c:
0e:db:ec:4b:36:8b:b1:21:95:21:f1:71:05:b6:55:46:49:13:
6c:d8:aa:b6:b7:93:c7:94:4a:d0:01:27:4d:bf:2c:fc:48:13:
6f:3a:8e:57:40:40:e3:97:22:a2:64:d3:d8:68:f1:e1:82:f0:
72:f9:6a:ca:da:2c:d0:d8:5d:f5:fc:7e:8a:9f:26:44:b6:d2:
f8:a8:94:80:86:f3:af:c2:00:03:4b:db:4c:77:70:02:81:a0:
bf:44:fe:f3:f4:aa:52:cc:49:fc:f6:3f:03:94:3a:1d:7b:1e:
78:c5:ac:d0:ef:ca:8b:59:3f:1f:f1:9b:15:c1:3a:c4:a4:43:
4f:43:71:bb:e4:03:8d:12:5b:54:5c:30:ef:0d:eb:bb:cd:61:
72:63:dd:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZz6yRu9iB/fVzJvkqzZuDbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZWMxMThjMjUzN2ViNzUyZDc2ODVjYzE5ZmQzZWM0MzBm
NTA1ZmMwHhcNMjYwMzE3MDc1MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjJhZjBhNTJhNDczOTBlNzUzMDNmMDdiNjk4OWY3ODlhOTI5MDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Vi1rFfkWtkh7QlT4jq1pxteaR7Q
drh3gT23FCK/p9PSbaWxUGTzAP4alI6qNHwnMBkqaAIPIj20/jC81gktRw4wuVK8
lM0HooNwdutykKWvtK2BcsMNY4So6huau2mNjM7ywR4ygf9AHYOvjIU78ntlZJqa
d8aPF64WB1/YG+9D6Wf+PhB5GVrwPukVJeUj0ixPhhT2J2jw7Kcn4y/NoqvtPJJr
WDxYkOESr5Ouli+88M0bi6pCqf+cRkleyiZfNxziPVA3em0bthhbmFDbFUWfsmKq
sBsxm0+cwaAtYZw39rJUA84clPiNUB1+Pw4PwAMfMNSf7Q6WFYy9oGO40wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH8q8KUqRzkOdTA/B7aYn3iakpBuMB8GA1UdIwQY
MBaAFBrsEYwlN+t1LXaFzBn9PsQw9QX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3V3UmpDVTM2M1V0ZG9YTUdmMC14REQxQmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80NDI5MzItZjJiZS00NDdmLTllMWEt
YTNhNzFkZDdiYTNkLzEvZnlyd3BTcEhPUTUxTUQ4SHRwaWZlSnFTa0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80NDI5MzItZjJiZS00NDdmLTllMWEtYTNhNzFkZDdiYTNk
LzEvR3V3UmpDVTM2M1V0ZG9YTUdmMC14REQxQmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBHw
MA0GCSqGSIb3DQEBCwUAA4IBAQCd7XrY/LzIGv0Kunzwui8uc7VeTWQ6cxi0eoUw
qmFZ1MofK7qpJ6ygAnl9R7S6fItSdk7LN5o+sLc9U3NQGQ0wVfVGULZlKmTr3B/c
Hzgn7jbQI9mW27IEKPcfkaescLkIfcmN5nlV/RRHZ3wO2+xLNouxIZUh8XEFtlVG
SRNs2Kq2t5PHlErQASdNvyz8SBNvOo5XQEDjlyKiZNPYaPHhgvBy+WrK2izQ2F31
/H6KnyZEttL4qJSAhvOvwgADS9tMd3ACgaC/RP7z9KpSzEn89j8DlDodex54xazQ
78qLWT8f8ZsVwTrEpENPQ3G75AONEltUXDDvDeu7zWFyY90v
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:00:06 2026 by rpki-client