Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/YUvNuDDndHcf-AWuGGf2zqBhFIE.roa
File: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (raw, json)
Hash identifier: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=
Subject key identifier: 61:4B:CD:B8:30:E7:74:77:1F:F8:05:AE:18:67:F6:CE:A0:61:14:81
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 019C81C5740EF7D3D2504B091B5C4918A283
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/YUvNuDDndHcf-AWuGGf2zqBhFIE.roa
Signing time: Sat 21 Feb 2026 19:55:27 +0000
ROA not before: Sat 21 Feb 2026 19:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139803
IP address blocks: 2a14:e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c5:74:0e:f7:d3:d2:50:4b:09:1b:5c:49:18:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Feb 21 19:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=614bcdb830e774771ff805ae1867f6cea0611481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:2f:93:c9:ef:b2:8a:86:f6:2e:20:1d:9c:
5c:72:0b:30:28:04:3e:1f:1b:d7:32:a0:80:f4:68:
58:7e:b0:01:8e:01:c1:a7:5f:a1:80:8d:bf:95:e7:
a9:a3:f7:b3:19:fb:60:6a:45:bf:43:f1:35:ae:05:
ce:d7:99:a8:e5:06:17:0c:0e:ed:7c:4e:d1:e7:59:
8b:cd:0f:7a:a1:b3:dc:ed:94:11:ec:a0:dd:8d:85:
45:96:ab:ac:e9:d6:10:bc:3e:d1:5b:94:43:e5:64:
09:a8:d8:5f:79:04:d4:8f:80:9a:e4:bd:11:ed:ef:
e2:7b:75:49:ed:6f:02:06:06:53:1d:31:b8:48:9f:
16:73:10:72:fa:83:ef:3e:b6:31:1a:3f:1d:98:de:
ac:68:ac:9e:8c:b8:81:23:e6:87:6a:f3:0f:36:4c:
5f:38:97:b5:d5:59:dd:f2:27:ab:e1:b0:40:a1:af:
89:ac:b1:68:62:d8:f5:b7:f8:70:31:70:49:9e:d5:
67:15:93:16:73:95:65:84:fd:94:25:4d:b6:e0:57:
bc:33:5f:20:29:1f:54:a3:96:d7:e1:0a:84:a2:06:
66:71:36:a5:0e:08:bc:a6:e0:4a:d5:c2:0b:fa:e4:
26:c9:aa:bc:f5:e7:41:12:33:6a:29:b7:5e:a0:ab:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:CD:B8:30:E7:74:77:1F:F8:05:AE:18:67:F6:CE:A0:61:14:81
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/YUvNuDDndHcf-AWuGGf2zqBhFIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e00::/29
Signature Algorithm: sha256WithRSAEncryption
2a:4d:5b:4f:69:d6:ec:9f:b9:3c:19:b1:08:a5:85:11:8d:94:
d4:d2:15:98:02:b2:79:7e:5e:ff:4b:72:70:af:14:0f:de:1d:
ff:96:9c:be:8a:3f:96:a3:76:f9:70:a2:8e:26:90:40:81:0c:
8b:57:20:50:de:7e:6e:ee:23:ca:6c:f3:e2:07:8b:e2:0c:4c:
e4:3a:02:20:bc:9e:9c:d7:84:4e:4e:e9:11:8c:64:69:f3:02:
8f:80:35:f5:58:cf:cd:3e:82:d4:33:88:24:c8:61:87:07:67:
67:5d:bd:6f:b2:be:bd:ae:03:f1:ae:8d:82:91:2c:66:34:a4:
e1:6f:fb:28:b9:e5:09:91:25:59:a3:6a:c3:49:ca:c2:11:81:
de:f6:ac:af:2d:82:f0:50:61:00:28:45:9c:73:b3:09:3c:b1:
8c:28:09:95:6f:69:0b:b7:ca:7e:a4:49:2d:a2:d7:a3:ce:c2:
a6:1b:17:5a:1a:50:04:b6:9e:c8:bd:d4:3d:ce:c6:50:7a:e7:
58:dc:ff:00:28:15:b9:6e:18:af:3f:89:98:ca:bf:e8:36:69:
ef:c1:ed:1d:81:6f:a7:40:ba:01:7c:41:3f:78:18:1f:43:4d:
1d:50:6b:ad:e8:fd:c4:d4:11:13:7e:0e:a8:5b:5c:4b:12:da:
55:de:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:51:55 2026 by rpki-client