Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/Y_kJgwYcLxfHFK-hDprVQNf83do.roa
File: Y_kJgwYcLxfHFK-hDprVQNf83do.roa (raw, json)
Hash identifier: DCwv0PzIFQilQFeAzqabJ2tsH00RHEjxYWERtBFTK7o=
Subject key identifier: 63:F9:09:83:06:1C:2F:17:C7:14:AF:A1:0E:9A:D5:40:D7:FC:DD:DA
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 019FC81FCFE2F3A085A1E254A535FB1332DE
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/Y_kJgwYcLxfHFK-hDprVQNf83do.roa
Signing time: Mon 03 Aug 2026 14:55:55 +0000
ROA not before: Mon 03 Aug 2026 14:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a0a:7a80::/48 maxlen: 48
2a0a:7a80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:1f:cf:e2:f3:a0:85:a1:e2:54:a5:35:fb:13:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Aug 3 14:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f90983061c2f17c714afa10e9ad540d7fcddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b2:b3:e0:17:03:04:56:50:e4:f6:e0:bf:77:
53:11:29:27:39:7b:04:71:91:c0:b7:12:85:0b:1b:
ff:6c:a0:bf:60:bb:1d:73:b5:f3:fa:07:09:9f:b4:
8d:12:45:56:28:af:4d:4c:67:72:a0:ab:87:1f:0e:
a5:5d:06:b2:05:bb:9b:98:c7:bf:2f:02:68:14:a9:
22:54:6c:cb:6c:70:43:f8:64:6f:a2:96:85:82:6c:
17:ee:0f:62:41:5d:f8:b1:50:78:08:54:ac:2a:42:
f5:5b:e1:64:09:cd:70:a5:71:c6:25:8d:8a:f9:c6:
dc:d2:d1:5e:fa:b0:39:08:ee:99:22:fe:a1:de:f1:
02:7d:d1:67:6d:af:55:1c:b2:b0:57:4b:0c:42:c5:
85:ea:f1:23:0b:08:a7:41:1b:b7:6d:89:69:5b:a2:
5e:30:c9:1f:58:3b:b7:e4:77:ef:b7:51:aa:d2:f1:
66:ed:15:6c:5a:eb:c6:47:40:06:9e:ec:d0:8e:a1:
f8:e8:ff:1c:05:9c:50:61:d7:6b:05:7b:f6:f4:36:
eb:58:be:50:10:8b:13:7c:2c:eb:e2:94:b6:89:76:
80:9b:ce:0c:4c:97:6b:fe:7e:b9:e3:72:41:ea:14:
a6:25:b1:6e:52:2c:ef:ec:7a:74:9c:f9:30:c3:6c:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F9:09:83:06:1C:2F:17:C7:14:AF:A1:0E:9A:D5:40:D7:FC:DD:DA
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/Y_kJgwYcLxfHFK-hDprVQNf83do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7a80::/47
Signature Algorithm: sha256WithRSAEncryption
00:5b:63:f2:e5:18:2c:74:85:7a:7d:32:fe:87:b9:cc:86:91:
ee:60:9e:61:e5:f8:59:c2:0a:81:f1:d4:ad:4c:ab:73:b2:a9:
85:f0:a4:c9:80:f4:49:5e:2b:05:d8:71:9f:25:1b:68:99:83:
ff:79:02:3e:1a:86:7b:a0:3a:a9:f5:8f:87:3a:a7:56:6b:d4:
de:3e:02:b1:ad:82:38:67:6c:0a:ec:42:23:a4:30:64:6e:dc:
cd:bd:fe:d9:11:5d:57:cc:7f:8e:a4:4b:02:3d:9c:69:63:94:
c0:c5:21:6b:0d:9b:61:be:23:ef:e6:54:7f:bd:36:e2:5e:0f:
8a:08:ed:d8:ab:5a:be:07:c9:85:e9:6e:34:67:eb:ee:82:79:
d0:bc:0f:84:19:6c:06:86:73:40:a5:53:f1:05:50:a6:61:60:
8f:12:d4:5b:ac:55:24:46:25:b4:3f:dc:71:72:4c:27:53:a1:
10:0d:3b:33:1d:56:73:80:8f:f6:62:02:6c:02:43:c8:88:ca:
b0:32:a7:f9:d7:89:af:fa:6b:6f:a1:65:46:cd:7a:e2:fb:ef:
c7:1d:2b:19:ff:1d:57:f9:5b:48:ac:27:4b:bb:5c:b3:7b:33:
a9:6d:5e:db:a4:4b:8d:cd:75:04:e8:ef:ed:38:a8:1b:31:47:
c2:bc:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:58 2026 by rpki-client