Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Yi0TKtM0nQuln6ka8POKCK5eqkA.roa
File: Yi0TKtM0nQuln6ka8POKCK5eqkA.roa (raw, json)
Hash identifier: 1OzTKQ02jIhXuSZBpi43UbeD8IkwLG7/H92g3GIwi9E=
Subject key identifier: 62:2D:13:2A:D3:34:9D:0B:A5:9F:A9:1A:F0:F3:8A:08:AE:5E:AA:40
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A06D336EBD6BD8613DD7C7F353BCAC980B
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Yi0TKtM0nQuln6ka8POKCK5eqkA.roa
Signing time: Fri 04 Sep 2026 16:14:42 +0000
ROA not before: Fri 04 Sep 2026 16:14:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208711
IP address blocks: 2a0c:6d80:1000::/48 maxlen: 48
2a0c:6d80:1001::/48 maxlen: 48
2a0c:6d87:f3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:33:6e:bd:6b:d8:61:3d:d7:c7:f3:53:bc:ac:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Sep 4 16:14:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=622d132ad3349d0ba59fa91af0f38a08ae5eaa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:79:39:dd:3c:05:c1:f1:3f:df:7a:b3:b1:
f7:55:5f:08:64:15:59:1d:cf:9f:d9:3e:13:fe:52:
12:4d:77:09:7a:0c:4e:b5:a9:e2:39:b8:30:c5:51:
72:1a:57:c0:2d:6f:7e:9f:31:35:33:6f:a8:7d:95:
1e:d6:2a:b1:49:f7:5f:bb:2d:48:43:31:b7:94:ba:
20:9f:bd:6a:fa:f7:fa:50:4f:ae:1e:d1:53:1b:5e:
20:4c:7c:8f:ca:6d:d7:8e:38:2c:33:49:e1:4e:a1:
2b:97:b4:60:2e:33:a5:f2:2f:01:43:13:18:de:53:
9b:26:16:7e:05:11:c7:70:04:37:f1:3c:1c:bd:ca:
85:3a:bc:73:d3:6a:d4:8d:ea:aa:bc:40:0f:bf:f5:
2b:12:9a:bb:c2:92:cd:bb:07:4c:84:ad:ab:84:3b:
2e:64:3f:55:0a:09:8a:e6:ee:3f:e4:69:2f:ef:90:
33:24:b9:ae:9c:da:42:f8:41:4e:e8:ba:e8:a3:3d:
e1:64:d1:b4:53:bf:0a:88:8d:c8:01:34:39:e5:9d:
bb:e7:ca:c5:2d:4f:eb:8b:6a:9b:60:f8:fe:1b:bc:
f3:8d:b7:4d:a1:ef:78:c4:9c:82:83:d4:d0:05:00:
32:85:90:9a:e4:36:66:fc:1b:57:46:bc:6f:40:18:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:13:2A:D3:34:9D:0B:A5:9F:A9:1A:F0:F3:8A:08:AE:5E:AA:40
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Yi0TKtM0nQuln6ka8POKCK5eqkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d80:1000::/47
2a0c:6d87:f3e8::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2e:57:1b:f3:fc:c0:60:b9:d0:ef:5e:32:eb:de:1c:ed:4a:
65:c5:22:84:9b:53:34:c7:33:fb:96:48:74:8b:82:ed:63:32:
6b:2d:38:bc:bb:5e:89:65:a4:5c:eb:a6:84:a3:91:37:61:84:
a3:ea:4c:ef:ee:a8:d2:ce:a7:07:fe:45:e6:62:b2:20:df:9b:
ff:5a:76:30:9c:48:9c:f6:5c:8c:c6:d3:e9:ee:9d:7e:ed:88:
e9:4d:2c:0a:03:17:89:93:20:d0:48:d0:0e:47:02:63:3c:74:
e3:10:59:50:b2:88:c5:5a:54:6d:79:2b:6e:e9:87:97:4c:0d:
45:99:c2:d8:f9:09:5c:3f:d4:e0:cf:a3:ac:90:d7:a0:56:52:
79:61:dd:ca:f2:c6:fe:2d:13:19:53:b6:63:0d:04:60:30:22:
e4:fe:7d:c1:27:35:c7:cf:01:63:61:42:d7:76:a7:bd:8f:1e:
bd:d2:1a:b7:32:af:a7:ac:5b:a5:c5:49:2e:fa:97:00:ea:73:
7e:e5:dd:7a:e5:ad:57:ee:a0:40:b3:f5:39:33:b6:e6:7f:a4:
b1:99:cb:39:16:be:9f:28:c6:92:c8:a3:d0:fd:14:0c:d3:db:
79:f0:ad:37:a9:67:97:41:78:cc:8e:93:89:66:28:70:34:bc:
b8:5f:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:59:29 2026 by rpki-client