Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/YvtjptatjqmyOJ5dWiYNCaNVHNw.roa
File: YvtjptatjqmyOJ5dWiYNCaNVHNw.roa (raw, json)
Hash identifier: vqsnJS8MTkP2zPINTDhaE68IIjn4PpmoL3l1eAqImU0=
Subject key identifier: 62:FB:63:A6:D6:AD:8E:A9:B2:38:9E:5D:5A:26:0D:09:A3:55:1C:DC
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A10EB52B92ACE28C1A861B38367CFFEA80
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/YvtjptatjqmyOJ5dWiYNCaNVHNw.roa
Signing time: Tue 06 Oct 2026 00:55:16 +0000
ROA not before: Tue 06 Oct 2026 00:55:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218758
IP address blocks: 2a14:c380:2a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:b5:2b:92:ac:e2:8c:1a:86:1b:38:36:7c:ff:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Oct 6 00:55:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62fb63a6d6ad8ea9b2389e5d5a260d09a3551cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:7c:de:69:f2:89:15:c9:8a:c2:6c:00:fa:
76:1e:cb:cd:48:25:49:12:fb:a6:e1:00:4c:0b:2e:
da:53:c1:3e:5b:b5:c8:5b:a2:b7:a3:19:30:c9:24:
a5:e6:69:c4:50:4b:3e:0c:f5:07:07:c9:0b:76:e5:
47:ca:b7:81:93:7d:ad:6d:0d:74:2d:02:4f:81:4b:
03:83:fc:51:33:45:17:22:8a:b8:75:cd:34:61:03:
0b:8a:09:4a:d4:5a:12:b2:45:c5:8d:fa:09:5a:ef:
27:ea:5b:68:0a:c1:9d:54:98:2a:1e:30:5b:09:92:
91:df:8b:db:10:6d:e4:35:27:b1:e4:39:a9:bd:1d:
41:46:35:85:9d:75:7c:ad:5f:25:0a:09:b2:7b:7f:
80:ce:7e:4a:cd:23:90:55:de:a9:0c:96:58:95:81:
13:6d:cb:67:21:29:61:15:f8:23:4f:38:a0:18:c1:
56:c0:94:93:01:65:44:38:48:a7:56:8e:10:00:ad:
27:ce:95:04:34:fd:81:a4:0b:f4:77:47:c7:73:4f:
c9:be:c4:bc:0f:6e:17:02:a2:89:15:4f:77:1c:59:
29:7b:6f:da:55:9d:47:11:5a:e8:c7:64:e2:51:58:
0a:bf:9c:e4:6a:84:2f:23:2a:6d:0e:eb:23:a8:28:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FB:63:A6:D6:AD:8E:A9:B2:38:9E:5D:5A:26:0D:09:A3:55:1C:DC
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/YvtjptatjqmyOJ5dWiYNCaNVHNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:2a::/47
Signature Algorithm: sha256WithRSAEncryption
62:9b:90:d8:36:e9:6d:92:d4:2c:af:83:f2:ec:7d:59:31:74:
37:01:d0:39:55:ab:ec:c8:d5:72:54:7f:98:c3:1b:ae:e9:46:
3f:fc:ff:7b:d7:d1:fb:28:3a:01:27:f4:f3:73:c2:9f:01:01:
4a:bd:55:c6:37:17:87:bc:49:c1:16:50:cc:25:d1:fa:18:c8:
a4:09:da:25:87:a9:bc:ed:5c:c8:36:2a:33:ec:d1:ba:4e:86:
e7:a3:24:75:1d:0e:e2:47:a7:83:62:45:fd:67:76:08:03:94:
a0:06:de:e2:a0:89:32:18:07:db:ae:a6:31:24:d7:6f:4c:83:
0a:49:66:9b:9c:49:f6:e4:c0:00:77:c2:60:2e:bb:42:44:92:
66:6c:e8:bc:85:e9:ef:e1:f7:87:1b:ca:b3:74:81:bb:be:a5:
fc:7f:da:aa:5a:63:b2:c1:77:1b:5c:d9:9f:5c:dc:3f:7a:ec:
11:93:53:e9:20:5b:04:25:9a:8b:5b:24:64:df:93:49:a4:d0:
a5:80:4d:7a:9c:c7:b6:5c:cf:7c:a4:22:d3:bb:f4:3d:0b:20:
fb:7c:a1:5b:83:f5:b4:01:ba:75:a3:39:9d:a7:a8:28:53:8d:
9b:67:b2:d4:69:56:25:73:90:3f:d8:d8:da:4e:12:91:76:ed:
75:72:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:49 2026 by rpki-client