Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/yPocXyo0wM15CfpCV2ozbAzCSDw.roa
File: yPocXyo0wM15CfpCV2ozbAzCSDw.roa (raw, json)
Hash identifier: e4EEGO1LSdmX1fvabs60VDppXi6LDj4Q+m/T6fkVFi0=
Subject key identifier: C8:FA:1C:5F:2A:34:C0:CD:79:09:FA:42:57:6A:33:6C:0C:C2:48:3C
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 01A145CEF8F864907CC7227BC0615763E157
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/yPocXyo0wM15CfpCV2ozbAzCSDw.roa
Signing time: Fri 16 Oct 2026 17:42:34 +0000
ROA not before: Fri 16 Oct 2026 17:42:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41666
IP address blocks: 2001:678:ca0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:ce:f8:f8:64:90:7c:c7:22:7b:c0:61:57:63:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Oct 16 17:42:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8fa1c5f2a34c0cd7909fa42576a336c0cc2483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:d7:5a:22:8c:1f:a5:c7:a1:2a:57:40:83:
2e:6b:83:c2:ac:cd:ab:33:d6:f6:93:07:d1:7f:6c:
c0:3e:31:83:80:47:9e:8d:3c:33:7c:9d:69:ce:ed:
47:7d:06:a7:fe:e5:d4:47:21:d2:99:2d:20:77:b5:
9f:eb:c3:6a:81:ea:69:ef:f5:dc:ad:60:51:58:07:
23:7a:96:25:1f:9d:18:08:89:0c:5a:b2:8d:d7:e4:
08:67:b4:8d:2d:2d:fc:35:ea:81:68:e6:9b:55:a7:
65:cd:0f:cf:97:e1:0b:3a:f9:ac:f1:c5:07:dc:ed:
88:f8:82:e5:d0:9a:cf:a7:95:f6:bf:2f:6d:55:f8:
59:e3:8d:eb:71:3f:43:43:c2:d2:96:fc:bc:ba:ab:
10:38:eb:3a:55:d5:9f:7f:d2:ef:7b:e2:b9:9c:c1:
b8:bd:9b:07:60:03:5c:7d:8c:b3:34:3a:ca:ff:c8:
bb:6b:68:be:f4:57:d3:b2:5d:ea:b2:a6:74:e6:46:
e4:f5:c4:48:11:29:d5:00:95:e4:00:ed:36:67:7e:
f3:21:6a:eb:2b:22:ed:61:6c:53:b4:99:2c:bc:fa:
26:bf:e7:79:fe:a4:8a:c4:d3:8a:4e:6a:a5:21:1e:
89:1f:db:8e:36:88:89:1a:0d:bc:d2:e3:52:20:49:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:1C:5F:2A:34:C0:CD:79:09:FA:42:57:6A:33:6C:0C:C2:48:3C
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/yPocXyo0wM15CfpCV2ozbAzCSDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ca0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:5e:80:e3:87:e7:17:93:e0:eb:40:bf:a7:2c:d0:09:69:39:
aa:8d:3f:1c:41:66:03:85:10:9f:28:5f:90:3c:54:e5:d0:10:
a3:92:0d:82:05:48:a6:67:6b:76:96:49:78:9a:82:76:f1:e5:
be:ba:b0:61:e5:6f:65:ac:ba:68:77:5e:bb:49:9b:1d:a3:90:
d2:57:47:9d:03:ae:74:83:06:c4:72:ff:87:7d:e3:1b:d5:62:
2b:a9:1d:a3:75:08:25:b4:63:1e:01:93:c9:0e:08:30:ba:44:
1b:10:29:e8:31:28:4e:84:7d:58:68:c8:b3:1e:40:42:8b:e8:
04:f6:1a:ae:a0:4e:b4:05:17:60:96:2a:fe:7f:5c:f8:97:3e:
5d:92:60:6b:1e:37:d8:e9:3e:de:7b:22:36:52:2f:69:0c:0d:
bd:86:c9:6b:01:02:ab:d7:07:81:5f:9b:29:a2:a1:6f:ee:11:
09:dd:14:07:73:99:d7:ee:3e:53:b1:49:ac:ed:22:dd:11:65:
f5:26:5e:3e:51:0a:e6:d1:6e:e7:d8:ee:ce:7c:c2:c3:c9:95:
1a:de:6c:6b:bb:f6:4e:58:38:95:69:38:5a:24:cd:11:56:a9:
68:76:d7:d8:97:ab:ea:7c:a9:40:40:eb:b0:9c:ca:76:46:02:
31:a5:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:06:59 2026 by rpki-client