Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/ywjtNco2pu0di9usK0-X8Cc6kao.roa
File: ywjtNco2pu0di9usK0-X8Cc6kao.roa (raw, json)
Hash identifier: LN/p+C3FGMBTzAhEoyis0ILkEQqZ496AxoDRCQp3DJM=
Subject key identifier: CB:08:ED:35:CA:36:A6:ED:1D:8B:DB:AC:2B:4F:97:F0:27:3A:91:AA
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0848D99971783CF8F63A2067BA51EE628
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/ywjtNco2pu0di9usK0-X8Cc6kao.roa
Signing time: Wed 09 Sep 2026 05:04:27 +0000
ROA not before: Wed 09 Sep 2026 05:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a11:b040::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:8d:99:97:17:83:cf:8f:63:a2:06:7b:a5:1e:e6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 9 05:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb08ed35ca36a6ed1d8bdbac2b4f97f0273a91aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:83:8f:9c:fc:42:ea:06:d3:6d:37:e4:ad:
81:08:54:78:8e:eb:36:7f:72:24:78:61:4e:f9:68:
24:2d:a6:ec:0a:b7:db:8b:3d:77:c3:81:49:48:5c:
4a:66:b9:f3:b5:e4:4d:82:e9:ff:68:78:15:26:e5:
32:e6:8a:50:39:f0:66:fc:fc:e4:5e:6c:fa:6e:f4:
4a:70:a6:a2:3d:61:4f:6f:7a:78:8a:2e:60:f5:c4:
b3:c3:c2:74:71:6c:d7:cd:1b:95:33:05:3e:1d:cf:
f8:a5:fd:ec:5d:93:9b:71:36:54:e9:01:d1:51:fe:
70:9c:ba:ac:cd:e0:6e:77:2a:74:bc:eb:fa:24:c8:
ad:81:5c:06:75:e7:c7:fb:cb:d0:d4:6d:d7:69:81:
3d:41:8d:56:7f:e1:3b:be:53:38:6e:b4:d8:7c:49:
4f:f5:e5:fd:6c:a5:b9:71:58:b8:08:5e:b8:e8:33:
16:83:8b:e4:fd:69:91:fd:19:8f:06:13:06:c8:cc:
54:55:d0:ff:ad:96:30:84:d0:f7:28:98:e2:15:46:
c9:c2:5e:46:50:41:6c:8c:28:66:2b:5d:81:9d:67:
67:26:f2:5e:7b:e1:3a:ed:d5:31:24:22:90:b3:64:
59:c3:32:46:5b:18:3f:fb:c5:36:4a:3f:d1:a2:f3:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:ED:35:CA:36:A6:ED:1D:8B:DB:AC:2B:4F:97:F0:27:3A:91:AA
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/ywjtNco2pu0di9usK0-X8Cc6kao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b040::/29
Signature Algorithm: sha256WithRSAEncryption
b9:e9:91:d3:3a:a2:48:f4:76:ce:26:3e:7c:a5:67:a4:f0:f3:
3d:3b:e0:64:14:35:0f:4a:97:02:de:0b:d1:93:4f:55:b8:05:
12:cb:08:cb:0e:f8:06:71:1c:39:67:49:91:c8:fc:3f:c7:0d:
a5:f1:03:ab:f1:9a:6e:13:2c:9b:ae:55:f6:fe:dc:f4:d3:1f:
7d:ea:ff:e8:56:30:3f:ac:4f:f0:23:e6:46:58:cc:5f:42:e5:
81:2d:be:64:bd:e3:f5:11:a0:4e:0a:51:36:b9:05:d6:c0:15:
fc:ae:d6:8a:7e:9b:7f:6f:49:5b:a2:93:ac:8c:e3:90:30:6a:
fd:87:6e:0a:d8:1d:e4:77:d3:2e:7a:86:84:5d:56:3e:75:d5:
b8:78:02:14:49:52:4c:6c:ab:47:99:98:37:1a:a2:ca:c8:a3:
5a:f7:73:de:f6:02:22:5b:b3:97:31:41:2e:62:98:d5:4a:ac:
29:06:be:03:df:df:ee:18:05:e0:c6:6b:4f:21:72:62:d5:82:
d6:02:dc:3b:00:07:77:e6:74:7a:b8:ea:c5:41:da:ab:34:76:
04:ae:cf:c3:57:44:36:cc:73:41:26:bc:9d:7c:80:83:8d:d9:
32:34:ca:19:12:4c:1f:70:dd:d9:48:c4:0c:e1:c8:33:53:27:
a9:23:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:20 2026 by rpki-client