Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YVWQ_pmcdL0yHHss1Nt1kQqDHLk.roa
File: YVWQ_pmcdL0yHHss1Nt1kQqDHLk.roa (raw, json)
Hash identifier: JczAvVeAUic3/5APTRl6yUVafyf6c3b90tWOQPVKq08=
Subject key identifier: 61:55:90:FE:99:9C:74:BD:32:1C:7B:2C:D4:DB:75:91:0A:83:1C:B9
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A117420B10914878FCFD32A74FC9F7CEC8
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YVWQ_pmcdL0yHHss1Nt1kQqDHLk.roa
Signing time: Wed 07 Oct 2026 16:46:06 +0000
ROA not before: Wed 07 Oct 2026 16:46:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a10:fa80:2::/48 maxlen: 48
2a10:fa80:13::/48 maxlen: 48
2a10:fa81:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:42:0b:10:91:48:78:fc:fd:32:a7:4f:c9:f7:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 7 16:46:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615590fe999c74bd321c7b2cd4db75910a831cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:d9:55:99:cf:40:cb:d3:a7:7b:8a:92:62:
dc:72:00:d0:fc:c6:b2:52:0f:74:4d:9a:33:53:67:
32:1a:6e:b8:a9:79:54:18:b9:68:d3:80:70:d4:e1:
99:90:6e:c9:14:56:70:b2:4e:f3:8d:bf:76:ff:9e:
58:44:cb:98:12:28:96:c7:13:88:72:fc:5f:99:9f:
e2:e5:95:12:50:ac:bc:c4:c4:1d:f2:6e:76:f6:26:
6c:5f:41:73:45:71:c1:10:8e:ec:4b:ca:eb:b2:79:
d9:8e:2d:c9:f0:b6:f7:7f:46:a5:57:e1:42:f7:40:
80:df:2e:13:82:a0:0d:e5:ab:b0:ec:32:8d:54:1b:
55:67:72:26:ae:ab:70:9c:08:3d:ee:43:cf:0e:37:
c1:2b:90:13:a5:9a:f0:7c:26:8a:3f:93:e1:fb:b4:
96:41:8d:f8:36:71:a2:ed:8c:f6:e4:55:4d:9c:14:
32:24:f9:23:50:a3:62:e6:96:83:70:f9:44:ea:b5:
d4:0b:c9:8f:09:a7:5d:a4:94:2f:f0:ba:52:91:f8:
da:cb:ba:86:ea:f0:0a:e6:f3:07:58:c2:70:c3:72:
fa:a1:78:19:d1:00:a4:27:1c:e5:29:bd:33:ab:69:
82:77:7d:78:7d:d7:9a:f8:ee:07:19:6f:40:80:35:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:90:FE:99:9C:74:BD:32:1C:7B:2C:D4:DB:75:91:0A:83:1C:B9
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YVWQ_pmcdL0yHHss1Nt1kQqDHLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:2::/48
2a10:fa80:13::/48
2a10:fa81:500::/40
Signature Algorithm: sha256WithRSAEncryption
46:69:6c:10:5a:0a:1b:88:31:52:5f:7d:6d:c0:84:2f:53:65:
3b:dc:c4:b7:24:9e:58:d4:4b:06:ab:f3:03:dc:aa:6f:12:02:
4e:f4:a0:77:51:88:75:93:ba:96:53:ca:83:96:88:16:02:e6:
ef:d6:ee:49:c7:49:b2:dc:5c:f2:01:a2:f4:3e:82:32:21:fe:
08:88:a1:b0:42:9c:d3:30:9a:5a:e2:37:9a:22:7d:f5:55:fd:
c7:47:71:c2:e5:56:cf:ac:7c:71:07:d3:78:0d:c8:69:5b:7e:
b0:95:a8:f6:6d:7c:7a:52:34:5e:7e:cc:f9:1b:ad:c8:4c:c2:
68:ce:f7:e1:90:09:43:0b:e9:41:b4:71:8a:12:0c:1f:77:9b:
5e:bd:9d:c0:f1:36:0b:39:8c:3e:7b:77:df:9b:90:19:3d:13:
b5:33:bf:f4:ad:f2:23:16:c4:78:d7:67:2a:38:3c:f4:07:a9:
91:6b:cb:36:45:08:a7:8f:4f:94:88:3a:93:98:8a:aa:3f:18:
94:7b:48:0a:52:52:65:4a:b4:9b:fd:cc:4d:5a:f6:ff:17:ba:
cb:6e:3c:a0:31:d5:9c:b9:95:5c:16:9f:2e:e9:33:92:c9:5b:
4b:0a:6b:81:5b:b2:0c:f3:67:39:4a:bd:b9:05:30:2d:a2:01:
74:19:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:28:39 2026 by rpki-client