Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/rYTmDrI9G5fMWECBd9OT4jGtWAU.roa
File: rYTmDrI9G5fMWECBd9OT4jGtWAU.roa (raw, json)
Hash identifier: E7XEwn52PGDmzRvuAUtlF5a/fmcR5RznTWGHL6zDA5Y=
Subject key identifier: AD:84:E6:0E:B2:3D:1B:97:CC:58:40:81:77:D3:93:E2:31:AD:58:05
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019EF380A8CFB5EB7700F69329413E877456
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/rYTmDrI9G5fMWECBd9OT4jGtWAU.roa
Signing time: Tue 23 Jun 2026 08:02:35 +0000
ROA not before: Tue 23 Jun 2026 08:02:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 2a10:fa80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:80:a8:cf:b5:eb:77:00:f6:93:29:41:3e:87:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 23 08:02:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad84e60eb23d1b97cc58408177d393e231ad5805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:58:4d:a9:74:da:6a:30:cc:32:e4:e9:cf:97:
7b:6f:2d:9d:98:e7:61:87:0d:b1:13:28:c7:2b:a9:
e1:55:87:0d:17:a6:06:4c:0b:51:ba:73:df:8a:29:
2f:4a:dc:68:d9:d9:5b:b1:fb:4d:1d:3a:da:58:68:
eb:ef:75:15:ca:fa:8c:3e:04:be:84:b6:dd:29:6c:
9b:b9:99:e1:af:8b:6b:4a:1d:68:d3:9f:9b:cf:06:
e5:e9:07:19:16:68:e6:88:b1:a8:c8:83:eb:19:6a:
7a:e3:51:8f:8b:3a:b9:41:97:0f:56:14:a6:dc:fe:
01:4a:b4:07:f3:6a:84:ea:ab:8c:b3:d9:b5:57:a4:
a6:6f:a8:4c:26:1c:fa:5e:f3:cd:fa:0c:4a:02:1e:
69:14:fd:09:1a:97:09:f8:b4:4b:fb:86:87:01:a4:
64:aa:42:bd:c4:71:7b:04:e5:2f:91:e6:48:b6:ad:
1a:3b:d4:c5:28:1b:52:6d:02:5b:b8:e9:d7:dd:a5:
d6:cc:a9:f0:db:44:38:c8:ee:43:cd:7e:10:b4:87:
a7:2c:bb:6a:6d:e7:b5:cf:73:b3:aa:c3:a2:29:22:
a6:79:5c:f4:d6:64:85:5a:87:02:8a:59:33:11:92:
b3:63:3e:35:3c:15:bd:53:07:da:db:ef:55:0d:fb:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:E6:0E:B2:3D:1B:97:CC:58:40:81:77:D3:93:E2:31:AD:58:05
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/rYTmDrI9G5fMWECBd9OT4jGtWAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:7::/48
Signature Algorithm: sha256WithRSAEncryption
0c:7c:84:52:44:98:53:b9:69:3a:c7:9a:8b:7f:d6:42:69:6a:
d9:30:b3:8b:ec:7d:7b:22:0a:ba:d1:c8:34:2b:1b:73:36:9e:
e3:d5:07:92:60:12:e3:09:ba:ed:d3:db:36:cb:f7:e7:07:7a:
e7:17:9a:6f:a7:a5:0e:6d:e5:ca:70:83:f1:59:41:6d:e4:dd:
c7:7c:0b:f1:bc:1a:b2:cd:d4:36:17:07:35:d0:26:8b:26:70:
27:c9:e6:2b:09:0f:0b:b1:07:07:e9:66:34:66:7b:42:ca:a3:
02:3a:e9:4a:9e:f4:e6:d6:14:8a:ca:82:e1:61:8a:ae:c9:32:
c2:8a:83:80:2b:ac:5c:c9:25:cf:61:ab:a0:42:3c:ac:ab:38:
31:8e:dc:4a:54:71:90:df:ff:21:4e:05:63:02:ba:6b:3e:f7:
74:98:04:03:51:39:40:47:93:77:a6:1a:5f:3e:a8:77:fa:a2:
9f:7b:58:52:f7:bf:af:01:97:e4:b1:5c:9d:e5:ed:bc:3c:62:
a3:64:4e:72:f5:17:b1:6e:e5:d5:a6:b8:bf:ac:83:ce:a2:c2:
15:70:03:1c:0e:e0:c5:93:97:26:ff:f0:3b:40:52:ad:ce:5b:
57:45:ce:71:28:d0:fc:bb:1d:4b:21:32:2e:13:99:e1:4e:be:
4f:df:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:44:27 2026 by rpki-client