Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/yPHXcg7MHc8u5sP-1pciVyOdSXU.roa
File: yPHXcg7MHc8u5sP-1pciVyOdSXU.roa (raw, json)
Hash identifier: VqcNScPW68yz15HsACltzh8b1+z5Hp/WZ9rq+Em5SXA=
Subject key identifier: C8:F1:D7:72:0E:CC:1D:CF:2E:E6:C3:FE:D6:97:22:57:23:9D:49:75
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A02F2C4EAEEAF0F65778B349B4EBC0A4F0
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/yPHXcg7MHc8u5sP-1pciVyOdSXU.roa
Signing time: Sun 23 Aug 2026 15:10:27 +0000
ROA not before: Sun 23 Aug 2026 15:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a10:fa81:d00::/40 maxlen: 48
2a10:fa86::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:2c:4e:ae:ea:f0:f6:57:78:b3:49:b4:eb:c0:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 23 15:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8f1d7720ecc1dcf2ee6c3fed6972257239d4975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:7c:00:9d:c9:e5:c7:a4:09:c7:8f:14:21:
44:36:a6:4f:fb:83:67:2c:34:d7:84:05:8f:e1:66:
b0:4d:e3:f4:98:62:73:d4:5a:df:77:72:6e:96:f4:
92:92:f7:56:df:0f:c1:03:f6:78:5a:1c:a3:48:7a:
da:04:89:ee:42:c9:cc:7a:b1:79:10:15:78:31:4f:
2b:7c:0a:8f:84:7a:bf:af:c6:fb:1f:b7:29:11:71:
96:7c:43:73:05:d7:6b:5e:9a:4e:d6:01:61:e5:ff:
f2:e1:11:e7:44:8f:f1:9e:95:8c:58:54:f2:e3:34:
f2:f4:83:27:49:5f:21:52:d6:b6:03:db:d8:06:a7:
d8:0d:9f:7c:72:2d:0c:51:6b:78:ac:b6:2c:80:b9:
c1:85:16:94:9e:b3:05:d1:7e:e9:79:75:eb:da:5e:
08:d8:a3:05:1a:bf:09:df:60:fe:96:6a:8b:5c:64:
99:30:a0:a4:63:30:c0:74:23:d8:2b:b0:36:c2:25:
f9:b0:72:6f:a9:bb:1d:85:6e:bc:1b:7c:22:e3:5f:
86:5a:75:c3:f2:0c:98:8d:82:b6:13:cd:2a:90:47:
3d:fb:41:b7:bd:92:a3:ff:91:3e:96:75:4c:4e:f3:
16:57:b7:81:48:fc:c3:b8:0a:38:f7:5c:46:01:e8:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:D7:72:0E:CC:1D:CF:2E:E6:C3:FE:D6:97:22:57:23:9D:49:75
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/yPHXcg7MHc8u5sP-1pciVyOdSXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:d00::/40
2a10:fa86::/32
Signature Algorithm: sha256WithRSAEncryption
5e:eb:57:5d:6f:e4:b0:66:4c:71:29:86:72:c4:82:f2:fd:05:
d7:12:ca:80:dd:15:db:0f:25:b4:49:6b:49:73:13:81:77:44:
91:b9:54:3a:c1:81:84:4f:3a:2a:7b:97:28:60:54:57:ad:a8:
b9:ca:8c:5d:c8:c5:93:06:e9:ca:8e:ad:fa:96:59:c2:81:8e:
a4:51:ae:de:e9:cd:39:16:13:86:01:a9:85:f4:b1:d9:a9:68:
2e:0b:f1:f9:69:1f:04:11:e5:ad:fa:9b:16:8f:b5:f8:af:09:
59:0c:fa:4b:96:25:b0:16:2e:92:d5:c3:1b:44:6c:af:5f:2a:
06:c9:0c:8c:b4:42:60:02:11:d6:dd:72:58:ce:ac:01:fe:c1:
1a:dc:5b:6e:e6:3b:5b:93:ca:2d:ff:af:c8:34:fc:3e:5e:06:
a2:33:53:2d:a0:5b:82:8f:0b:da:5e:a7:82:ee:0e:d8:78:3d:
40:ca:b7:3c:93:24:9d:c9:cd:fe:ab:2a:82:09:ad:af:9d:11:
e6:44:dc:2d:54:f9:07:80:cd:d1:c5:78:46:30:cf:55:eb:5f:
9d:34:41:c3:0f:e1:a0:ee:ae:a8:23:9d:eb:e6:24:6d:91:09:
8e:69:35:68:dc:6a:05:ed:df:6d:c5:29:c0:5d:d6:8a:74:96:
12:3c:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:42 2026 by rpki-client