Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/YWfuggorcd1NM3cGc0ChXxoZNEw.roa
File: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (raw, json)
Hash identifier: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=
Subject key identifier: 61:67:EE:82:0A:2B:71:DD:4D:33:77:06:73:40:A1:5F:1A:19:34:4C
Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843
Certificate serial: 019C81C1CCC8F48F43FF3234C5E7461C36DC
Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/YWfuggorcd1NM3cGc0ChXxoZNEw.roa
Signing time: Sat 21 Feb 2026 19:51:27 +0000
ROA not before: Sat 21 Feb 2026 19:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a14:4600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c1:cc:c8:f4:8f:43:ff:32:34:c5:e7:46:1c:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843
Validity
Not Before: Feb 21 19:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6167ee820a2b71dd4d3377067340a15f1a19344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:c1:09:66:79:f5:ae:fd:a4:79:33:4f:bb:
cd:cc:dd:89:e0:7c:c8:8c:aa:3e:ac:08:04:11:99:
c0:b6:79:31:3d:33:e0:80:59:11:88:0d:0d:fe:40:
dd:37:05:c4:54:7a:fb:f4:fe:b2:4a:05:80:a6:ad:
e8:ae:b3:3e:e3:cd:02:f3:fd:ba:ec:82:63:fa:9f:
ac:e0:3c:72:e9:b5:7f:12:b5:fe:5b:83:d8:17:dc:
5a:87:84:8a:b2:df:72:17:0e:f7:69:73:d9:b9:00:
ec:f4:39:e7:af:4a:c3:8e:ea:e5:9a:3f:92:3b:b7:
e3:59:13:0f:80:e0:ec:6c:13:92:59:ff:03:5c:9d:
1c:17:01:12:12:64:ef:4c:ea:50:d2:50:77:c0:4a:
bb:e1:b2:5a:89:98:e3:b9:d0:72:cc:c1:ef:e3:ba:
15:fc:83:0e:72:d1:3f:03:92:da:1c:80:ab:46:65:
3c:ec:9d:ba:54:71:9e:31:7d:61:bd:2d:e2:5f:6a:
ed:48:57:e9:9a:53:0d:db:23:c9:e0:82:ab:c5:ac:
f8:90:94:87:98:9b:f4:cd:f9:3e:b2:54:33:51:b9:
3f:5f:81:8b:14:f7:c7:3f:02:d7:c2:38:0a:6a:e5:
36:51:03:cf:a1:ed:c6:c8:2d:6c:41:77:19:cb:8e:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:EE:82:0A:2B:71:DD:4D:33:77:06:73:40:A1:5F:1A:19:34:4C
X509v3 Authority Key Identifier:
keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/YWfuggorcd1NM3cGc0ChXxoZNEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4600::/29
Signature Algorithm: sha256WithRSAEncryption
83:fb:12:75:92:af:7c:04:70:e4:eb:7c:2e:a0:3d:1b:81:80:
d5:f3:dc:92:63:71:4a:49:72:90:00:82:95:3d:2e:47:bf:c9:
4a:38:f2:59:56:57:ed:fc:6c:c4:61:0d:10:05:11:8a:3c:2c:
19:32:6d:d0:62:29:ed:6a:73:32:b4:df:83:ac:a8:47:b7:2f:
32:72:49:c3:bd:4a:e5:23:3d:d4:f6:9b:6e:33:2b:7a:0f:2d:
36:66:ec:c4:ad:93:0e:7a:80:e4:d1:5e:70:8d:64:87:f4:70:
f5:76:73:2d:28:0d:25:15:a4:19:8a:70:5a:53:64:36:6a:a5:
c9:46:37:50:ee:7c:43:ca:d8:91:fc:0b:70:42:a2:bc:9a:ea:
19:8e:2a:94:d6:73:8a:01:b4:42:3d:0a:a0:34:37:83:18:fe:
a3:6b:43:4f:47:73:c3:de:69:67:08:9c:6b:9f:7d:e0:20:a7:
71:56:64:8c:cc:a8:60:85:9c:45:05:55:c2:00:ad:12:a8:f4:
6b:27:ca:65:68:98:e8:3a:65:3d:4b:a3:80:92:87:48:67:ba:
62:e0:5b:2a:b3:f3:e4:a8:ba:45:92:d2:66:e2:d1:86:d3:03:
56:a2:be:2a:74:93:36:95:43:91:c4:7a:cf:d4:6e:b9:37:1d:
ca:f3:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:52:45 2026 by rpki-client