Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Ygo8GvKAdgCcGJ5m1Oi-vDy96ms.roa
File: Ygo8GvKAdgCcGJ5m1Oi-vDy96ms.roa (raw, json)
Hash identifier: a5DTe+hdEJtLKv/jwd1CLDK4f47JAtNG57OnzbDpH0c=
Subject key identifier: 62:0A:3C:1A:F2:80:76:00:9C:18:9E:66:D4:E8:BE:BC:3C:BD:EA:6B
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019FCD0AA8AF7C86F3D9E148576085043C7A
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Ygo8GvKAdgCcGJ5m1Oi-vDy96ms.roa
Signing time: Tue 04 Aug 2026 13:50:55 +0000
ROA not before: Tue 04 Aug 2026 13:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219065
IP address blocks: 2a12:cb40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:0a:a8:af:7c:86:f3:d9:e1:48:57:60:85:04:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Aug 4 13:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=620a3c1af28076009c189e66d4e8bebc3cbdea6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:c7:1d:09:94:38:ce:87:d5:cf:b9:87:44:
e2:2c:a7:77:e6:36:70:a3:73:eb:ee:a1:82:aa:c0:
fc:77:74:87:03:3c:4b:ed:a1:5a:aa:5a:1d:fc:96:
97:60:05:95:8b:30:5a:c8:84:7a:6c:c3:08:5a:eb:
93:7a:ba:ed:01:cf:17:1c:e9:85:41:b9:18:f0:90:
94:86:7a:e5:ad:2d:7e:61:3b:b6:f9:84:e7:ae:5a:
40:23:de:84:97:26:bf:da:5f:0c:6f:5e:17:b4:7d:
aa:72:6c:91:99:78:ad:1f:54:cf:6f:17:e1:f9:b6:
f6:ca:e0:d0:e0:34:c4:ba:72:40:62:0f:9b:2b:1b:
8d:a2:9a:a0:18:92:36:9d:ad:8e:4f:4d:9e:fd:69:
5f:0b:37:07:e3:d1:6b:f6:72:97:e1:e2:8f:2e:dd:
62:ab:7a:0b:9c:20:58:8c:d0:40:5b:85:09:b7:77:
43:2c:39:95:28:d3:0f:45:83:ef:c6:de:b1:1f:18:
a7:b9:15:16:62:f5:0d:69:69:0b:a7:ec:8d:2e:5f:
74:f2:49:d9:9e:6d:64:19:86:d9:53:a3:5f:63:f1:
37:49:ec:1f:e3:d7:b5:3e:45:5f:08:61:bf:1e:8e:
ea:ee:26:06:08:e5:07:24:e8:81:10:f0:51:04:1a:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:3C:1A:F2:80:76:00:9C:18:9E:66:D4:E8:BE:BC:3C:BD:EA:6B
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Ygo8GvKAdgCcGJ5m1Oi-vDy96ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
35:71:54:51:9e:a5:a5:1c:70:e9:4f:26:3a:91:e7:ce:9c:c7:
11:4f:be:04:d3:6e:db:05:9c:e7:17:1a:57:26:2a:ae:9d:80:
73:4f:57:d6:4b:a1:d1:61:7a:70:70:d4:41:03:49:d7:3a:43:
18:38:bc:24:7b:6e:87:23:75:07:ab:df:e7:b2:06:40:3d:d3:
fd:0b:b2:99:4d:3f:76:99:2c:a9:27:07:98:06:09:6f:41:05:
6c:d7:a9:14:66:8c:9f:df:08:aa:e1:3f:ea:18:fa:89:4f:27:
01:52:37:90:d2:79:14:c1:0c:b7:85:53:ca:8d:9a:77:53:71:
7a:11:4d:1f:cd:56:b4:9f:b6:50:88:87:c5:6a:a2:27:73:8b:
af:f5:ee:75:f2:78:ca:51:d0:5b:f6:f8:c6:cc:62:bd:df:e5:
81:2b:f9:bb:6c:09:c5:67:ef:ed:2b:7c:32:d4:ce:4e:e8:fe:
09:78:94:ee:f6:94:be:df:a5:b2:a0:b3:90:34:23:11:87:1e:
5f:6b:3d:9d:8b:22:e3:db:0f:45:dd:4d:9c:a7:5d:5f:bb:21:
e5:b6:47:c2:08:9e:90:ec:8f:f8:7e:9c:1f:77:e5:e2:d6:cb:
6d:7d:da:06:d7:ef:41:90:35:bc:b7:c9:74:cb:74:4a:4c:76:
d3:99:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:21 2026 by rpki-client