Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/F_YKIDk3-c3q7nLSxKia4y8l2UU.roa
File: F_YKIDk3-c3q7nLSxKia4y8l2UU.roa (raw, json)
Hash identifier: mzxplP5wbB6OgrEsYuV9ctgrKZByMRtoj3kAQWkgbps=
Subject key identifier: 17:F6:0A:20:39:37:F9:CD:EA:EE:72:D2:C4:A8:9A:E3:2F:25:D9:45
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A086902096F7CD97F0046CFE7DF59CA8E1
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/F_YKIDk3-c3q7nLSxKia4y8l2UU.roa
Signing time: Wed 09 Sep 2026 14:26:27 +0000
ROA not before: Wed 09 Sep 2026 14:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401486
IP address blocks: 2a0e:f180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:90:20:96:f7:cd:97:f0:04:6c:fe:7d:f5:9c:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 9 14:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17f60a203937f9cdeaee72d2c4a89ae32f25d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:85:12:60:7b:94:3e:9d:52:ed:e3:f2:29:
34:62:ee:9c:d2:e8:70:0d:a4:76:d7:d2:ca:de:d6:
51:b6:9a:a6:aa:e9:61:d9:75:06:65:5b:6f:2f:96:
1d:f4:66:f2:ae:25:7b:66:40:78:d5:5d:7d:85:6f:
6c:26:53:0e:f5:2a:13:78:81:4f:06:dc:6d:46:3d:
4e:23:c7:da:1a:7a:e2:f3:52:09:01:fe:1f:6f:fe:
59:c3:79:a7:7b:1c:76:ab:ab:0c:b4:b2:e8:8f:8e:
b0:91:55:cc:e6:7e:ae:65:88:d9:d8:ba:42:48:00:
fa:77:10:69:aa:a8:7a:5e:3f:79:8d:2f:88:79:b1:
6e:ca:04:31:e1:b7:4d:0f:61:03:27:4b:2a:9e:99:
88:b8:61:f0:f1:93:46:38:a7:d2:c4:3a:fd:a8:8e:
9d:68:4a:01:0f:f4:70:d4:d1:7a:15:ac:f5:09:97:
0c:5b:3e:48:90:f8:a9:66:1e:3c:90:3d:48:04:35:
51:df:b3:88:06:37:c4:67:4e:7a:07:7a:fe:08:d1:
17:fd:c6:54:75:f3:ee:97:5c:e4:fd:35:57:c2:db:
62:67:bc:dc:4f:3c:d7:2e:88:26:9b:70:8c:67:ae:
19:07:f3:90:7e:20:e0:f0:99:86:b7:43:1b:d3:82:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:0A:20:39:37:F9:CD:EA:EE:72:D2:C4:A8:9A:E3:2F:25:D9:45
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/F_YKIDk3-c3q7nLSxKia4y8l2UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f180::/32
Signature Algorithm: sha256WithRSAEncryption
5f:6a:a8:39:12:15:54:1a:0e:9f:24:69:11:48:9d:25:29:da:
d3:2a:0f:fb:82:c3:59:b4:58:e7:f2:89:91:eb:b0:0c:cf:b8:
d2:9c:59:72:ae:38:a1:ae:68:10:77:cc:3b:50:50:16:ed:7f:
c0:72:42:3a:50:6a:66:e9:bf:c3:3a:01:35:de:79:52:f4:24:
70:7e:a7:de:19:a2:e0:31:d1:a5:50:67:e0:c8:7a:78:45:c7:
5c:46:00:a5:48:02:e5:97:b8:61:6b:e4:a9:2e:a1:bd:77:d0:
10:1e:c6:e3:e1:46:99:b7:69:1f:e4:03:f0:86:7b:ab:95:04:
43:ce:49:5d:e8:a5:04:c6:ba:84:8d:70:d8:75:cf:22:a7:8f:
8d:ed:c0:5c:2a:7d:2a:18:47:72:cd:48:5c:1a:b3:5a:42:ca:
c5:66:64:a9:aa:c7:d5:46:84:f1:1b:78:a5:72:8b:76:a0:0e:
e8:47:dc:2d:9d:8f:25:28:a0:d1:e4:7a:ad:17:e2:bf:6a:dc:
c6:97:e5:03:3a:d6:77:7f:f0:9f:31:da:3e:f7:db:c2:19:a2:
71:cc:66:55:36:ac:fc:83:7b:d0:8d:fc:9d:31:7f:11:62:d2:
d3:0f:b6:2d:f3:eb:ab:47:99:d8:71:8e:c6:9c:82:02:58:37:
c3:4b:7c:b1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaCGkCCW982X8ARs/n31nKjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwOTA5MTQyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2Y2MGEyMDM5MzdmOWNkZWFlZTcyZDJjNGE4OWFlMzJmMjVkOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56SFEmB7lD6dUu3j8ik0Yu6c0uhw
DaR219LK3tZRtpqmqulh2XUGZVtvL5Yd9GbyriV7ZkB41V19hW9sJlMO9SoTeIFP
BtxtRj1OI8faGnri81IJAf4fb/5Zw3mnexx2q6sMtLLoj46wkVXM5n6uZYjZ2LpC
SAD6dxBpqqh6Xj95jS+IebFuygQx4bdND2EDJ0sqnpmIuGHw8ZNGOKfSxDr9qI6d
aEoBD/Rw1NF6Faz1CZcMWz5IkPipZh48kD1IBDVR37OIBjfEZ056B3r+CNEX/cZU
dfPul1zk/TVXwttiZ7zcTzzXLogmm3CMZ64ZB/OQfiDg8JmGt0Mb04LaGwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBf2CiA5N/nN6u5y0sSomuMvJdlFMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvRl9ZS0lEazMtYzNxN25MU3hLaWE0eThsMlVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7xgDAN
BgkqhkiG9w0BAQsFAAOCAQEAX2qoORIVVBoOnyRpEUidJSna0yoP+4LDWbRY5/KJ
keuwDM+40pxZcq44oa5oEHfMO1BQFu1/wHJCOlBqZum/wzoBNd55UvQkcH6n3hmi
4DHRpVBn4Mh6eEXHXEYApUgC5Ze4YWvkqS6hvXfQEB7G4+FGmbdpH+QD8IZ7q5UE
Q85JXeilBMa6hI1w2HXPIqePje3AXCp9KhhHcs1IXBqzWkLKxWZkqarH1UaE8Rt4
pXKLdqAO6EfcLZ2PJSig0eR6rRfiv2rcxpflAzrWd3/wnzHaPvfbwhmiccxmVTas
/IN70I38nTF/EWLS0w+2LfPrq0eZ2HGOxpyCAlg3w0t8sQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:48 2026 by rpki-client