Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/yER6Jwc260jYGlbdAWyVTAN3WMM.roa
File: yER6Jwc260jYGlbdAWyVTAN3WMM.roa (raw, json)
Hash identifier: vpGox+pD5sY2CKKHnvr7twErOeITxh7mmeX17MbXeQo=
Subject key identifier: C8:44:7A:27:07:36:EB:48:D8:1A:56:DD:01:6C:95:4C:03:77:58:C3
Certificate issuer: /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial: 019F36C9C1301F6C158977A42568F19728AB
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/yER6Jwc260jYGlbdAWyVTAN3WMM.roa
Signing time: Mon 06 Jul 2026 09:36:59 +0000
ROA not before: Mon 06 Jul 2026 09:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212290
IP address blocks: 2a0e:7a04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:c9:c1:30:1f:6c:15:89:77:a4:25:68:f1:97:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Validity
Not Before: Jul 6 09:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8447a270736eb48d81a56dd016c954c037758c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:7b:3d:fa:e5:30:82:57:7a:9c:0e:99:9a:
01:ea:dc:ed:08:23:7d:42:f7:15:3c:17:8b:35:e0:
ef:07:19:25:16:ee:4b:99:6a:88:32:15:6e:b9:de:
d6:a7:8b:d6:a1:70:7b:52:c4:25:b1:78:0c:af:48:
b2:4a:2a:eb:eb:0b:5e:a4:a6:80:75:49:36:7d:ef:
d7:60:4f:37:ed:a0:78:5e:51:50:b9:48:62:0e:2b:
84:ac:c9:f0:80:f2:f2:8b:3d:c0:2d:b2:00:d6:68:
db:00:9d:03:49:29:99:de:75:20:0a:74:c1:b1:ce:
58:d9:a2:54:8e:60:8f:5b:bd:a0:6b:2d:58:fd:9b:
1a:3e:fe:8b:af:13:a2:52:3e:84:ea:89:75:ee:9b:
df:b4:f3:e2:32:fe:c1:7a:03:6d:b1:3c:e4:1b:00:
dc:5f:cf:0f:d0:47:bc:4f:08:38:7f:75:29:d4:77:
fc:3d:a8:88:1e:46:da:22:c0:83:89:9c:43:ed:de:
2a:49:ab:cb:d1:fa:05:d9:9a:65:f0:db:b9:a7:3d:
63:08:ba:cc:45:4a:2f:98:2e:e8:7f:3e:13:93:27:
b3:5b:2e:0c:02:42:ae:dc:83:93:2d:6e:c8:4b:ba:
ef:42:05:39:09:e8:af:b9:db:6f:52:2f:6e:ff:e0:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:7A:27:07:36:EB:48:D8:1A:56:DD:01:6C:95:4C:03:77:58:C3
X509v3 Authority Key Identifier:
keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/yER6Jwc260jYGlbdAWyVTAN3WMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7a04::/32
Signature Algorithm: sha256WithRSAEncryption
2a:13:14:0d:3b:f4:10:f2:d4:8b:81:17:99:d2:00:f5:af:a9:
4e:b6:42:75:d4:5c:e5:6a:2b:f7:e1:cd:a4:7c:60:95:19:67:
d9:88:b8:0a:a5:63:cf:b0:9b:4f:3a:c8:fd:1a:ac:43:fc:9e:
11:44:1b:e6:05:4a:fe:d0:69:39:7d:5c:03:b0:6a:d5:0d:37:
7a:62:5c:58:d5:3f:84:b3:a5:da:7b:ea:99:07:da:4d:05:88:
fd:97:55:f9:b9:35:1f:b8:7e:12:1f:19:68:58:4c:fe:01:94:
7a:aa:5a:34:51:44:e9:6c:86:ac:b7:6a:59:fc:61:d8:85:ac:
31:18:cb:e7:c3:f3:ee:94:e6:71:e0:25:a8:46:04:90:9a:c9:
f0:0a:55:fc:57:5a:ae:49:c3:d0:ea:79:4d:99:0d:20:7f:99:
d8:b9:da:1f:08:8f:2d:45:81:18:1b:95:52:3f:9b:92:c6:33:
85:76:74:99:e9:d4:2f:cf:3d:2b:6c:03:69:d8:74:e6:03:a5:
3c:22:e9:8f:40:ba:d0:3e:e7:de:ba:f9:b8:24:34:40:24:0f:
9a:a3:a0:15:73:0d:12:1c:5e:53:8c:fc:be:ec:93:fe:41:1a:
b5:dd:f3:8f:f4:7b:24:da:31:9b:45:1c:20:75:b2:63:2b:0b:
37:19:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:04 2026 by rpki-client