Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rysyyo9v5C_vAUXQuLrEMV8Ybws.roa
File: rysyyo9v5C_vAUXQuLrEMV8Ybws.roa (raw, json)
Hash identifier: 1WRUjk8u8OqDThCKWtkPeBWhI0JprVNimmo0+SrVTwE=
Subject key identifier: AF:2B:32:CA:8F:6F:E4:2F:EF:01:45:D0:B8:BA:C4:31:5F:18:6F:0B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019F1380CFBB9BAEAE07C61B1A4D419B5196
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rysyyo9v5C_vAUXQuLrEMV8Ybws.roa
Signing time: Mon 29 Jun 2026 13:10:36 +0000
ROA not before: Mon 29 Jun 2026 13:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210578
IP address blocks: 2a0f:b240:7700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:80:cf:bb:9b:ae:ae:07:c6:1b:1a:4d:41:9b:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 29 13:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af2b32ca8f6fe42fef0145d0b8bac4315f186f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:33:aa:b4:b3:7b:31:4e:a6:ac:a2:ac:74:
bd:2d:a2:ca:28:c4:e3:49:de:b2:31:12:d5:69:61:
5f:36:29:4e:eb:1a:75:18:56:74:4d:7f:bc:02:d4:
80:3c:30:c9:60:cc:5a:da:20:78:2e:08:73:63:56:
07:1d:10:6a:3a:22:f8:13:dc:68:aa:f2:d2:b9:8c:
97:b6:44:b0:be:f7:b7:3d:88:b0:a4:2e:46:dc:e3:
54:f2:ff:f7:7b:2f:48:a9:4c:32:85:d8:a1:12:2e:
39:ab:1b:65:ac:e5:ad:93:34:02:34:bd:ad:ae:a2:
d7:6f:1f:d2:8e:b1:65:ce:59:4f:74:ad:84:27:7a:
2a:a2:ee:83:71:1c:89:bb:1b:58:f7:9b:4b:28:41:
3a:21:44:5a:88:31:96:4b:f4:46:57:51:8d:e0:23:
a3:aa:8a:92:46:e3:4a:4d:15:95:41:2f:63:0d:79:
81:f7:d6:8d:46:f7:a1:61:d3:24:5d:ba:48:8a:1c:
cd:69:6a:a1:f9:a2:47:c1:74:24:ce:32:0d:4f:10:
f2:c4:ba:bf:02:7c:f2:32:28:d2:45:c5:77:6c:74:
84:2d:6b:aa:eb:3d:c6:ee:4a:76:0c:35:3b:ad:9c:
79:e9:50:d0:94:a0:6a:e7:dc:65:67:f7:e5:3f:20:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:32:CA:8F:6F:E4:2F:EF:01:45:D0:B8:BA:C4:31:5F:18:6F:0B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rysyyo9v5C_vAUXQuLrEMV8Ybws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7700::/40
Signature Algorithm: sha256WithRSAEncryption
2f:3c:5a:e1:bf:a2:cd:d6:dd:84:23:ec:7a:a5:a8:b2:8b:40:
ac:a5:69:5f:b0:4f:9d:72:75:36:81:35:ce:56:30:b0:9e:cc:
75:27:6f:9a:7d:f5:9e:9c:78:2b:e6:35:33:c2:31:5f:8a:dc:
f5:f8:bb:60:ac:34:5f:7f:24:64:18:48:5c:49:f3:2c:0c:fe:
09:c7:97:9d:80:84:73:cf:ec:d3:12:77:a7:fd:61:e7:1c:10:
a5:d6:4d:a7:58:81:5c:3e:6c:2f:c1:d2:a8:2f:aa:d2:76:3b:
77:95:a9:33:f8:dc:43:11:66:a5:61:e1:ec:39:a6:fd:60:e0:
29:65:3b:db:10:ee:73:c9:98:67:7d:a1:7b:d4:68:0f:c6:0e:
36:da:33:de:11:51:d9:53:12:73:86:da:0b:c1:d4:02:9c:b1:
57:ef:f8:b5:8d:3c:1e:2b:a9:28:4d:42:53:ae:19:26:90:c8:
40:92:00:0f:e6:70:38:07:e8:c8:8e:fe:03:c7:93:57:07:8b:
87:96:03:38:28:ce:4b:eb:58:f6:b9:e9:08:ae:5b:bc:86:fa:
0f:e4:94:dd:32:57:d8:f7:d5:1a:af:f3:61:ce:85:43:9a:ef:
36:a3:d9:79:3e:f8:24:8d:03:0f:2f:bb:81:12:17:ef:6b:62:
7a:3a:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:15:29 2026 by rpki-client