Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/9py5zhP2MzSr-p8h2khJDzxkSyI.roa
File: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (raw, json)
Hash identifier: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=
Subject key identifier: F6:9C:B9:CE:13:F6:33:34:AB:FA:9F:21:DA:48:49:0F:3C:64:4B:22
Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Certificate serial: 019C51BAF567D390DBA1BB865E8C3521C8E7
Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/9py5zhP2MzSr-p8h2khJDzxkSyI.roa
Signing time: Thu 12 Feb 2026 12:02:12 +0000
ROA not before: Thu 12 Feb 2026 12:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 2a13:e8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:ba:f5:67:d3:90:db:a1:bb:86:5e:8c:35:21:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Validity
Not Before: Feb 12 12:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f69cb9ce13f63334abfa9f21da48490f3c644b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:d4:f6:f6:45:f6:8b:b6:ee:a4:f0:7e:a5:
ce:f9:24:26:6b:2a:72:6f:10:28:e2:dc:eb:a7:24:
e0:5e:78:c1:9c:ae:ef:86:15:de:f8:f6:61:63:99:
e4:16:cb:3f:35:ac:0d:b5:4a:17:03:26:b4:e9:c4:
ac:b0:4e:d1:3b:0a:0f:34:e8:b8:5e:7d:a4:ac:2c:
43:05:da:4a:ca:47:fd:d0:4e:34:00:40:7a:39:bb:
1e:e7:7b:95:50:9a:27:5c:ab:49:f1:20:62:4e:5f:
b7:96:b8:04:b6:a7:a5:3a:24:15:b7:c4:0f:b8:2d:
6d:e4:16:b7:1c:c6:cd:cb:32:6d:e9:19:f9:45:bd:
38:18:ac:58:69:99:3c:5e:73:34:73:2d:6f:dd:05:
11:46:fc:33:e5:8c:3d:dd:aa:1e:dc:6f:17:cf:c5:
3a:24:76:b1:bf:93:83:b0:9d:8f:20:80:cf:aa:2f:
9a:39:95:a8:d0:4b:94:65:1d:2a:b7:35:3a:67:93:
78:a5:e8:80:13:fe:5c:6d:43:60:b0:fd:38:54:49:
b8:4d:e9:a9:66:52:10:9c:b3:ea:d2:f0:8d:9e:1c:
0b:26:20:bb:fe:a6:cb:59:2a:2b:12:34:ef:83:42:
74:93:90:80:b7:9c:1b:6e:c9:78:13:f9:32:cc:49:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:B9:CE:13:F6:33:34:AB:FA:9F:21:DA:48:49:0F:3C:64:4B:22
X509v3 Authority Key Identifier:
keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/9py5zhP2MzSr-p8h2khJDzxkSyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:0d:bf:0e:cf:5b:33:ce:22:ad:f2:2b:a2:bf:df:92:34:93:
d1:4f:72:30:b5:f6:f8:1d:f7:78:7e:ec:d1:95:4a:36:d8:f0:
29:82:6f:95:fe:49:31:2e:75:c9:60:cf:a6:e7:40:2c:77:ad:
33:fb:86:0d:13:c4:27:55:1c:32:61:f2:d5:97:40:ae:6d:a0:
a9:97:10:a1:3d:7b:06:0c:9f:ee:61:fa:d6:39:91:88:7a:3c:
5c:e1:0c:a4:21:77:86:d3:4a:f6:e7:d2:29:b6:eb:92:e8:82:
00:22:9c:66:40:64:c7:53:b4:a6:20:95:4b:ef:d8:4a:86:72:
f6:4d:93:a4:cc:87:e6:23:28:19:8b:a6:66:16:e1:dd:fa:27:
a8:a4:50:02:08:c7:a6:70:44:51:60:e0:7d:d0:13:96:e8:f1:
a2:7a:f3:dc:1a:37:68:3c:9f:18:74:1f:b0:04:fd:a2:92:fd:
0d:0e:13:51:f2:49:41:f9:cc:60:fa:8d:f3:24:cf:dd:a5:35:
6e:68:c2:68:a6:15:de:a2:db:f0:cf:27:4f:b5:7a:22:6c:89:
b3:d5:d4:dc:6a:3b:6f:a6:0e:c0:3a:6e:4a:9d:87:d0:48:a8:
c0:e3:3a:c2:14:b8:15:62:82:5b:ef:a6:53:f0:5e:54:e8:2a:
47:d9:ed:9b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZxRuvVn05DbobuGXow1IcjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0
NDJhNjUwHhcNMjYwMjEyMTIwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjljYjljZTEzZjYzMzM0YWJmYTlmMjFkYTQ4NDkwZjNjNjQ0YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX/U9vZF9ou27qTwfqXO+SQmaypy
bxAo4tzrpyTgXnjBnK7vhhXe+PZhY5nkFss/NawNtUoXAya06cSssE7ROwoPNOi4
Xn2krCxDBdpKykf90E40AEB6Obse53uVUJonXKtJ8SBiTl+3lrgEtqelOiQVt8QP
uC1t5Ba3HMbNyzJt6Rn5Rb04GKxYaZk8XnM0cy1v3QURRvwz5Yw93aoe3G8Xz8U6
JHaxv5ODsJ2PIIDPqi+aOZWo0EuUZR0qtzU6Z5N4peiAE/5cbUNgsP04VEm4Temp
ZlIQnLPq0vCNnhwLJiC7/qbLWSorEjTvg0J0k5CAt5wbbsl4E/kyzEklJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPacuc4T9jM0q/qfIdpISQ88ZEsiMB8GA1UdIwQY
MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct
ZWU5NGRiZTQ2YTAyLzEvOXB5NXpoUDJNelNyLXA4aDJraEpEenhrU3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy
LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPowDAN
BgkqhkiG9w0BAQsFAAOCAQEADg2/Ds9bM84irfIror/fkjST0U9yMLX2+B33eH7s
0ZVKNtjwKYJvlf5JMS51yWDPpudALHetM/uGDRPEJ1UcMmHy1ZdArm2gqZcQoT17
Bgyf7mH61jmRiHo8XOEMpCF3htNK9ufSKbbrkuiCACKcZkBkx1O0piCVS+/YSoZy
9k2TpMyH5iMoGYumZhbh3fonqKRQAgjHpnBEUWDgfdATlujxonrz3Bo3aDyfGHQf
sAT9opL9DQ4TUfJJQfnMYPqN8yTP3aU1bmjCaKYV3qLb8M8nT7V6ImyJs9XU3Go7
b6YOwDpuSp2H0EiowOM6whS4FWKCW++mU/BeVOgqR9ntmw==
-----END CERTIFICATE-----
Generated at Thu Feb 26 18:51:20 2026 by rpki-client