Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa
File: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (raw, json)
Hash identifier: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=
Subject key identifier: 0B:2A:A3:FD:A8:C5:54:59:4C:15:3E:C1:6A:6D:EA:E3:57:BC:D1:64
Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Certificate serial: 019C81BF0D50EFF90064B90CA17EDFB6778F
Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa
Signing time: Sat 21 Feb 2026 19:48:27 +0000
ROA not before: Sat 21 Feb 2026 19:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213507
IP address blocks: 2a13:e8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bf:0d:50:ef:f9:00:64:b9:0c:a1:7e:df:b6:77:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Validity
Not Before: Feb 21 19:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b2aa3fda8c554594c153ec16a6deae357bcd164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:6f:86:d0:ff:51:71:4f:8f:b3:92:a3:60:
03:12:91:03:bc:76:4d:1c:f7:99:a2:52:34:4f:6f:
fd:68:d2:e0:25:51:18:41:69:25:24:9f:64:72:17:
ea:13:d0:fd:dc:6a:3e:51:cc:61:c6:f2:f8:0e:e1:
27:0e:0b:f5:54:9d:37:15:9e:8b:1b:c8:44:2b:bb:
90:21:43:0d:85:f2:0b:1b:73:f6:ad:37:0f:fe:01:
b7:49:3a:d5:1d:b3:a6:08:d8:05:9e:ac:35:af:09:
26:4c:8a:ef:fa:ea:5b:59:05:16:5d:68:14:3f:e8:
7b:2e:17:4f:ec:05:d7:20:4d:88:4e:c8:59:8c:1d:
a7:77:97:7f:5d:37:ff:58:b5:65:46:44:52:4d:78:
60:8b:f7:e9:fd:6c:06:69:ed:95:38:b5:7f:23:94:
03:5b:e1:f0:7a:e0:89:23:0b:4d:29:72:57:fa:a4:
39:65:7c:ef:15:24:92:81:41:b1:48:d1:4f:6d:c2:
c1:f6:a7:b6:e2:49:41:95:31:79:56:c9:86:56:50:
c2:c9:b5:80:b1:6b:c0:89:5d:97:3e:59:b4:a8:a3:
42:cf:c4:e0:88:2d:51:64:90:54:77:c2:70:6c:01:
8f:27:2c:c8:59:cf:4b:4f:e0:fc:a5:23:2a:02:1d:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:A3:FD:A8:C5:54:59:4C:15:3E:C1:6A:6D:EA:E3:57:BC:D1:64
X509v3 Authority Key Identifier:
keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:a4:cd:3e:81:bb:48:4b:93:f7:d5:46:2b:0a:c9:fb:7b:ab:
2e:f9:71:7b:f4:c8:97:3e:6f:85:31:49:dd:6e:0c:e9:3f:7c:
54:1e:26:51:14:91:2d:4b:01:86:30:f8:b5:1d:f6:d0:db:55:
4b:53:1c:d0:d7:a2:64:e7:37:9d:32:cd:f3:c8:52:40:7c:0b:
3a:a6:c5:60:d7:a7:b9:cc:7e:a7:a8:e7:fc:b0:d2:e1:f6:ce:
1e:eb:d1:2d:bf:b3:57:ff:00:68:50:84:93:06:78:0a:82:4a:
e3:35:50:ce:f6:1a:49:65:66:da:c4:6c:e9:60:bc:78:e8:dd:
74:75:b5:2a:15:3e:24:e8:53:2b:4a:76:45:01:3c:e7:38:f6:
d7:f0:28:c1:ec:2b:cc:ef:28:74:87:d3:77:63:6f:96:53:7c:
78:c2:e9:22:25:0d:4b:6c:aa:95:a8:c5:c9:d5:fd:1c:21:aa:
ce:03:39:07:25:c9:64:33:de:e4:34:70:1d:6f:dc:90:e7:12:
2d:28:fe:09:5d:91:42:72:06:ce:9f:14:72:08:69:7b:4b:33:
ef:1c:6b:66:72:32:a4:0e:42:c8:d0:16:50:d8:f5:49:54:d9:
f1:40:37:95:58:65:93:66:86:f1:84:12:8b:fc:ee:a6:f3:61:
60:eb:39:84
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyBvw1Q7/kAZLkMoX7ftnePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0
NDJhNjUwHhcNMjYwMjIxMTk0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjJhYTNmZGE4YzU1NDU5NGMxNTNlYzE2YTZkZWFlMzU3YmNkMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA035vhtD/UXFPj7OSo2ADEpEDvHZN
HPeZolI0T2/9aNLgJVEYQWklJJ9kchfqE9D93Go+UcxhxvL4DuEnDgv1VJ03FZ6L
G8hEK7uQIUMNhfILG3P2rTcP/gG3STrVHbOmCNgFnqw1rwkmTIrv+upbWQUWXWgU
P+h7LhdP7AXXIE2ITshZjB2nd5d/XTf/WLVlRkRSTXhgi/fp/WwGae2VOLV/I5QD
W+HweuCJIwtNKXJX+qQ5ZXzvFSSSgUGxSNFPbcLB9qe24klBlTF5VsmGVlDCybWA
sWvAiV2XPlm0qKNCz8TgiC1RZJBUd8JwbAGPJyzIWc9LT+D8pSMqAh26oQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAsqo/2oxVRZTBU+wWpt6uNXvNFkMB8GA1UdIwQY
MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct
ZWU5NGRiZTQ2YTAyLzEvQ3lxal9hakZWRmxNRlQ3QmFtM3E0MWU4MFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy
LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPowDAN
BgkqhkiG9w0BAQsFAAOCAQEATqTNPoG7SEuT99VGKwrJ+3urLvlxe/TIlz5vhTFJ
3W4M6T98VB4mURSRLUsBhjD4tR320NtVS1Mc0NeiZOc3nTLN88hSQHwLOqbFYNen
ucx+p6jn/LDS4fbOHuvRLb+zV/8AaFCEkwZ4CoJK4zVQzvYaSWVm2sRs6WC8eOjd
dHW1KhU+JOhTK0p2RQE85zj21/AowewrzO8odIfTd2NvllN8eMLpIiUNS2yqlajF
ydX9HCGqzgM5ByXJZDPe5DRwHW/ckOcSLSj+CV2RQnIGzp8Ucghpe0sz7xxrZnIy
pA5CyNAWUNj1SVTZ8UA3lVhlk2aG8YQSi/zupvNhYOs5hA==
-----END CERTIFICATE-----
Generated at Thu Feb 26 18:50:54 2026 by rpki-client