Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa
File: Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa (raw, json)
Hash identifier: zzyV8SctE+KAdmnw/zoC5QVggHbeNAKkJ+yHounflSo=
Subject key identifier: 63:BE:E5:64:48:CC:07:33:33:31:3D:F6:75:D5:CB:E1:0B:63:37:96
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019D1923329C2434451917E795BBC6781ED2
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa
Signing time: Mon 23 Mar 2026 05:20:30 +0000
ROA not before: Mon 23 Mar 2026 05:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 2a13:2980::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:23:32:9c:24:34:45:19:17:e7:95:bb:c6:78:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 23 05:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63bee56448cc073333313df675d5cbe10b633796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:f6:d4:65:dd:68:b5:33:b2:fb:2f:d9:47:
b5:ee:70:7a:44:09:90:98:ba:00:8e:ca:3b:b0:22:
54:66:91:7c:a8:2c:a0:85:88:7d:50:1d:b1:56:1a:
ad:9d:27:6f:ee:e4:9d:8d:ce:ef:f4:70:f5:29:f2:
b4:0c:56:1c:99:0f:f3:0b:3d:8a:a4:35:ec:8e:39:
09:b8:8c:9c:00:b1:88:c7:ec:7c:b2:4a:01:85:24:
72:f4:56:ec:3c:91:b1:be:6f:2f:35:2c:18:3f:74:
c9:3f:a6:85:2a:14:d6:b1:7a:54:52:b5:88:b7:02:
37:fc:1d:7e:b8:2c:6d:58:cf:b9:aa:58:54:39:8e:
5b:bc:1d:2c:cd:cc:47:02:2e:58:e0:b3:00:79:07:
7f:dd:5f:7d:05:31:de:ca:ab:70:58:4b:6a:3c:4d:
fd:72:24:68:45:b3:6c:9c:3a:c4:3a:2a:ac:da:8d:
61:55:4a:da:1c:72:44:e1:d8:af:18:a2:10:c8:0d:
8c:4b:36:85:68:2f:be:1f:3f:76:8e:a1:c1:84:10:
fc:c8:1a:21:43:ec:e6:0e:bc:8b:da:2d:2e:e6:e9:
be:70:e3:f6:db:ae:25:ce:bc:90:3e:1a:c9:ee:d2:
86:b5:2b:2f:0c:94:45:bc:1a:99:78:55:3b:27:12:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:E5:64:48:CC:07:33:33:31:3D:F6:75:D5:CB:E1:0B:63:37:96
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2980::/30
Signature Algorithm: sha256WithRSAEncryption
cf:50:18:ec:be:6a:31:b4:06:0a:e9:e5:f5:8c:97:aa:51:df:
b5:49:35:e0:e3:61:6e:5e:6c:57:9c:24:ab:7b:9c:e3:a3:69:
13:ae:b0:d9:98:19:43:57:32:4a:c7:a5:dc:5d:f7:35:e1:15:
c7:d9:20:69:88:97:8a:ca:64:73:87:24:94:01:b9:a7:1c:6b:
99:55:38:64:aa:a4:44:d1:75:72:1e:05:57:76:77:2e:a4:82:
16:b2:1c:32:53:18:57:8e:40:c3:63:88:d5:96:5f:fa:de:21:
0f:ca:f6:24:fe:0a:52:0c:11:87:9b:46:82:9a:b1:fc:93:74:
b0:96:87:77:30:83:14:c9:2c:bf:0e:7e:d3:34:84:1e:fb:03:
e0:c7:d7:17:26:30:a4:f4:bc:67:de:76:a9:9d:6b:6d:0c:18:
b6:ad:7d:d7:31:80:73:62:6d:57:8b:9f:17:ca:10:f8:c1:3f:
8d:08:85:bb:60:fd:bb:0b:ee:5f:1d:be:9f:a8:25:22:aa:60:
dc:75:54:ec:4f:1a:98:0f:c0:43:fe:ac:66:26:d2:01:41:57:
52:3e:50:f3:c1:27:63:c3:c8:88:53:e2:70:3c:27:e6:ea:e0:
fa:27:32:64:63:e3:f9:ef:b9:64:df:d2:12:d1:cb:bf:b6:bd:
ad:2f:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 17:18:42 2026 by rpki-client