Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/5166Agqn2jhH_IbcMtLAwG-YdBU.roa
File: 5166Agqn2jhH_IbcMtLAwG-YdBU.roa (raw, json)
Hash identifier: 1lBqQs6eapcEUxVFfk56SbDLb/u+RmQXXUBZz3g1JEw=
Subject key identifier: E7:5E:BA:02:0A:A7:DA:38:47:FC:86:DC:32:D2:C0:C0:6F:98:74:15
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019E1FB80F846DFF54A036C016EC0A6E2E5D
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/5166Agqn2jhH_IbcMtLAwG-YdBU.roa
Signing time: Wed 13 May 2026 05:03:36 +0000
ROA not before: Wed 13 May 2026 05:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153376
IP address blocks: 2a12:cb46:6000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b8:0f:84:6d:ff:54:a0:36:c0:16:ec:0a:6e:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: May 13 05:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75eba020aa7da3847fc86dc32d2c0c06f987415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:70:00:d7:cb:c9:64:fe:93:b1:37:f8:6e:
6e:09:36:ff:d3:9b:14:45:15:f6:71:1c:12:49:bd:
7f:24:7d:c2:77:cf:df:7d:a1:66:f0:88:94:de:e8:
18:72:1f:cd:f1:0c:08:d9:e4:9c:77:dd:ad:03:67:
4c:af:32:4a:31:b9:82:ff:ee:3a:d2:af:10:d3:33:
1c:70:6d:4a:aa:9c:c0:20:1c:b4:13:de:3f:0e:f0:
e6:84:a7:24:ce:75:73:6c:5a:f7:54:d2:8f:1d:12:
8c:6b:96:ee:6e:f3:a0:a6:3b:71:57:0b:d4:2c:8e:
ca:5b:ba:9e:e3:7d:1d:67:6b:b0:1f:9e:0b:e0:89:
f8:1a:84:f6:3a:e0:ce:3f:fd:8e:27:c5:4c:16:7f:
ee:d7:8f:5d:51:4d:89:33:3e:59:9b:40:e0:eb:86:
4a:5f:cd:b3:57:66:a8:84:ac:21:12:b1:ce:03:77:
4a:56:db:0f:2a:11:23:ae:65:89:1b:30:a4:b9:fa:
d3:90:59:d1:fa:3b:48:ca:03:11:2a:84:7d:b0:6c:
1f:39:f4:34:11:59:00:8b:70:9d:ac:fc:2f:09:04:
13:8d:47:a5:f8:ab:39:3f:cf:1e:26:a1:a2:3b:ab:
fd:7a:19:a8:cb:18:d8:28:f2:1f:2b:e5:3f:20:36:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:BA:02:0A:A7:DA:38:47:FC:86:DC:32:D2:C0:C0:6F:98:74:15
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/5166Agqn2jhH_IbcMtLAwG-YdBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb46:6000::/36
Signature Algorithm: sha256WithRSAEncryption
11:c2:20:7b:89:8e:09:1e:69:88:1c:2b:82:79:f0:d8:f6:39:
0e:3a:28:41:f4:42:a4:ff:ec:cd:bf:3c:8e:78:52:e4:8e:bf:
e8:cd:cf:79:26:dd:05:ed:a5:96:4e:88:a2:6e:bc:33:14:ad:
56:15:ad:43:79:2f:c4:44:ab:c9:6d:03:63:6e:26:4d:89:fc:
d2:cc:f1:ee:be:61:d6:db:64:f5:16:86:83:90:03:30:b6:d3:
d9:6b:d3:e1:6a:86:79:57:f3:a6:b6:34:ce:30:56:0e:91:4a:
11:b7:5f:b9:0f:b2:c4:78:78:09:3c:07:af:84:04:0d:b3:0a:
85:97:93:a5:a0:3e:36:df:b3:a4:6a:c3:e9:64:49:a7:14:30:
e1:a8:5a:17:3a:4d:2a:82:cf:e3:b8:17:e4:c2:07:64:11:0a:
1c:f9:37:ab:71:9d:1f:13:c4:24:73:ab:1a:e4:3e:30:6a:fd:
e8:ea:e7:52:de:5c:8b:8b:6f:a7:2c:0d:67:9d:e2:8a:94:91:
c1:e9:11:c0:1c:87:bf:9a:be:6a:d8:f0:96:a5:70:88:31:fc:
47:8d:0c:62:3f:c0:59:87:d4:b4:3d:04:ed:29:71:30:d8:35:
81:90:2b:70:dd:ca:f9:32:74:8d:1c:fa:ea:5f:2b:d1:2b:d6:
40:1b:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:30 2026 by rpki-client