Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/9ZYIs_SGpDj7xEbDzyW_JghOQTw.roa
File: 9ZYIs_SGpDj7xEbDzyW_JghOQTw.roa (raw, json)
Hash identifier: 7Lzx+Hq6m9JlVc7MK5/YoQEfJ0j7aRZa7AWfxLFqHFw=
Subject key identifier: F5:96:08:B3:F4:86:A4:38:FB:C4:46:C3:CF:25:BF:26:08:4E:41:3C
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019E02396AC27C749A676F48946A51277A64
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/9ZYIs_SGpDj7xEbDzyW_JghOQTw.roa
Signing time: Thu 07 May 2026 11:36:17 +0000
ROA not before: Thu 07 May 2026 11:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197752
IP address blocks: 2a12:cb40:420::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:39:6a:c2:7c:74:9a:67:6f:48:94:6a:51:27:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: May 7 11:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f59608b3f486a438fbc446c3cf25bf26084e413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:c5:05:8f:6a:a7:dd:21:52:71:72:7a:dd:
ea:2b:e5:70:49:9f:f8:00:92:40:5d:b1:81:77:95:
f8:8e:3b:6d:40:e8:79:13:d9:37:a7:32:7e:bf:2d:
96:1a:87:d8:c7:d5:b8:4c:14:8a:97:19:3e:76:63:
40:b4:1b:9b:6e:01:35:da:e3:dc:42:e6:75:73:4a:
da:5c:84:bb:31:89:52:88:f5:dc:57:2a:88:f9:cb:
3c:56:c5:18:af:55:f0:67:60:fb:7c:e6:1b:3c:53:
9f:bf:e2:2d:44:6f:27:44:56:15:6e:b7:19:ea:3a:
cd:b8:83:fd:27:b6:b6:79:37:c2:0c:62:c3:7a:aa:
7c:5e:30:d5:81:fa:6b:45:7b:33:ec:0c:c7:77:6b:
55:76:7d:1c:6a:9e:7f:8f:53:a0:06:d1:c3:42:a8:
f6:54:8a:75:67:27:be:1f:e1:f9:45:3f:4a:15:4a:
60:8e:47:0d:a5:2f:6e:72:34:2f:3e:ec:0c:d1:20:
98:d9:0c:0b:32:75:2c:5e:24:60:62:47:2f:c3:f2:
95:52:86:a4:3c:1b:df:41:58:2c:e1:37:eb:af:1b:
98:32:24:ca:df:15:ad:93:43:36:5e:3e:ff:b5:e5:
97:79:09:a3:75:f7:c2:99:c0:c6:7c:55:bd:ed:63:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:08:B3:F4:86:A4:38:FB:C4:46:C3:CF:25:BF:26:08:4E:41:3C
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/9ZYIs_SGpDj7xEbDzyW_JghOQTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40:420::/44
Signature Algorithm: sha256WithRSAEncryption
ba:38:18:cf:9c:ca:5a:c7:23:c4:47:59:93:26:09:9a:3f:d7:
f9:ec:18:77:4e:31:cc:af:fb:32:d3:32:31:84:b1:a0:f4:f1:
fb:3e:bc:04:0f:58:ee:24:59:cf:72:1f:bd:ea:9e:db:bc:0d:
e0:5d:4c:23:bc:bc:54:b3:50:1f:4e:49:3d:45:c6:87:1f:1e:
3d:c4:e2:50:a1:b6:f6:6a:76:c0:5a:b2:4c:af:c3:db:41:73:
6e:7a:fb:f4:0b:c7:16:74:ef:68:50:79:fe:35:ad:e8:95:cd:
09:5f:41:ef:9e:78:ba:93:d4:e2:12:72:22:f1:2a:ff:0c:64:
49:18:a9:92:b9:ae:05:96:eb:68:94:ff:12:9d:f7:bd:6b:40:
7f:f0:b9:2a:67:8b:19:f2:49:de:5d:70:09:a4:d2:74:8b:13:
14:97:89:6a:f5:2d:67:f3:7a:66:35:4b:4c:5a:c5:4b:32:3a:
db:88:72:34:ef:c0:7a:85:6b:3f:cc:81:fd:26:f0:eb:61:1c:
a1:05:3a:8b:d4:47:50:7a:5f:06:09:d9:c3:b9:4e:08:2f:f7:
d7:95:62:c6:22:b8:ba:62:2d:3f:80:c5:ea:96:eb:ab:ca:9d:
d9:ba:14:8a:60:9f:44:4f:04:ca:a7:ab:cb:cb:53:34:32:d9:
10:89:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:31 2026 by rpki-client