Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/B8DXsuSLx94y4My6JnYh5VRTgrs.roa
File: B8DXsuSLx94y4My6JnYh5VRTgrs.roa (raw, json)
Hash identifier: SkxV8uzrj5b4YEP22Ioh+53nCFAbJ5W6IqHlzQdtsUM=
Subject key identifier: 07:C0:D7:B2:E4:8B:C7:DE:32:E0:CC:BA:26:76:21:E5:54:53:82:BB
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019F7538B17222D780CDA084F198B67B0D7A
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/B8DXsuSLx94y4My6JnYh5VRTgrs.roa
Signing time: Sat 18 Jul 2026 12:34:37 +0000
ROA not before: Sat 18 Jul 2026 12:34:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207529
IP address blocks: 2a12:cb41:1400::/39 maxlen: 48
2a12:cb47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:38:b1:72:22:d7:80:cd:a0:84:f1:98:b6:7b:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Jul 18 12:34:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07c0d7b2e48bc7de32e0ccba267621e5545382bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:d1:a2:e6:b2:76:e1:68:0e:d3:da:19:40:
a3:b1:3e:4e:80:e3:2c:ff:ac:43:a7:66:4a:78:2f:
01:8f:00:6f:8f:9e:ad:1e:71:ce:a9:a8:6a:11:74:
74:8a:d1:b6:8c:fa:09:38:eb:12:dc:f7:9c:13:35:
df:7e:cc:c2:ce:91:0e:6b:dc:53:5b:c7:7d:ea:66:
9b:f4:e8:19:36:9d:64:98:f3:76:d9:e2:55:64:4f:
6f:80:06:f4:50:00:2f:38:fd:5a:57:4a:3f:d6:a4:
d0:b3:59:bc:cc:3e:0e:e9:9a:9d:4f:bd:9f:54:91:
0d:a9:7f:8e:5d:7e:98:06:0e:2a:bf:5a:1e:96:46:
e8:a5:53:ca:5d:fb:db:a2:d2:ca:4b:f0:82:f0:c1:
cf:81:eb:c1:f8:d6:35:ff:e7:9b:c7:48:cd:9b:c2:
27:eb:22:04:df:50:d8:cb:91:2a:73:4a:c6:26:6a:
ee:99:3a:20:30:45:7d:8b:90:85:81:1f:6b:d4:2c:
57:bf:c3:67:58:2f:eb:8b:2d:a8:87:55:1c:79:90:
c3:eb:90:83:8e:d7:e4:f2:2c:ef:71:23:25:7e:15:
9e:9a:5a:75:d3:3e:2a:6a:74:8a:03:04:91:37:c4:
9a:e0:9e:71:60:a6:a1:25:1a:56:50:14:be:e9:fc:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:D7:B2:E4:8B:C7:DE:32:E0:CC:BA:26:76:21:E5:54:53:82:BB
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/B8DXsuSLx94y4My6JnYh5VRTgrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:1400::/39
2a12:cb47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
94:55:4b:6c:c0:9e:a6:02:53:48:f4:32:47:09:f6:3a:6c:03:
29:e4:7f:01:52:87:97:65:46:bc:f7:3c:af:ae:ef:3c:79:6f:
f7:44:5b:6e:2b:96:85:de:ca:06:b0:fd:55:3e:fe:6e:f0:58:
7a:4d:6b:a6:04:f3:de:7e:1a:cb:0f:12:76:4d:3f:f5:99:20:
b4:c2:f4:ab:12:7e:e0:35:72:f9:12:b0:56:c4:36:96:9d:80:
76:fb:62:b5:a0:d3:ac:9a:23:66:8e:c5:7b:cc:30:dd:dc:c9:
a1:7c:60:bd:6b:16:5b:19:13:40:a8:da:a8:c5:22:0f:59:54:
91:6f:55:12:18:17:c7:db:96:55:d7:62:8b:ab:5f:cf:1c:47:
1f:f8:61:0a:e7:76:92:81:0a:f6:6a:39:6f:f3:5d:d8:10:c5:
fd:69:d7:8b:d2:f3:9c:55:ef:96:d3:3d:3b:7f:37:09:0e:b8:
5c:02:f5:50:f0:f1:5e:88:d5:05:65:be:f4:23:5a:57:22:93:
c9:e2:93:ce:85:8c:9a:a3:71:b2:1f:9b:fd:04:e1:f9:97:84:
88:94:d1:b9:96:fd:e3:ef:87:fa:2e:3f:5c:36:6d:b0:65:c8:
84:16:19:b3:da:14:45:00:6f:cc:54:c8:1c:c0:1f:e1:60:65:
88:f4:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:00 2026 by rpki-client