Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/D6eWMu_kq_uU7otQpEL1VHV7f_w.roa
File: D6eWMu_kq_uU7otQpEL1VHV7f_w.roa (raw, json)
Hash identifier: Evlysc6WwS7RU6oLj6x2pSD96o6kHpyIcIsfiVYufzg=
Subject key identifier: 0F:A7:96:32:EF:E4:AB:FB:94:EE:8B:50:A4:42:F5:54:75:7B:7F:FC
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019F366DF68606A959CD236F7B23A0E5FC76
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/D6eWMu_kq_uU7otQpEL1VHV7f_w.roa
Signing time: Mon 06 Jul 2026 07:56:43 +0000
ROA not before: Mon 06 Jul 2026 07:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198078
IP address blocks: 2a12:cb41:600::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:6d:f6:86:06:a9:59:cd:23:6f:7b:23:a0:e5:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Jul 6 07:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fa79632efe4abfb94ee8b50a442f554757b7ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:c6:90:88:ae:b3:52:eb:de:38:62:b4:49:
bd:a6:4a:a3:b8:d9:0e:b1:37:38:4f:64:b3:c2:df:
98:29:20:60:ad:b9:fd:74:c3:0f:a8:b5:de:a6:52:
50:64:61:18:96:0b:e2:0e:28:10:8d:35:03:99:61:
90:72:00:43:29:04:bd:82:f2:f2:d3:80:93:41:b5:
9a:30:fc:1f:d2:c5:51:5c:68:3a:e7:77:fd:fc:c9:
1b:03:29:bc:b7:63:dc:7a:23:a3:57:14:03:fd:96:
dc:26:c4:a5:48:c5:9a:b1:ce:6f:6d:da:44:ef:27:
11:49:24:c3:79:3c:4b:36:64:49:0e:e2:ec:37:97:
94:b4:80:90:f4:b2:fb:10:5e:ea:8d:be:83:b3:17:
d8:c9:ac:74:00:f4:ce:be:8d:06:26:49:56:1c:f0:
df:bb:0e:bb:52:2d:06:8f:e3:62:08:98:1f:6b:57:
be:38:24:8c:87:31:7f:6a:8a:5a:b8:bd:80:30:84:
2f:6f:47:e2:f2:9a:52:ea:0a:f4:01:8c:06:a2:4b:
44:24:a3:0e:11:1e:e7:ab:aa:57:ff:13:c0:e7:99:
9f:ef:b1:22:c9:f8:8a:1a:56:3e:73:5f:0e:91:4a:
9e:63:44:b8:cd:b1:96:9b:19:60:23:6c:f4:c2:7c:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:96:32:EF:E4:AB:FB:94:EE:8B:50:A4:42:F5:54:75:7B:7F:FC
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/D6eWMu_kq_uU7otQpEL1VHV7f_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:600::/39
Signature Algorithm: sha256WithRSAEncryption
3d:60:ac:17:76:7d:63:0c:ff:5d:1c:bf:0a:99:ba:42:ec:e1:
84:87:95:d0:c6:be:49:f6:fa:9e:b4:ad:1f:af:23:23:dd:24:
70:84:b4:05:64:a3:54:1f:09:e4:7a:43:b3:6e:be:24:fe:c4:
8d:e4:17:13:99:c4:9a:70:d7:bf:2d:83:54:e8:7d:53:0f:58:
58:b5:ac:61:1e:41:6e:48:b1:4a:d8:8e:f1:95:b3:81:41:b2:
1a:6e:b2:31:44:20:cc:d5:df:6e:1c:0b:f4:92:7f:8b:b7:b2:
87:20:70:60:10:a1:0a:cd:f6:e3:1c:5b:fd:fe:be:f6:a5:1c:
8d:75:ee:d8:bb:bd:6a:95:01:25:0e:34:76:a5:43:cb:ff:71:
5d:3f:79:c1:41:72:4b:ce:c0:5a:53:68:f6:a3:89:7e:97:4b:
8e:54:69:b3:a2:c2:43:4c:88:a1:94:90:ee:bb:f7:86:e6:4c:
6c:cf:d2:02:9e:b6:8b:e4:6a:2c:c1:db:0c:12:5d:31:c9:1b:
d8:5e:91:52:85:6e:31:54:fc:a3:e8:3b:e6:80:af:b8:95:0a:
76:61:b8:69:76:b6:23:7f:12:ae:92:4a:b6:e0:04:be:7e:3b:
4b:51:00:8e:ba:2b:e0:57:e5:ea:52:86:cd:22:b6:7b:b8:16:
53:54:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:59:53 2026 by rpki-client