Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/XMtCIZ_eMVlacdNRc20Zknmaf9U.roa
File: XMtCIZ_eMVlacdNRc20Zknmaf9U.roa (raw, json)
Hash identifier: sBaiQ2KBzd8/KSOpdVi6syd+anCDH6uFiSXn5XY0yv4=
Subject key identifier: 5C:CB:42:21:9F:DE:31:59:5A:71:D3:51:73:6D:19:92:79:9A:7F:D5
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019E1FC4E14968359C816EC89868C73E6CA6
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/XMtCIZ_eMVlacdNRc20Zknmaf9U.roa
Signing time: Wed 13 May 2026 05:17:36 +0000
ROA not before: Wed 13 May 2026 05:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199353
IP address blocks: 2a12:cb41:200::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:c4:e1:49:68:35:9c:81:6e:c8:98:68:c7:3e:6c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: May 13 05:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ccb42219fde31595a71d351736d1992799a7fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:00:bd:b1:64:92:63:42:aa:0a:7b:a0:69:
12:e0:bc:c1:5e:b9:8b:43:db:22:d4:a6:c5:10:d7:
3a:3d:d7:55:78:87:ce:51:46:d4:15:bc:a4:86:35:
f3:98:0b:bc:be:b2:26:80:09:20:46:cb:58:e1:66:
16:53:a3:85:52:fa:34:35:56:2b:3a:d5:a8:61:eb:
fc:7f:3c:77:16:51:0a:2a:26:e4:e4:f3:2c:d7:43:
57:9f:c7:61:17:09:c6:7f:90:80:82:ef:0c:4f:ce:
13:c8:19:4c:41:fa:47:e1:78:eb:6b:10:97:0c:9a:
ef:1b:0f:ff:f9:95:16:72:37:e3:3f:8e:8d:44:10:
34:59:d2:18:ad:df:06:c7:3b:b8:eb:7c:d3:a7:03:
1a:5c:f3:29:0a:b4:f1:4f:67:50:6e:5b:88:fa:dc:
81:32:78:31:7b:0e:6f:21:93:b1:22:cd:39:e3:da:
57:01:35:95:c1:df:1e:fe:47:a1:f2:29:9d:8f:b6:
fc:e2:ee:bc:1e:90:0b:3d:89:21:b4:40:7a:9c:75:
69:cb:3d:c1:55:a5:e8:b6:79:0d:c3:da:14:bd:92:
aa:67:d8:46:37:52:12:70:32:f1:7d:ba:bc:74:b7:
8a:68:89:66:ff:46:b1:c0:ec:3a:4c:6b:f5:3a:3c:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:42:21:9F:DE:31:59:5A:71:D3:51:73:6D:19:92:79:9A:7F:D5
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/XMtCIZ_eMVlacdNRc20Zknmaf9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:200::/39
Signature Algorithm: sha256WithRSAEncryption
5a:e9:2b:5a:29:f5:fa:79:3a:85:a3:7b:8f:d4:f4:09:fe:b9:
55:23:49:a8:c8:a1:38:c2:9d:68:ee:5b:fa:5f:d4:b5:ab:ee:
d7:45:76:88:f6:79:42:72:bf:54:2c:94:e7:b6:37:2c:33:2c:
46:b8:8f:f5:f3:21:25:68:d6:97:e8:b2:34:0b:81:5a:4d:2a:
d8:78:d5:db:d6:23:75:a2:d9:e7:93:d6:82:2e:40:2e:02:87:
d7:fc:63:ef:a0:d9:e6:15:59:52:18:5c:09:48:62:11:e3:0a:
50:cd:d7:66:ad:c4:71:56:b1:e5:46:4e:18:6f:b5:52:fe:22:
94:59:4b:13:46:4b:00:27:23:6e:43:23:20:a6:f1:78:42:b9:
55:c2:70:63:9c:46:a6:62:e3:f7:a8:00:c9:73:bb:6c:da:b4:
e9:ee:48:82:24:ca:fd:42:8c:e8:5e:9d:61:e7:08:b0:e6:55:
dc:e7:bd:df:04:f6:c1:12:98:db:8e:38:a2:f0:d7:b7:be:65:
13:0e:ec:79:84:1f:1e:87:bf:cc:e4:f6:c5:98:e6:67:44:54:
7b:29:05:81:f7:eb:65:23:7c:ee:1e:dd:86:99:25:b3:a8:ad:
21:0a:a6:93:a4:1f:d1:8d:c0:d8:33:26:56:65:68:3c:2c:f9:
31:81:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:39 2026 by rpki-client