Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/g1LeNLesQnnHrxEF-PtEFUnDUQM.roa
File: g1LeNLesQnnHrxEF-PtEFUnDUQM.roa (raw, json)
Hash identifier: XLl6dtmsvyb3f12OkZANWLQCsjp8hGD5UB6rX/gHGkE=
Subject key identifier: 83:52:DE:34:B7:AC:42:79:C7:AF:11:05:F8:FB:44:15:49:C3:51:03
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019F13236C1E34E8E881C7862EDEA3FAFA8F
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/g1LeNLesQnnHrxEF-PtEFUnDUQM.roa
Signing time: Mon 29 Jun 2026 11:28:36 +0000
ROA not before: Mon 29 Jun 2026 11:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25085
IP address blocks: 2a12:cb40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:23:6c:1e:34:e8:e8:81:c7:86:2e:de:a3:fa:fa:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Jun 29 11:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8352de34b7ac4279c7af1105f8fb441549c35103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:5a:98:6d:74:31:a2:98:68:8d:62:b8:62:
ab:26:f8:76:85:ca:28:3e:da:bb:34:29:96:56:17:
4a:15:91:d9:a4:a7:d3:60:2e:b9:c7:4b:5c:61:a2:
7c:d5:ff:eb:2b:ad:3a:21:5b:41:cc:ed:c9:cb:d2:
ca:38:a2:15:0e:65:f4:e8:2f:c4:6d:85:ef:93:d1:
4d:19:a5:9e:6e:ea:5e:07:0b:fc:a2:5a:b7:d8:57:
a6:a0:9f:5a:87:a2:bf:24:9e:77:23:28:38:2c:a0:
91:9c:c4:54:48:58:f2:0f:69:b6:b0:2d:6f:26:29:
ad:50:59:80:3c:28:1e:c3:69:73:51:ad:66:ad:4e:
5f:c4:e0:a2:fc:8b:3f:27:e3:9d:83:73:55:67:78:
35:f3:be:f5:09:ef:67:7b:10:16:da:e0:c2:1d:c5:
17:e4:f8:7b:4a:5e:0c:e4:09:e1:57:93:f3:7d:89:
5e:b9:2e:fc:40:f4:54:e6:a7:a9:80:0c:d5:e6:a1:
45:cf:44:5a:c8:d2:56:92:a6:45:46:98:4b:74:73:
0e:7c:fe:59:c5:e5:f2:a4:90:c0:db:40:35:b7:37:
77:d1:54:91:81:32:68:d5:30:53:73:aa:35:6e:5f:
28:cc:90:2c:84:41:71:f6:2d:7a:e5:58:2f:84:db:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:52:DE:34:B7:AC:42:79:C7:AF:11:05:F8:FB:44:15:49:C3:51:03
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/g1LeNLesQnnHrxEF-PtEFUnDUQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
ca:ea:2c:66:97:1e:f8:8c:09:af:05:39:e7:75:da:fd:8e:01:
89:85:79:ec:5e:05:c5:5d:04:5a:88:77:dd:93:7e:f7:f4:3e:
bc:90:53:7e:aa:8b:96:73:93:56:e9:b8:2e:29:c8:c4:ad:1e:
01:c9:91:2e:da:c9:fd:d7:83:34:2d:ab:8e:32:f9:85:1a:e3:
32:3a:5c:7d:6e:bd:5c:53:d3:b6:00:2f:12:ce:c4:d9:ee:de:
13:85:f1:37:1f:f5:bb:4e:c5:d0:16:30:47:18:2d:a0:25:6c:
89:d1:ac:fe:c8:1b:80:b6:07:01:db:3f:14:df:a6:34:56:1b:
05:d3:16:a0:7e:9c:07:a5:84:4c:42:d8:f0:4a:81:d8:33:b7:
62:92:1c:d1:d4:d0:45:23:ce:e8:6c:05:5d:5b:4f:99:cc:5e:
83:14:9d:66:2b:1b:c7:42:32:de:4a:d6:3c:8f:a1:ae:f4:67:
0e:3e:51:e0:eb:71:a5:2d:cb:65:4d:71:5f:5f:e0:cb:29:02:
1f:9c:f9:be:71:c0:26:dc:2e:6e:65:0c:61:7b:5c:1e:7e:31:
13:7d:c7:95:67:a3:72:bd:3f:45:2a:bc:e7:4d:8e:3b:76:7a:
e3:f6:cf:91:8d:c9:97:ef:67:b0:91:29:e7:dd:fb:9d:ef:47:
f5:40:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:56 2026 by rpki-client