Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/pTMFjEmitrKJMvkFajOQUUYgL8M.roa
File: pTMFjEmitrKJMvkFajOQUUYgL8M.roa (raw, json)
Hash identifier: XneeE71IIyV6WPB9kLDPT9IPELgo63GtKtVt2WX/krQ=
Subject key identifier: A5:33:05:8C:49:A2:B6:B2:89:32:F9:05:6A:33:90:51:46:20:2F:C3
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019ED962C1E8F97FF478A7A5C19B229D6F86
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/pTMFjEmitrKJMvkFajOQUUYgL8M.roa
Signing time: Thu 18 Jun 2026 06:19:48 +0000
ROA not before: Thu 18 Jun 2026 06:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10977
IP address blocks: 2a12:cb40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:62:c1:e8:f9:7f:f4:78:a7:a5:c1:9b:22:9d:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Jun 18 06:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a533058c49a2b6b28932f9056a33905146202fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:47:4c:8a:db:c2:b9:b5:bd:2f:66:a6:15:
de:98:25:3b:51:5e:73:4b:eb:33:05:87:66:d5:be:
9e:0a:9f:73:de:a1:2b:3e:44:69:33:f0:ff:95:30:
31:8c:0c:d5:46:2a:53:56:a2:7c:02:ae:52:f7:18:
a3:43:3e:3d:90:5a:bf:a2:0e:58:af:61:9a:55:b0:
b9:34:5e:2a:03:cc:fd:c3:92:91:49:8a:e0:b1:fd:
3b:1a:89:a8:f4:26:6b:34:27:da:e9:29:58:0e:a7:
93:a9:ea:f9:62:6d:4f:c2:2d:50:70:e5:67:42:ee:
64:1a:a1:7b:33:ac:2a:94:7e:dd:1e:c8:25:ec:41:
90:51:59:12:69:f2:06:2e:dc:50:a2:88:a5:c9:97:
de:d7:0a:a2:ff:c0:2d:66:92:dd:e1:33:96:88:99:
a6:1f:76:cd:0e:4d:c1:e2:ca:8c:47:ff:28:fb:84:
51:70:c8:0c:d1:2a:5e:ab:10:84:ad:4b:92:1c:7f:
21:62:f1:ef:f5:c8:85:cb:f7:e5:f9:f0:b3:9d:1a:
a2:b6:f3:fb:05:25:73:2c:88:22:5a:bf:cf:f4:2a:
cf:b5:c3:c8:29:98:69:53:c2:75:ad:98:bc:b8:fc:
af:ca:be:80:2b:30:a3:cf:80:5a:9e:ed:7f:d7:11:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:05:8C:49:A2:B6:B2:89:32:F9:05:6A:33:90:51:46:20:2F:C3
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/pTMFjEmitrKJMvkFajOQUUYgL8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
29:d6:d3:10:99:12:af:3e:d2:ca:7d:9b:81:8c:a6:06:46:b7:
db:e3:f6:33:f3:ee:d0:8c:86:ba:fd:6e:f6:c0:ee:2b:3b:55:
ce:ba:92:04:33:cb:e6:10:05:7f:3b:ce:70:2a:c1:62:f7:3e:
30:46:01:50:dd:75:69:2a:e1:7b:02:4b:ad:a3:1b:64:f0:6d:
fc:0c:ed:f4:6b:07:b8:08:3b:0b:55:22:1f:77:c7:b7:26:26:
80:3b:45:3e:d9:c4:0c:be:1f:da:e1:9f:3d:1d:38:96:83:ff:
12:f1:35:d6:b5:1d:8d:3f:fe:fb:75:1a:2e:df:50:60:8f:42:
2b:c6:bd:1d:f3:3a:e6:2d:8f:72:0d:23:0b:e8:df:ff:05:e3:
ff:a1:8c:71:ad:ec:4d:46:34:9f:a9:8b:93:52:ab:5d:97:3d:
d8:85:a8:ad:76:f4:60:cc:85:d0:ef:f6:f8:d5:e7:d0:6a:d1:
6e:bd:94:4c:80:2b:01:49:20:81:d4:dd:11:a0:04:02:3b:38:
f8:40:97:60:de:6d:6d:9d:b9:5d:72:a4:c3:66:df:5f:a9:18:
c8:da:ae:43:5f:61:52:96:99:f4:e3:49:ee:25:ab:d6:41:da:
09:8c:46:cc:82:19:8d:4b:58:a7:f3:15:9f:40:c2:c3:95:2c:
6f:f5:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:02 2026 by rpki-client