Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/y0JL5th_famt13MqdwXpQQi-c4Q.roa
File: y0JL5th_famt13MqdwXpQQi-c4Q.roa (raw, json)
Hash identifier: 0h/IAOS8gxMB1NgAu/pEJouuMsfFoZ2H2n14ej3wMJc=
Subject key identifier: CB:42:4B:E6:D8:7F:7D:A9:AD:D7:73:2A:77:05:E9:41:08:BE:73:84
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019E1977B846D54D365D42D05107EADC07D3
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/y0JL5th_famt13MqdwXpQQi-c4Q.roa
Signing time: Mon 11 May 2026 23:55:36 +0000
ROA not before: Mon 11 May 2026 23:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208485
IP address blocks: 2a12:cb41:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:19:77:b8:46:d5:4d:36:5d:42:d0:51:07:ea:dc:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: May 11 23:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb424be6d87f7da9add7732a7705e94108be7384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:60:88:7b:65:ad:a6:9b:5c:44:89:26:88:
94:71:01:2b:99:20:75:f5:be:f1:b5:e7:8c:61:0f:
75:a1:08:3a:47:e7:b5:34:ba:a4:f9:1a:f8:a3:00:
02:28:26:f3:d0:b8:f2:ef:c1:8a:80:82:47:f5:f6:
e9:44:86:cc:64:14:7b:43:20:a4:b1:e2:c1:80:b8:
9e:28:df:58:45:0a:ff:06:24:9d:23:41:b1:f9:25:
69:85:42:e3:fa:aa:d1:e5:12:d9:b3:bb:af:88:46:
d8:31:b4:71:be:ab:6e:50:74:48:1c:36:b7:4d:d7:
3b:34:7a:71:46:c8:6e:77:d0:ef:de:5b:64:42:8e:
7f:08:df:73:b5:33:8b:34:cb:ab:f6:fa:fd:f9:92:
16:a8:d2:b0:d9:6d:be:ab:0f:ab:ec:62:fc:13:01:
7e:80:d4:3b:78:f0:c6:9a:db:52:77:00:da:24:14:
ea:3a:e5:0e:ab:7d:f1:42:52:41:11:eb:31:23:db:
80:07:d8:c2:6d:7d:57:5d:91:8d:8e:c6:1a:44:59:
65:11:ab:ac:90:59:ee:43:ee:df:ba:ab:07:b4:e5:
32:a9:5b:27:b5:fe:cb:24:10:72:14:3c:1d:96:60:
d6:d1:29:78:1c:b1:43:5e:a8:78:af:e4:72:1f:6e:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:4B:E6:D8:7F:7D:A9:AD:D7:73:2A:77:05:E9:41:08:BE:73:84
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/y0JL5th_famt13MqdwXpQQi-c4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:1000::/40
Signature Algorithm: sha256WithRSAEncryption
0c:3d:4a:13:8f:19:22:f8:aa:2c:57:39:a4:8b:7a:e2:60:0e:
62:a6:ba:9c:e2:e3:b7:ec:e8:07:2e:36:40:0e:ed:28:1a:7f:
01:97:2a:7f:c0:94:21:5c:de:11:e8:7f:6b:a0:f5:2e:95:8c:
82:30:40:82:66:39:09:69:8b:35:8b:e9:00:43:3f:38:06:d1:
de:89:74:48:e6:55:7e:24:31:81:f5:b8:9f:af:41:59:51:80:
83:93:c5:19:c9:e7:9f:8f:cd:53:0f:54:78:78:14:c3:72:56:
70:45:79:aa:c7:98:b3:12:7e:f6:4c:34:ad:49:45:af:73:f6:
9d:2a:5b:ce:a3:05:51:dc:a4:90:7a:64:80:5c:df:c0:a3:24:
f9:8c:59:b0:26:c9:fe:75:48:35:69:ed:2b:91:01:20:54:f7:
df:79:63:7c:90:06:1d:d3:da:6b:7d:e7:04:10:1c:c8:2f:7a:
c1:d2:8f:24:5c:0e:78:ef:78:fa:7e:94:9c:95:dc:37:17:74:
07:7a:3e:15:7e:c3:0a:e7:00:ae:4f:d7:fe:a9:79:b7:98:f6:
99:15:23:fe:7a:d4:d3:c5:26:2f:61:1b:ca:42:05:bd:37:64:
bd:ab:b9:51:e3:02:14:d8:55:e9:0c:a3:6a:4f:37:13:03:64:
d4:2c:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:55 2026 by rpki-client