Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/fyjECpmTz5g5P4Yj1m0Y2Lob-gw.roa
File: fyjECpmTz5g5P4Yj1m0Y2Lob-gw.roa (raw, json)
Hash identifier: xZyjhiYZaxDC5kAx5JqsPWy8+XXcqLWvikpL+2kNOLo=
Subject key identifier: 7F:28:C4:0A:99:93:CF:98:39:3F:86:23:D6:6D:18:D8:BA:1B:FA:0C
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A1529D89034FD8AB87E8548937668944E0
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/fyjECpmTz5g5P4Yj1m0Y2Lob-gw.roa
Signing time: Mon 19 Oct 2026 05:23:38 +0000
ROA not before: Mon 19 Oct 2026 05:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215191
IP address blocks: 2a12:cb41:a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:9d:89:03:4f:d8:ab:87:e8:54:89:37:66:89:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 19 05:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f28c40a9993cf98393f8623d66d18d8ba1bfa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:2e:01:52:1e:3e:3b:d9:cd:e7:90:5f:5d:
82:dd:c0:2c:5f:c9:5c:f2:c6:f7:f6:45:e8:a2:7d:
11:69:42:32:5c:f1:39:28:88:b9:68:a2:af:8d:6c:
69:34:5d:e2:46:7c:7c:38:f0:18:dc:d3:ee:ae:48:
0a:c6:27:b5:30:38:ef:04:51:96:bb:a3:48:37:50:
56:3a:fe:9b:ed:57:52:73:47:6a:a8:ef:e2:9b:e9:
64:69:a5:0b:57:11:75:04:c6:da:12:e4:37:f0:c6:
06:c1:f2:4f:59:25:bc:ab:29:93:da:04:82:b5:08:
b0:42:e5:1e:1f:b3:a7:11:8b:56:89:08:76:0e:d1:
03:5a:4c:d7:93:34:09:fe:29:31:db:72:35:68:37:
a3:59:1b:9f:ee:ad:8b:c8:c3:d7:3f:53:25:b1:5a:
41:d9:8f:77:a5:e0:af:10:bd:09:b1:d8:79:8f:86:
54:6b:af:be:72:ac:b0:65:60:f2:78:a0:b3:a3:48:
56:d2:af:b7:9f:8c:fd:52:b9:09:c0:c5:d3:44:72:
fd:e8:02:bd:e5:15:77:1b:3d:22:d4:c5:c5:d1:5c:
11:bd:d6:0b:d6:56:81:08:6d:f2:dd:74:75:47:93:
e4:24:b0:39:6a:61:57:b1:44:df:f4:8e:7f:af:ae:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:C4:0A:99:93:CF:98:39:3F:86:23:D6:6D:18:D8:BA:1B:FA:0C
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/fyjECpmTz5g5P4Yj1m0Y2Lob-gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:a00::/44
Signature Algorithm: sha256WithRSAEncryption
a5:57:ed:78:f1:c3:d2:fd:c6:dc:65:73:8e:70:f2:a8:11:a2:
81:fa:e1:eb:60:f1:d4:12:e6:08:39:61:1a:bc:b7:a5:fd:c7:
60:ef:b2:93:ef:65:b0:5f:19:dc:08:2a:03:ae:3a:a8:7d:eb:
79:11:f5:bb:aa:dc:ca:cc:25:9d:68:d6:fd:ed:8a:b9:ea:3f:
ba:12:fe:00:77:7d:2e:84:a7:d5:c5:21:62:86:c2:22:fa:a4:
72:c1:21:b7:ff:28:15:8f:c5:31:70:8a:49:ce:ef:c7:94:ca:
a8:43:98:d4:7e:6e:f1:25:f7:da:2b:6c:97:ad:d7:72:54:df:
69:db:b8:0b:1d:4e:9b:90:42:fd:d3:46:19:9c:82:f3:22:2c:
dd:3a:4b:4e:d3:d0:28:5d:9a:d5:34:0c:5f:a2:ea:6e:09:2c:
72:ee:80:5d:af:91:0d:7c:38:fc:26:1b:0a:d3:ae:7a:d6:62:
0e:95:1f:75:cf:62:5a:4c:b7:b5:c3:ca:fb:9c:e4:78:07:43:
11:b0:ff:74:d7:4b:2c:7b:c7:f7:2a:22:a7:f0:06:a4:77:38:
e7:fc:61:e4:56:0c:d2:2e:be:bf:7f:2a:fd:57:83:1a:37:3e:
56:fb:fc:8d:27:05:dc:10:d7:ea:be:8f:52:94:13:b3:7b:b3:
45:01:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:49 2026 by rpki-client