Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ajAnCxYeK8J4iRtXyNkq5WwFYaA.roa
File: ajAnCxYeK8J4iRtXyNkq5WwFYaA.roa (raw, json)
Hash identifier: f/zEMilAw0fCyl4QdMLBgrY0HYRnckbybUugQj4j3ak=
Subject key identifier: 6A:30:27:0B:16:1E:2B:C2:78:89:1B:57:C8:D9:2A:E5:6C:05:61:A0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019F49231711DE1984C6BD21207B59F16B26
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ajAnCxYeK8J4iRtXyNkq5WwFYaA.roa
Signing time: Thu 09 Jul 2026 23:07:44 +0000
ROA not before: Thu 09 Jul 2026 23:07:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197324
IP address blocks: 2a12:bec4:1cd0::/44 maxlen: 44
2a12:bec4:1d10::/44 maxlen: 44
2a12:bec4:1d20::/44 maxlen: 44
2a12:bec4:1d30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:49:23:17:11:de:19:84:c6:bd:21:20:7b:59:f1:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 9 23:07:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a30270b161e2bc278891b57c8d92ae56c0561a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:e4:9a:4f:1b:a8:8b:61:fa:04:f5:9f:f1:
ec:b1:27:ba:7b:3f:08:d5:96:20:66:5d:84:1a:9c:
f5:be:3d:ba:26:f7:6f:d3:c8:5d:f3:c9:47:7b:e8:
c5:33:1a:b2:ff:38:15:55:b1:e4:ad:cf:ef:3f:ee:
3d:57:61:f6:92:bf:a2:cd:e9:83:c7:79:2a:a5:18:
f7:e6:a3:bd:25:a3:cf:2d:15:66:72:2e:33:2b:3e:
d5:36:bf:db:59:cd:ea:00:1b:ee:4c:10:ff:3a:e5:
22:e8:bf:b5:3b:6d:0a:c7:45:47:bb:e4:48:3a:2c:
03:c7:2d:5e:f0:26:40:ab:cd:2f:16:06:b5:46:fc:
31:0b:da:5f:e1:7f:41:61:86:e8:52:aa:73:7e:08:
a8:2c:4d:db:4e:38:21:39:40:bc:6a:15:15:1e:47:
ea:3e:65:53:a8:e2:1b:cb:1d:0e:a6:ec:04:89:d5:
d0:6a:56:d2:de:f4:7b:44:f8:00:b1:c8:52:cd:5d:
fb:0d:ad:8b:d8:1f:c5:a2:8e:6e:13:86:a1:07:5f:
5d:df:13:6c:c0:e1:19:cc:6d:73:b3:f8:b4:ef:0d:
95:09:b6:dd:7b:a6:cc:0a:54:4e:b2:92:6e:fb:10:
99:e3:87:63:a0:ae:8f:82:2f:2d:df:3b:87:53:91:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:30:27:0B:16:1E:2B:C2:78:89:1B:57:C8:D9:2A:E5:6C:05:61:A0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ajAnCxYeK8J4iRtXyNkq5WwFYaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1cd0::/44
2a12:bec4:1d10::-2a12:bec4:1d3f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:d0:aa:bc:38:9d:e5:5b:6b:04:34:52:15:2d:09:10:08:11:
3f:8f:ef:45:d9:93:c6:47:1c:b7:a4:61:39:59:2c:0d:55:da:
89:4b:32:14:0b:98:cf:6e:b5:c4:d1:3b:e4:4c:47:15:6a:6c:
d3:66:b5:7c:84:25:cb:82:71:8e:64:4a:71:f9:66:4c:05:08:
db:5d:7c:72:fe:30:ac:74:9f:23:60:ac:aa:5c:8f:29:78:0d:
11:de:1d:ce:69:9b:e3:a2:46:75:07:bf:de:39:be:25:f8:0b:
34:b6:c6:8e:a7:24:54:77:9c:fb:9f:66:f5:87:9c:a5:e1:55:
3f:fb:15:35:65:8d:2e:d7:33:29:54:5e:83:8a:fb:09:cd:ae:
5c:84:57:6e:7f:c3:79:b7:74:a7:5a:6c:9e:3e:d3:65:5f:35:
55:50:92:66:47:54:e0:d2:de:ec:48:96:7f:8a:b3:42:3c:45:
51:4c:12:16:35:63:af:47:95:00:4e:0b:87:e5:66:22:05:6a:
e6:ec:77:52:f3:80:23:80:87:b5:6e:27:9b:04:73:9c:e5:4e:
d2:d6:65:1f:68:55:5f:f5:60:0f:39:31:85:79:b4:23:83:6a:
d7:39:2f:49:e9:0c:13:c6:50:ce:2e:75:ce:a8:6a:8e:c5:b4:
27:4e:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:31 2026 by rpki-client