Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/neB97kmwkPjsLcdSEUNJ8X0n5Tw.roa
File: neB97kmwkPjsLcdSEUNJ8X0n5Tw.roa (raw, json)
Hash identifier: E+W0EdSLae4T7LpGa8TnWV5rsRl0iek+F7Slzjsmr8o=
Subject key identifier: 9D:E0:7D:EE:49:B0:90:F8:EC:2D:C7:52:11:43:49:F1:7D:27:E5:3C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019CB3FE349D87353F8701356DF39C84FC70
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/neB97kmwkPjsLcdSEUNJ8X0n5Tw.roa
Signing time: Tue 03 Mar 2026 13:58:27 +0000
ROA not before: Tue 03 Mar 2026 13:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 2a12:bec4:1560::/44 maxlen: 44
2a12:bec4:16f0::/44 maxlen: 44
2a12:bec4:1910::/44 maxlen: 44
2a12:bec4:1ab0::/44 maxlen: 44
2a12:bec4:1b10::/44 maxlen: 44
2a12:bec4:1b70::/44 maxlen: 44
2a12:bec4:1be0::/48 maxlen: 48
2a12:bec4:1c00::/44 maxlen: 48
2a12:bec4:1cb0::/44 maxlen: 44
2a12:bec4:1d40::/48 maxlen: 48
2a12:bec4:1d41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:fe:34:9d:87:35:3f:87:01:35:6d:f3:9c:84:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 3 13:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de07dee49b090f8ec2dc752114349f17d27e53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:54:2c:33:c8:e4:9f:b4:9b:4a:4c:0b:13:
5d:2b:c4:5c:d4:8a:a3:f4:3f:5d:e7:ad:39:58:be:
28:32:bd:32:96:ea:4f:0f:38:7c:66:0e:88:d3:a2:
a2:63:8e:b8:c3:ba:f2:14:14:48:52:b2:77:93:68:
64:91:57:9b:32:57:fd:be:7c:60:7c:6f:79:77:92:
23:85:27:4d:90:6a:a5:5d:34:47:5c:f7:dc:a0:03:
85:ef:a4:16:18:24:18:b4:6e:4e:60:44:a9:80:b6:
3a:0a:98:00:1c:f9:96:fc:db:2d:1d:0c:c3:e0:12:
b2:83:aa:8c:5f:de:7e:5e:73:1a:c2:f0:3a:a4:14:
f0:a4:d5:b4:d6:80:07:45:41:bc:73:e8:14:16:74:
8e:a2:97:a3:d6:dc:b7:c6:cd:9b:86:8b:fd:0e:a8:
20:72:0d:8b:88:b3:a6:a2:6d:35:20:1f:b5:df:cf:
8d:d6:1f:dc:72:fd:82:d0:47:7c:43:20:8e:4b:96:
3f:1a:24:9d:3e:6a:c8:82:89:7b:21:44:5e:1e:7d:
00:e9:17:8f:35:62:cb:45:5c:c5:1e:6c:bb:79:bd:
bb:7b:0c:d9:f9:fc:ce:0e:75:2b:af:a0:6a:b4:49:
67:42:ad:e3:4d:f0:b3:f9:60:4b:58:97:f4:60:83:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:7D:EE:49:B0:90:F8:EC:2D:C7:52:11:43:49:F1:7D:27:E5:3C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/neB97kmwkPjsLcdSEUNJ8X0n5Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1560::/44
2a12:bec4:16f0::/44
2a12:bec4:1910::/44
2a12:bec4:1ab0::/44
2a12:bec4:1b10::/44
2a12:bec4:1b70::/44
2a12:bec4:1be0::/48
2a12:bec4:1c00::/44
2a12:bec4:1cb0::/44
2a12:bec4:1d40::/47
Signature Algorithm: sha256WithRSAEncryption
35:eb:c3:31:8e:8e:7c:ae:c1:b8:f6:49:36:83:bd:bc:85:ab:
aa:da:63:b8:17:40:16:5d:46:6b:cb:7d:ba:00:2e:3b:57:0c:
63:f8:ee:67:9c:7f:70:95:41:5b:d0:8b:27:d7:7f:ff:9b:9a:
c6:f4:01:84:20:81:21:c2:95:bf:3d:0e:a5:7d:ac:66:ef:1d:
20:ae:9f:83:3b:b2:6b:2a:96:d3:ac:ca:c0:8f:00:4f:d7:fa:
f1:97:ce:dc:12:40:e5:95:8e:47:d8:67:5f:ca:4a:c3:07:cd:
30:44:99:75:a0:fc:c5:ed:6e:18:c2:76:d7:54:93:32:ba:df:
26:67:7f:c2:41:cd:67:af:53:38:8c:bf:f5:c5:6c:2d:ad:cc:
16:3a:0c:b6:8c:f9:ce:59:d9:31:98:b9:9e:5a:d8:3b:e4:80:
60:d4:81:79:b6:62:42:0c:d7:08:1c:c7:aa:b8:12:5d:27:e1:
d0:5e:8f:6f:44:14:0d:e1:6d:cd:14:b8:0e:3f:cd:fb:ff:41:
85:a0:d5:be:ca:df:84:bd:41:c1:67:5b:51:98:a0:63:13:69:
a0:ac:8c:ee:1f:0e:75:af:d0:91:d5:fb:08:fe:7f:0e:7d:b5:
7f:6e:bd:bf:1f:b2:7c:bf:e6:00:a1:a8:d5:20:98:1b:1a:74:
52:5e:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:38:13 2026 by rpki-client