Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/0XUqvETq-dxEYw9N9Y9b51_wFII.roa
File: 0XUqvETq-dxEYw9N9Y9b51_wFII.roa (raw, json)
Hash identifier: 4PHtMJAyZ19WPBfTjcj5l5RcMfaUsbJPOXNWJybRpz0=
Subject key identifier: D1:75:2A:BC:44:EA:F9:DC:44:63:0F:4D:F5:8F:5B:E7:5F:F0:14:82
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A152B19E970E660B61EB471B9A3781D293
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/0XUqvETq-dxEYw9N9Y9b51_wFII.roa
Signing time: Mon 19 Oct 2026 05:45:34 +0000
ROA not before: Mon 19 Oct 2026 05:45:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56367
IP address blocks: 2a12:cb41:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:b1:9e:97:0e:66:0b:61:eb:47:1b:9a:37:81:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 19 05:45:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1752abc44eaf9dc44630f4df58f5be75ff01482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:56:1c:fd:b4:7a:3b:83:5e:f3:d0:7b:05:
45:88:3b:4b:9d:ac:4c:7e:91:91:01:cc:87:97:52:
03:69:eb:e6:79:07:a1:b4:d3:26:85:7a:80:fe:3c:
ae:2a:07:cf:6a:c0:c0:f9:18:b8:ad:ec:ba:00:80:
23:9c:13:9f:cc:fd:df:c5:a0:7a:eb:11:2d:55:0f:
ce:59:ac:87:e3:d3:11:b2:4d:55:29:7a:a7:2f:d5:
aa:3d:ec:96:ea:bf:e0:e8:2c:0e:d1:7f:48:f3:49:
b3:1b:de:99:59:17:56:21:5c:d5:3e:fc:e5:72:23:
cc:3d:91:6e:6f:b4:5a:1b:31:86:12:14:60:69:bf:
0c:4e:24:3e:77:ac:e5:f2:50:9f:b0:eb:c9:f1:b6:
ba:3a:34:30:04:41:e1:da:08:70:d6:c7:cf:cb:54:
9c:7a:65:95:9b:a2:43:21:1f:2e:44:3a:c6:88:79:
9d:64:7b:83:4d:92:fd:69:0d:ee:de:ba:a3:1c:cd:
df:d1:ed:a4:ac:80:58:88:85:93:9c:d9:53:1b:fb:
8d:51:26:38:93:6e:b3:96:2b:97:f1:37:49:06:0b:
3c:9d:6c:28:49:ff:99:5a:f9:7d:e6:57:10:78:bf:
e0:52:4f:f1:c4:d0:4d:c8:cf:e2:fc:a8:8b:18:5b:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:75:2A:BC:44:EA:F9:DC:44:63:0F:4D:F5:8F:5B:E7:5F:F0:14:82
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/0XUqvETq-dxEYw9N9Y9b51_wFII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:1100::/40
Signature Algorithm: sha256WithRSAEncryption
c5:d8:ac:05:09:f9:8c:87:6e:73:8a:60:10:2d:9d:0e:41:2b:
d7:fe:0d:f6:b8:09:7f:78:97:58:25:b1:3c:7b:64:e0:fa:e6:
cd:fe:61:7d:66:5d:8f:f6:e2:15:a2:64:23:44:80:7d:a4:f5:
72:7c:a3:50:70:88:9c:af:d7:b2:28:70:4a:c2:7a:68:2b:5c:
2f:bb:85:20:81:04:42:eb:9c:7b:96:59:db:b5:05:25:34:2d:
f6:d4:a6:8f:de:c6:b3:4a:c9:0d:14:0b:45:dd:2d:df:b6:a8:
f4:22:28:22:16:0c:0b:1b:3b:72:6b:a5:73:e3:5a:f8:e2:fc:
a5:c8:7e:53:fa:0d:b8:31:23:bb:d0:18:57:98:71:8e:45:e6:
20:e7:4c:9b:ee:33:ec:4e:94:62:c0:b0:62:a2:e3:52:b1:1f:
d2:3d:9d:8d:3b:35:50:62:2b:d6:71:c4:30:67:03:fc:f0:e7:
35:a0:a6:0f:6b:f1:83:a8:87:f4:17:31:23:6a:c3:c1:f6:9c:
c3:79:46:08:47:02:ca:cd:b8:73:4f:32:9c:2f:eb:ef:39:39:
ee:42:57:f9:6a:33:fa:d0:a8:8e:a3:c5:a3:89:5b:61:9b:c1:
d5:70:a0:03:f7:93:c4:02:b2:16:32:40:0b:70:42:6d:31:ec:
3d:69:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:50 2026 by rpki-client