Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/AAi-jgO5ugItvhq3_F8gwTIxi0M.roa
File: AAi-jgO5ugItvhq3_F8gwTIxi0M.roa (raw, json)
Hash identifier: d0LEKUsjn77dZL93kvCurLse68YKK43eyw7reOHi1YU=
Subject key identifier: 00:08:BE:8E:03:B9:BA:02:2D:BE:1A:B7:FC:5F:20:C1:32:31:8B:43
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A1529D89865FCDB7397CF8A0544850F139
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/AAi-jgO5ugItvhq3_F8gwTIxi0M.roa
Signing time: Mon 19 Oct 2026 05:23:38 +0000
ROA not before: Mon 19 Oct 2026 05:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216056
IP address blocks: 2a12:cb41:b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:9d:89:86:5f:cd:b7:39:7c:f8:a0:54:48:50:f1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 19 05:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0008be8e03b9ba022dbe1ab7fc5f20c132318b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:1e:75:a3:90:8a:58:5a:00:c0:1a:f6:49:
88:f0:ef:1e:03:25:5d:44:33:cd:cd:be:4a:8f:ce:
21:e1:88:89:63:9d:0e:5b:d5:5d:94:cb:73:47:e3:
04:35:e9:6d:5f:22:92:fb:e9:54:1c:71:5e:d4:12:
24:82:a1:2c:ac:55:68:c5:e4:d5:a6:aa:85:c3:59:
e9:5b:6a:70:92:80:fd:fa:f8:09:22:07:ce:40:0e:
e8:8c:66:52:2a:1a:93:29:68:58:06:53:20:c8:60:
1d:33:98:dd:d0:69:d2:7d:e5:3c:4c:45:f7:6a:43:
3f:81:64:e1:e2:ee:b7:27:82:54:9d:01:86:ea:89:
85:53:cc:c1:00:fb:8e:df:b1:b8:6f:34:8d:92:a6:
86:6d:fc:82:ca:ad:6b:11:53:21:73:28:26:b5:ee:
09:4c:36:cc:30:a9:46:ed:d9:1c:dc:61:66:5d:19:
d9:6e:28:01:39:2e:c1:a6:42:e4:8a:a1:5c:03:19:
43:65:01:8f:da:fb:45:5b:33:49:f9:13:a6:8b:d7:
d7:12:1e:8a:f5:23:a5:78:ca:cb:1d:3b:51:b3:d1:
f8:78:55:3e:1d:0d:0f:b7:4f:89:e2:4a:0d:c1:95:
48:35:87:14:cb:a4:5b:cd:4e:53:5d:1a:89:2e:47:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:BE:8E:03:B9:BA:02:2D:BE:1A:B7:FC:5F:20:C1:32:31:8B:43
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/AAi-jgO5ugItvhq3_F8gwTIxi0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:b00::/40
Signature Algorithm: sha256WithRSAEncryption
6a:c0:c5:1a:32:93:20:3c:10:46:91:b0:21:c4:2d:11:4c:29:
db:21:ce:b8:bd:cb:1d:2d:23:c0:80:e8:d7:95:ce:56:00:18:
2e:76:6c:c4:2b:44:57:f8:ab:4c:ff:43:3e:c7:e1:33:4e:7c:
49:0e:a0:f3:8b:12:2c:9d:6d:e9:54:b6:c9:5c:cd:15:f7:63:
e2:c5:e2:31:75:56:43:60:b5:08:8c:65:87:a1:5f:65:ee:8a:
3a:99:e4:69:ab:7f:5b:1c:86:83:35:11:ba:eb:1f:84:75:a7:
f4:84:b3:a9:59:29:fe:16:41:d3:f2:19:f5:c9:d4:34:21:48:
a4:e3:da:2a:3f:68:8c:1f:3f:23:6b:4d:45:47:f9:0f:eb:af:
c8:ba:66:18:39:dc:5f:a3:6b:06:c0:78:3d:87:42:b5:d4:68:
ea:d3:a6:bd:e2:a6:45:15:c9:c4:d6:80:5c:40:2b:37:22:b5:
fe:5e:7d:a2:9e:9b:3f:c4:2e:9d:83:28:b6:75:f9:ab:58:84:
10:a0:c6:5e:94:56:d7:84:06:f6:62:08:53:6e:d3:b5:45:b2:
a4:eb:04:a9:01:98:13:bf:7b:d4:41:34:9e:5e:e5:27:e9:95:
e4:9f:8c:70:07:4b:f6:04:34:6c:be:6b:c3:53:9f:86:5c:b1:
de:29:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:19 2026 by rpki-client