Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/HVtjpFrYsNMiZMANtbtwZb7tXTA.roa
File: HVtjpFrYsNMiZMANtbtwZb7tXTA.roa (raw, json)
Hash identifier: RT0/NHuxEn3/LChxeNjl7pnDqmmNjeuWdurgtBY/1ac=
Subject key identifier: 1D:5B:63:A4:5A:D8:B0:D3:22:64:C0:0D:B5:BB:70:65:BE:ED:5D:30
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019CD10F5CD3018FD872088A1F00CC8BF45E
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/HVtjpFrYsNMiZMANtbtwZb7tXTA.roa
Signing time: Mon 09 Mar 2026 05:26:10 +0000
ROA not before: Mon 09 Mar 2026 05:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204539
IP address blocks: 2a12:cb42::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:0f:5c:d3:01:8f:d8:72:08:8a:1f:00:cc:8b:f4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Mar 9 05:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d5b63a45ad8b0d32264c00db5bb7065beed5d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:bf:1e:61:b9:66:96:d8:46:dd:5f:01:39:
98:91:71:d9:0d:7d:e1:06:0d:46:a7:bc:74:24:1d:
ca:27:ac:8a:ee:58:eb:a6:1c:1e:86:8d:ec:64:f7:
cc:05:10:cb:81:2a:38:ac:af:6d:34:ca:51:a2:38:
66:36:e4:14:85:33:4e:71:5f:eb:d8:00:6c:97:80:
83:77:bb:24:bf:60:e7:3d:0a:dc:99:d3:a9:ad:8e:
68:8f:6c:0f:91:c3:26:cf:b0:df:2e:7c:61:ad:2c:
a9:0a:5f:ea:9c:44:5c:72:d5:ea:07:50:33:d6:65:
9c:98:9c:2d:6f:61:8c:0c:39:ab:63:57:af:89:cb:
4d:5b:f1:99:99:47:f0:9c:01:3e:3c:1f:83:1a:9f:
b5:f1:90:13:13:65:f3:3d:d2:3b:0e:f4:4b:b9:fa:
71:60:63:8d:f3:d4:dd:e2:cd:3a:b6:07:d3:f9:9e:
b4:0d:64:4f:e8:fd:7c:9e:b9:d2:22:a4:43:27:2f:
40:85:fd:21:df:66:ca:d6:c0:55:09:da:7a:86:bd:
95:c7:9f:62:ce:76:e4:dd:c9:97:11:a8:17:bd:3f:
f5:4a:59:5d:da:b2:73:35:a5:b0:db:b7:00:4e:78:
ea:bd:5f:ae:99:c3:f8:80:65:43:52:0a:e1:bc:06:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:63:A4:5A:D8:B0:D3:22:64:C0:0D:B5:BB:70:65:BE:ED:5D:30
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/HVtjpFrYsNMiZMANtbtwZb7tXTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb42::/39
Signature Algorithm: sha256WithRSAEncryption
81:c7:15:e9:ce:ce:f9:bc:25:5f:1d:8c:36:29:d4:16:a0:33:
4e:23:51:9b:15:fc:4f:7a:6c:58:cd:5f:98:19:70:40:37:c8:
07:bb:00:d5:77:89:2f:bf:60:0d:de:63:7e:50:a6:ba:e6:b6:
5c:e6:3a:95:db:b3:63:65:b1:64:81:7f:c3:1a:96:58:08:bb:
b8:fe:44:fa:29:1f:76:6c:6f:6f:22:14:95:e7:4a:88:48:36:
f5:d1:0d:3d:9c:2a:b8:11:76:ee:9b:86:06:e7:ef:94:82:01:
c7:9b:d4:06:2c:19:6a:1a:2e:a1:cc:4a:14:35:e2:c2:43:49:
1b:60:00:ec:b2:37:aa:a3:23:a4:68:26:57:d0:20:d5:76:1a:
5d:2a:04:50:e8:a1:6a:05:ae:78:4a:28:5d:19:9f:11:04:7e:
7b:60:ef:ed:bd:3e:81:b2:e9:8c:6f:96:8d:e0:55:06:ac:fb:
10:c7:5a:e8:ca:2e:4d:31:66:05:34:d1:e9:88:ca:d7:52:6e:
9d:24:96:f6:29:54:57:e1:0e:8b:9f:aa:9b:fa:91:4f:e0:7e:
0d:f7:ef:77:1d:32:db:23:dc:9e:90:98:ad:56:71:9f:c3:a5:
ae:8e:e3:94:f7:c5:91:34:3b:ab:c5:52:04:b5:3d:47:e0:54:
e9:59:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:54:58 2026 by rpki-client