Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa
File: X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa (raw, json)
Hash identifier: OOv3o2LHWlvIdA+Zgu9PaIEfBk4ChhYVmLlz2Cwp33o=
Subject key identifier: 5F:DB:95:B7:2F:99:E8:E0:F3:85:A3:46:4B:99:75:C6:AE:69:3D:5C
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D4C0197282DA2168DBAECDBBD14CB54F8
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa
Signing time: Thu 02 Apr 2026 02:24:25 +0000
ROA not before: Thu 02 Apr 2026 02:24:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199605
IP address blocks: 2a12:cb40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:01:97:28:2d:a2:16:8d:ba:ec:db:bd:14:cb:54:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 2 02:24:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fdb95b72f99e8e0f385a3464b9975c6ae693d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:17:01:cc:e5:5e:76:43:ce:dc:ef:52:8e:
e2:82:30:da:b6:8f:d8:7c:2d:87:50:63:20:bd:09:
53:e5:cc:7f:df:e3:7a:79:1c:74:b4:f1:ce:4a:f2:
47:3a:a9:4e:d8:4c:97:23:c2:13:d8:17:72:1d:71:
3a:1b:41:81:d4:8e:be:1c:66:d4:1c:e8:dd:f5:4f:
8f:b0:ab:29:74:1b:91:7f:c1:f8:e9:aa:0b:10:e6:
37:07:53:23:65:0c:d0:e6:a3:65:f0:9a:39:3c:4f:
fa:24:14:9e:80:5b:ab:8c:44:d8:b2:ce:e0:ba:f6:
62:19:cb:0a:66:a7:5f:ee:81:04:48:32:f4:6b:81:
90:52:43:fa:8a:b7:3f:71:49:65:1a:f4:8b:40:84:
b5:9b:d5:04:28:2b:a5:2c:07:72:6a:34:a8:f8:f4:
d0:ac:06:50:d2:5c:87:69:4a:e6:55:ab:43:27:30:
e1:11:64:02:03:e3:59:f7:4b:81:2b:ce:49:9a:1d:
85:ea:64:aa:23:16:6d:4e:a7:40:5f:00:dc:bb:b0:
07:2f:70:ed:a8:28:50:88:59:7f:90:f7:64:12:8a:
19:98:29:f9:73:51:1a:9e:2f:fa:b3:a2:e3:a9:58:
bf:1c:a6:0c:1e:be:a8:f1:e7:25:5b:01:66:da:1b:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:95:B7:2F:99:E8:E0:F3:85:A3:46:4B:99:75:C6:AE:69:3D:5C
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
b6:af:93:57:a5:59:0a:24:35:bd:f9:23:88:a2:2d:ff:f0:91:
04:fb:1d:6f:a2:13:74:36:be:27:8f:10:90:8a:56:ab:83:b2:
31:f0:83:4f:bb:36:07:45:2b:a0:26:e5:59:c4:b9:8f:98:6c:
eb:0e:fe:c4:64:b2:f2:f0:31:a5:0c:69:a4:cc:45:2f:ee:fe:
4d:34:2c:ac:fb:08:09:0f:b6:eb:c6:dd:3c:0b:e8:2b:5a:b9:
97:22:ca:d2:a0:91:a9:b4:95:22:4b:d4:a1:8a:7f:c6:f2:00:
c8:5a:e9:94:7d:0a:25:92:3f:3d:aa:9d:91:6c:84:c2:0f:fa:
a4:40:c8:48:13:6c:fc:5c:1a:ea:4b:a1:d3:08:ec:3e:ee:07:
31:bf:d4:73:d5:92:b4:72:66:04:cd:c2:5d:b9:01:2f:12:49:
43:9d:3a:88:b0:6a:80:e5:2c:cb:ee:c9:83:cc:1f:fc:ad:63:
dd:eb:c3:c0:08:a3:3d:77:0f:44:42:80:44:96:94:76:f2:7d:
58:f0:f7:dd:2c:ef:77:3d:ea:e3:ad:45:d2:71:3d:31:8f:e9:
ca:ba:34:37:55:38:8e:84:2d:a4:8c:fc:c1:ba:70:f4:84:de:
f1:03:41:45:e1:37:6e:95:87:82:dd:3d:04:e1:da:1a:bb:32:
4b:02:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 12:03:31 2026 by rpki-client