Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/XHv-9KHlAwt591_k7h05dIqrWa8.roa
File: XHv-9KHlAwt591_k7h05dIqrWa8.roa (raw, json)
Hash identifier: El8dQBufg2+dgHfJ+JPniQdlChjXmnt/RNOUKqRvNjI=
Subject key identifier: 5C:7B:FE:F4:A1:E5:03:0B:79:F7:5F:E4:EE:1D:39:74:8A:AB:59:AF
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A15CF7EC5429E79AFF1C4A4A56236281A1
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/XHv-9KHlAwt591_k7h05dIqrWa8.roa
Signing time: Wed 21 Oct 2026 05:38:34 +0000
ROA not before: Wed 21 Oct 2026 05:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25085
IP address blocks: 2a12:cb41:1100::/40 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:f7:ec:54:29:e7:9a:ff:1c:4a:4a:56:23:62:81:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 21 05:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c7bfef4a1e5030b79f75fe4ee1d39748aab59af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ba:32:96:5d:b2:5a:5e:de:1d:84:5c:98:
0f:ad:b9:f0:3b:29:d1:25:80:63:1d:80:ac:dd:4a:
86:44:c0:d6:eb:04:dd:ef:d6:ac:84:5d:d9:71:17:
d2:8e:a8:19:d5:94:65:59:bf:eb:5a:b1:f1:97:ec:
6f:68:7a:4e:bf:22:10:05:06:ff:41:06:ed:7e:ac:
e9:85:db:90:17:31:02:69:1f:59:30:e9:fd:76:7c:
43:35:69:8f:1b:da:4c:d5:23:05:7e:ab:18:bd:ce:
74:16:9f:09:66:ef:c6:36:72:14:22:40:9f:b2:e2:
bb:81:21:92:0b:75:b1:e9:06:4f:37:40:34:4c:34:
70:82:8d:e7:46:0d:68:e7:a9:f8:08:aa:f1:98:9b:
d4:3d:38:1b:f1:92:c8:2f:6f:a7:75:54:f3:d4:ca:
a4:73:cf:eb:14:d4:4d:4d:d4:4f:33:9b:58:22:f2:
e6:5e:9f:92:36:b0:3e:6f:78:5b:2e:f3:d7:4a:64:
46:38:b0:99:71:63:34:04:e8:c2:e0:b5:65:8d:99:
94:7b:99:c5:5c:88:48:3f:65:71:55:4d:47:88:ce:
f5:68:5c:b0:ad:56:68:4d:c1:3d:f8:98:54:1a:eb:
b0:3f:d0:bb:b2:76:09:6b:96:e3:07:11:9e:55:ca:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:FE:F4:A1:E5:03:0B:79:F7:5F:E4:EE:1D:39:74:8A:AB:59:AF
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/XHv-9KHlAwt591_k7h05dIqrWa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:1100::/40
Signature Algorithm: sha256WithRSAEncryption
85:cb:50:d9:80:63:c3:b9:4b:df:71:8c:9b:7a:78:18:31:24:
f3:19:8c:fa:fd:03:7e:2d:8f:35:41:a8:87:b7:06:d7:c0:3c:
23:05:8e:2e:33:8a:54:9d:fa:e3:be:45:fe:0c:83:11:46:f3:
e6:98:e8:87:6d:b0:3f:e0:47:ce:e9:fd:3f:37:85:2e:85:dc:
c1:8c:f5:76:01:d9:62:8c:d8:83:e7:3f:13:2a:24:27:6f:65:
98:6e:9a:4e:c2:5b:27:0f:59:ba:56:6a:df:2b:c8:fc:84:62:
dc:70:f2:fe:30:3e:dd:ee:94:3c:68:e0:d6:4d:6c:d0:61:fa:
b1:fa:ac:6e:07:82:77:7e:35:10:33:bc:f0:c1:2a:d9:c1:34:
fb:3b:9e:15:e4:8d:82:a1:dd:e6:38:55:30:54:83:9d:d9:42:
5e:f4:c9:ff:58:4c:d7:c0:07:82:00:63:16:dc:0a:9e:99:83:
52:9b:c6:0a:cd:b1:78:c5:ab:76:34:bc:dd:3d:b5:6a:f9:66:
c4:f7:be:10:54:74:a7:50:09:1e:a4:69:42:0c:2b:a3:02:36:
b9:f3:a8:b2:f5:96:31:37:93:f7:75:e6:02:b0:9f:20:06:4b:
45:88:ec:fa:b0:2d:91:67:6c:a0:83:9d:db:f9:79:a6:79:26:
7a:2a:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:06 2026 by rpki-client