Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/YF0JCEms2KXmPHlGc2bhdslCoMY.roa
File: YF0JCEms2KXmPHlGc2bhdslCoMY.roa (raw, json)
Hash identifier: TLn2rL1tOH0jWzXZMjUtfq0aySOIcv2w9yQfsVR5G1g=
Subject key identifier: 60:5D:09:08:49:AC:D8:A5:E6:3C:79:46:73:66:E1:76:C9:42:A0:C6
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019E76E78E0AD3FE13C75115840F92841623
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/YF0JCEms2KXmPHlGc2bhdslCoMY.roa
Signing time: Sat 30 May 2026 03:22:27 +0000
ROA not before: Sat 30 May 2026 03:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197259
IP address blocks: 2a12:cb40:430::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 08:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:76:e7:8e:0a:d3:fe:13:c7:51:15:84:0f:92:84:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: May 30 03:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=605d090849acd8a5e63c79467366e176c942a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:44:62:ee:c0:62:42:2c:83:a2:ea:18:89:b4:
30:5a:44:a2:dd:03:ed:ac:cd:b2:96:95:e5:23:b7:
10:bd:82:3d:26:d3:eb:9a:bc:1c:63:f3:05:f4:69:
70:d7:ab:83:12:6e:41:15:87:5e:06:19:c0:a2:1f:
23:25:b6:b4:1e:05:15:df:7a:22:39:fd:e5:97:a7:
c0:f6:c2:44:12:52:74:ce:b5:b7:ce:5d:e6:e0:4a:
30:4a:94:87:54:51:2a:d9:49:72:62:2b:aa:bc:c1:
be:e6:24:69:49:2c:e3:50:a1:dc:72:40:82:59:76:
8b:2d:9c:9c:54:e2:6f:b0:17:f6:8e:df:ed:7b:03:
15:93:c6:47:56:0b:90:21:ee:e1:ed:15:a5:d3:ef:
48:8b:c5:61:f1:5f:00:1f:bf:6c:c7:4d:a6:a5:e2:
50:4b:f7:e9:e8:0e:73:51:6e:27:68:e0:07:25:eb:
f8:00:a8:ef:3c:27:8c:03:8f:c7:96:fd:66:0b:1a:
13:34:0a:83:29:b0:d2:82:90:0b:40:48:5a:e3:1b:
c3:59:60:19:8b:a2:2b:20:a5:cd:f2:f2:c5:c8:a3:
ce:5e:7a:c2:a8:72:24:7d:4b:e1:6d:22:01:aa:1d:
f3:0f:68:ba:5e:bc:80:47:f9:eb:e0:a5:e8:64:8f:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5D:09:08:49:AC:D8:A5:E6:3C:79:46:73:66:E1:76:C9:42:A0:C6
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/YF0JCEms2KXmPHlGc2bhdslCoMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40:430::/44
Signature Algorithm: sha256WithRSAEncryption
8f:cf:46:c5:55:c3:00:1f:0c:2f:dc:ca:c5:a1:eb:dc:05:0e:
5b:d4:9b:aa:a5:e6:2c:78:3d:df:c2:b4:ed:49:d6:fb:08:51:
53:c0:17:f2:d5:4a:4e:af:3d:6f:0e:47:99:5a:09:b0:78:f3:
bd:39:fe:2d:f3:e5:66:1f:4b:6c:06:54:3c:8f:8e:59:fa:59:
13:fd:0e:d0:2c:0c:8f:68:23:f2:6f:77:73:86:bb:6c:01:82:
ab:d7:9f:9a:10:32:f6:3e:90:a7:c8:54:fa:0b:a3:f1:32:57:
5e:3d:de:a8:f9:8f:9c:5a:46:2e:c6:d7:70:09:0f:1e:52:ad:
74:57:3b:ea:8e:a2:f6:af:8f:3c:aa:82:06:41:21:57:f4:f2:
f8:f2:d9:6a:4c:c1:79:f6:2b:28:02:67:e6:62:c2:24:28:0c:
ba:55:67:f3:34:cb:38:50:84:f4:aa:40:2e:b6:f6:b0:d4:48:
c2:0a:0d:b3:ef:02:5b:ae:42:af:ef:5f:3b:c1:1e:94:84:cb:
35:96:3c:59:7d:38:f7:82:f4:ef:80:1a:f0:28:bb:48:05:c4:
da:1d:ce:a4:be:24:cc:3a:25:d1:5f:49:c2:d2:26:f8:89:82:
e2:fc:f1:43:8a:9f:50:93:2a:ff:38:bb:ed:8c:18:fe:36:d5:
88:cf:8b:45
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ52544K0/4Tx1EVhA+ShBYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj
YTYyYWUwHhcNMjYwNTMwMDMyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDVkMDkwODQ5YWNkOGE1ZTYzYzc5NDY3MzY2ZTE3NmM5NDJhMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kRi7sBiQiyDouoYibQwWkSi3QPt
rM2ylpXlI7cQvYI9JtPrmrwcY/MF9Glw16uDEm5BFYdeBhnAoh8jJba0HgUV33oi
Of3ll6fA9sJEElJ0zrW3zl3m4EowSpSHVFEq2UlyYiuqvMG+5iRpSSzjUKHcckCC
WXaLLZycVOJvsBf2jt/tewMVk8ZHVguQIe7h7RWl0+9Ii8Vh8V8AH79sx02mpeJQ
S/fp6A5zUW4naOAHJev4AKjvPCeMA4/Hlv1mCxoTNAqDKbDSgpALQEha4xvDWWAZ
i6IrIKXN8vLFyKPOXnrCqHIkfUvhbSIBqh3zD2i6XryAR/nr4KXoZI+35wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGBdCQhJrNil5jx5RnNm4XbJQqDGMB8GA1UdIwQY
MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt
YzBkMjA3YzAyZDI3LzEvWUYwSkNFbXMyS1htUEhsR2MyYmhkc2xDb01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3
LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLLQAQw
MA0GCSqGSIb3DQEBCwUAA4IBAQCPz0bFVcMAHwwv3MrFoevcBQ5b1JuqpeYseD3f
wrTtSdb7CFFTwBfy1UpOrz1vDkeZWgmwePO9Of4t8+VmH0tsBlQ8j45Z+lkT/Q7Q
LAyPaCPyb3dzhrtsAYKr15+aEDL2PpCnyFT6C6PxMldePd6o+Y+cWkYuxtdwCQ8e
Uq10VzvqjqL2r488qoIGQSFX9PL48tlqTMF59isoAmfmYsIkKAy6VWfzNMs4UIT0
qkAutvaw1EjCCg2z7wJbrkKv7187wR6UhMs1ljxZfTj3gvTvgBrwKLtIBcTaHc6k
viTMOiXRX0nC0ib4iYLi/PFDip9Qkyr/OLvtjBj+NtWIz4tF
-----END CERTIFICATE-----
Generated at Fri Jun 5 18:42:02 2026 by rpki-client