Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/ZcRoMbdW4ZCP9_Xiv4lmN1rxgo4.roa
File: ZcRoMbdW4ZCP9_Xiv4lmN1rxgo4.roa (raw, json)
Hash identifier: SDmXIoG9CvGKSUM9rhjvQoJBN0hoAk/XFOvwM5HrP/U=
Subject key identifier: 65:C4:68:31:B7:56:E1:90:8F:F7:F5:E2:BF:89:66:37:5A:F1:82:8E
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A15BAB962172A0E3F91D1EE14F0F62C1CC
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/ZcRoMbdW4ZCP9_Xiv4lmN1rxgo4.roa
Signing time: Tue 20 Oct 2026 23:35:34 +0000
ROA not before: Tue 20 Oct 2026 23:35:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198078
IP address blocks: 2a12:cb41:600::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:ab:96:21:72:a0:e3:f9:1d:1e:e1:4f:0f:62:c1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 20 23:35:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65c46831b756e1908ff7f5e2bf8966375af1828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:4d:e2:50:c4:a0:c4:88:68:d1:52:0a:dd:
c8:71:11:39:fb:88:1f:fa:a9:12:d2:b4:47:d7:2e:
c8:44:73:d3:55:04:19:ac:2a:65:c5:b2:84:75:f8:
82:05:95:d7:cb:60:ab:0f:20:d3:ed:c4:19:27:ec:
6b:24:66:4a:f8:7d:ff:d7:4d:3f:df:ed:f9:d9:1c:
65:6c:19:f9:3b:ca:0f:b0:3a:96:ed:35:55:70:31:
f3:51:5d:5b:d3:8f:00:d4:f8:c1:f6:40:ee:cb:3a:
c6:0e:e9:bb:b2:c8:72:34:a1:95:df:40:bf:b1:7f:
9b:23:69:ba:52:4c:8a:8f:31:93:15:01:c2:3b:e5:
7c:b9:eb:28:35:a1:39:1e:40:92:36:f6:b6:83:62:
4d:53:31:e1:4c:da:64:a6:08:f5:9e:8a:02:e0:2a:
d6:b0:6c:32:83:fe:73:17:e4:b4:74:71:40:4e:f9:
70:dd:43:ed:77:06:9c:00:26:82:8e:b9:4e:81:47:
e4:13:75:16:a3:48:18:87:b8:09:07:f7:9b:e3:4d:
ac:d3:be:d4:92:a4:1a:b0:2a:6d:e0:51:2d:f5:3c:
2e:9c:0f:a6:1e:70:07:44:d4:6b:95:00:14:64:28:
cb:86:92:0b:5c:fa:fc:39:2c:6d:97:8d:ea:75:87:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:68:31:B7:56:E1:90:8F:F7:F5:E2:BF:89:66:37:5A:F1:82:8E
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/ZcRoMbdW4ZCP9_Xiv4lmN1rxgo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:600::/39
Signature Algorithm: sha256WithRSAEncryption
7e:5d:bb:21:af:76:6d:76:9c:bb:10:66:8a:38:11:e7:31:4c:
b8:ee:fd:58:43:2a:3f:fa:e4:27:f8:d2:6e:46:15:38:fb:d6:
8d:ba:35:a0:b2:93:59:4f:52:65:aa:21:07:04:e4:74:00:53:
2b:72:4c:7b:39:c3:49:d4:ff:8b:73:15:5b:ae:c3:87:2d:b5:
ca:82:1a:5e:af:c6:00:1d:28:fc:56:f4:ce:fb:3f:40:c5:92:
ba:73:25:c1:c3:c7:34:a3:b5:2d:4c:62:0e:98:66:29:11:38:
41:a6:5c:7d:6d:04:e6:6d:22:de:54:8d:59:4c:92:51:ba:96:
db:91:31:a9:0f:1b:36:91:70:39:7b:ae:0c:f7:7f:92:10:a8:
9a:7a:58:86:15:4e:43:a9:e3:62:11:d8:59:66:25:66:93:77:
81:2a:d2:1c:5b:ff:8b:c6:36:9d:b9:35:ef:aa:6e:17:95:97:
ce:b6:7a:f4:d6:2e:b5:90:ac:f7:2c:b9:36:13:21:8d:a0:97:
ac:fe:67:d3:78:e1:ba:d6:25:29:01:f4:c9:da:eb:b1:0b:b1:
19:60:7f:28:3f:28:6d:4e:0d:59:74:68:cc:52:8f:18:43:7f:
79:63:a6:60:f3:fd:63:d1:2c:a5:81:3f:fc:bb:e1:25:b3:14:
95:9d:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:17 2026 by rpki-client