Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/afwPx0FIBqz2zxMx1OzNulPNuQs.roa
File: afwPx0FIBqz2zxMx1OzNulPNuQs.roa (raw, json)
Hash identifier: mBtbLYbB8/wqtcKjYg6ImsR3gQi32SHh8lzdvBMp1vs=
Subject key identifier: 69:FC:0F:C7:41:48:06:AC:F6:CF:13:31:D4:EC:CD:BA:53:CD:B9:0B
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019F70C2AF6DC038F178A56CB0B9396B2BB2
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/afwPx0FIBqz2zxMx1OzNulPNuQs.roa
Signing time: Fri 17 Jul 2026 15:47:14 +0000
ROA not before: Fri 17 Jul 2026 15:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202335
IP address blocks: 2a12:cb47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:c2:af:6d:c0:38:f1:78:a5:6c:b0:b9:39:6b:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Jul 17 15:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fc0fc7414806acf6cf1331d4eccdba53cdb90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:c0:83:94:5d:90:29:f5:58:fc:51:75:c7:
8c:ea:a1:37:4d:a1:b1:1b:b7:0a:05:fc:11:86:cb:
8a:c3:ca:4a:b7:c6:4b:62:52:9b:18:d2:48:39:53:
fb:35:c0:d2:ab:a3:d3:cd:1a:26:6a:b9:aa:8e:15:
45:cb:97:af:9b:b2:aa:db:28:38:23:9f:6d:63:57:
a0:64:e3:0b:9b:91:c1:96:cb:e7:2b:55:ed:48:31:
ee:27:92:5b:50:78:ad:9b:c1:b7:da:aa:51:00:c1:
1f:f7:f3:11:ce:0e:40:4d:48:8d:bc:ef:13:0e:a2:
5c:3b:af:ee:71:84:29:63:4d:74:58:53:13:36:e8:
ae:b0:a8:2d:94:7c:10:7c:a2:9b:20:94:47:03:79:
24:3d:41:de:3c:f2:15:df:e9:15:e7:42:a1:fa:d4:
8b:05:79:72:c8:2c:b6:4f:25:b3:f6:e3:8c:b8:fe:
93:52:d2:b8:0b:49:79:7b:5d:11:2b:b9:8c:83:9e:
c7:81:3b:2a:21:63:b2:e8:25:b6:09:69:59:5a:9a:
7b:4f:1c:73:47:fb:7b:88:aa:f7:40:ab:20:81:3d:
2b:5a:a7:6e:dc:8a:a4:1e:70:52:4b:86:ab:5a:a7:
4c:b7:08:c2:03:57:9f:18:fc:3b:bf:5f:49:f2:a3:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:0F:C7:41:48:06:AC:F6:CF:13:31:D4:EC:CD:BA:53:CD:B9:0B
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/afwPx0FIBqz2zxMx1OzNulPNuQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4b:1f:3f:57:96:6f:be:b3:46:d6:40:38:ca:e3:e1:ab:75:7f:
f6:e3:97:28:d2:1e:ba:fd:20:33:40:f5:ca:11:7f:38:bc:fc:
9a:31:c7:7a:b8:21:2e:9b:75:d1:7c:7a:ba:27:f7:a5:de:47:
af:e9:42:30:95:da:51:6a:ae:96:93:72:d4:96:d5:51:da:6d:
3c:9d:76:e1:11:71:57:7c:d5:26:13:30:2d:3a:40:3b:3c:c7:
26:c3:da:cd:b9:37:d5:44:63:18:99:52:42:37:70:52:fe:d1:
13:74:60:ce:01:2e:06:2f:ec:d4:df:62:13:0a:8c:a6:cf:9b:
16:d4:59:66:43:81:9b:6b:50:6b:42:87:e8:b1:5c:f9:dc:a5:
3d:1b:4b:f8:83:1a:e5:de:dc:ed:10:4e:c6:23:67:9d:5d:d5:
0c:35:91:3e:7d:c8:bc:be:27:6c:e2:ee:e6:07:e8:f6:83:1b:
07:63:4b:a6:e1:57:3d:5b:04:02:ca:69:63:fa:93:0c:d4:19:
50:62:cc:e9:0c:53:b1:e6:f6:9a:59:9c:98:b7:a5:1e:c5:01:
50:65:ad:0d:8a:a5:ac:94:5d:e3:83:8b:44:a1:98:0d:0a:2e:
43:ce:d4:54:fe:9e:bd:0a:9c:0e:57:c8:2e:a0:8a:43:e9:ae:
47:35:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:09:05 2026 by rpki-client