Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/nzF4pvhkYT0v7DpgFFwzyZ2zcHQ.roa
File: nzF4pvhkYT0v7DpgFFwzyZ2zcHQ.roa (raw, json)
Hash identifier: GFGSKN4+PEh3VPFCdWd4MjFD78Y4ebFOknkO8FII1Qo=
Subject key identifier: 9F:31:78:A6:F8:64:61:3D:2F:EC:3A:60:14:5C:33:C9:9D:B3:70:74
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019E96B464B726C048CEC8E109801E108D2F
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/nzF4pvhkYT0v7DpgFFwzyZ2zcHQ.roa
Signing time: Fri 05 Jun 2026 07:34:25 +0000
ROA not before: Fri 05 Jun 2026 07:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25085
IP address blocks: 2a12:cb41:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:96:b4:64:b7:26:c0:48:ce:c8:e1:09:80:1e:10:8d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Jun 5 07:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f3178a6f864613d2fec3a60145c33c99db37074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:04:2d:89:c6:a3:2c:b6:2c:98:e1:42:b9:
06:91:d5:7a:48:88:ef:24:79:45:ac:93:98:6c:62:
9a:32:c5:be:2b:e9:ab:8d:e1:e1:56:4d:a5:f1:9a:
70:e8:e4:b3:44:6c:2f:1f:76:b1:40:7f:45:08:22:
60:8a:bd:cd:00:3b:c7:38:61:23:ff:bf:17:b2:00:
03:eb:96:1d:e6:74:9c:0c:51:55:e7:40:0a:3b:20:
53:2a:d0:31:fa:1a:c4:f7:59:73:c9:b4:b0:cf:9f:
be:01:44:d4:19:9b:16:1c:34:22:8d:62:43:7c:5a:
a9:cb:34:47:90:3e:4c:88:52:d7:69:b4:74:29:13:
19:49:09:34:84:5a:48:e7:12:47:48:ea:d5:b5:d2:
1b:7d:98:09:0d:14:18:f4:41:db:64:d0:36:74:69:
56:27:8b:43:cd:73:0c:fb:ee:e4:94:8c:43:23:28:
81:fe:50:1d:c3:b7:1d:e3:ea:3f:55:f0:5c:34:d3:
cf:f2:3f:5f:1b:ad:b4:31:b1:d5:ef:c4:92:f3:71:
f6:22:31:1b:db:e5:6b:46:7d:54:60:fb:01:aa:7d:
3f:ac:17:88:4d:3c:bf:f3:89:39:37:8f:5c:52:a9:
85:57:27:f3:fa:d7:75:ad:3b:2b:cd:ba:fd:bf:f0:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:78:A6:F8:64:61:3D:2F:EC:3A:60:14:5C:33:C9:9D:B3:70:74
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/nzF4pvhkYT0v7DpgFFwzyZ2zcHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:1100::/40
Signature Algorithm: sha256WithRSAEncryption
8a:60:31:ed:ee:d9:f1:dd:0f:8f:db:85:01:96:7c:4c:83:93:
7b:74:4b:87:fe:fc:5a:dc:ca:8c:cc:44:19:4e:4f:57:ad:44:
32:03:fd:69:e8:05:15:77:90:05:6c:bf:04:e2:86:4d:7a:3b:
bd:8f:f8:2a:c9:d2:87:7a:dd:f7:25:18:7b:97:35:96:f0:b7:
0b:0c:63:11:10:42:f1:7d:e0:04:fc:92:a2:a1:86:fa:77:30:
b8:c5:07:fb:3d:43:5e:e6:04:fe:70:0d:ae:56:5a:57:eb:90:
9a:be:2b:d0:90:01:19:23:6e:64:b3:8d:ca:45:de:89:95:a7:
bb:50:80:27:4b:87:e1:da:8c:38:be:43:2f:fc:3c:62:24:01:
1d:77:29:bf:1c:47:70:87:ba:42:b0:cd:74:ce:78:5c:db:17:
b4:05:1d:3d:b0:80:d6:c6:ba:e7:f4:2e:a6:eb:c6:42:a2:24:
69:60:c3:0e:1f:1f:79:4a:54:85:45:44:55:d1:33:2f:8e:52:
70:57:21:42:ec:c4:7e:13:42:77:4b:52:ec:9b:b2:bb:de:9e:
fd:78:fc:b3:87:bc:11:54:14:46:1d:3e:c2:01:b7:bf:e5:f5:
17:33:0b:e2:10:34:6d:27:db:8e:5a:20:55:d9:3b:c5:b8:78:
ce:72:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:03 2026 by rpki-client