Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/s4jOY2hxOjA9XR8C3F6jyFaSTaw.roa
File: s4jOY2hxOjA9XR8C3F6jyFaSTaw.roa (raw, json)
Hash identifier: Jl2IpLUmHItdBYENBSNPcqwH5PybEaLvfvR+JxTITEo=
Subject key identifier: B3:88:CE:63:68:71:3A:30:3D:5D:1F:02:DC:5E:A3:C8:56:92:4D:AC
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A163655366308650E9DBDD6967E30C4BAC
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/s4jOY2hxOjA9XR8C3F6jyFaSTaw.roa
Signing time: Thu 22 Oct 2026 11:35:47 +0000
ROA not before: Thu 22 Oct 2026 11:35:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151785
IP address blocks: 2a12:cb41:c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:65:53:66:30:86:50:e9:db:dd:69:67:e3:0c:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 22 11:35:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b388ce6368713a303d5d1f02dc5ea3c856924dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:3a:ee:e8:fa:e0:f2:ec:2c:6f:ec:72:dd:
fa:22:7b:db:a5:bf:88:97:74:31:46:fe:8d:8e:1c:
e9:22:d6:45:7a:82:8b:1c:71:11:65:24:97:03:51:
b4:c7:4d:39:c9:a1:76:cc:ce:d3:95:74:b1:76:09:
b5:3c:f9:83:7a:a2:8f:e4:78:c1:5a:e7:b0:12:ee:
46:6a:9c:1c:1e:d1:13:81:c3:f0:b1:2b:38:04:7d:
a3:34:79:6f:62:d3:18:b1:36:e7:65:1d:25:35:92:
29:af:f4:cf:9c:2a:07:ca:d2:d6:f4:29:7f:aa:b1:
64:fa:f8:b7:32:cb:fe:45:6d:f3:03:77:10:91:1e:
4a:9c:34:eb:5c:f3:d7:c4:0f:64:de:bd:c5:72:fb:
ec:98:78:5d:e5:0b:98:06:2c:8a:7a:86:55:32:a8:
b7:22:fc:dc:df:8a:c5:09:54:fc:37:42:74:47:31:
98:a7:e3:41:f6:6d:f3:fe:eb:32:86:bf:6a:f9:68:
26:fd:8f:ce:f3:41:22:61:fb:a4:2a:bf:48:b2:7b:
3d:b1:87:3f:6f:69:41:99:ad:67:92:64:5c:ba:f4:
b2:f2:fd:90:2b:63:eb:39:1b:e0:6c:d4:b1:99:f8:
e2:81:38:5f:25:39:e6:4e:2c:bf:5e:a1:d7:2f:6d:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:CE:63:68:71:3A:30:3D:5D:1F:02:DC:5E:A3:C8:56:92:4D:AC
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/s4jOY2hxOjA9XR8C3F6jyFaSTaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:c00::/40
Signature Algorithm: sha256WithRSAEncryption
65:4b:8d:4d:61:51:fc:cb:eb:68:6e:08:d9:60:47:a7:5d:e6:
c1:bf:9d:86:8f:85:42:aa:67:20:3b:e8:a4:5c:17:80:16:cf:
87:1f:96:96:93:2c:d2:3e:45:b6:d6:64:1c:0f:2e:3b:c7:b7:
1a:74:89:cc:e9:9e:e6:cd:d0:73:41:60:b5:b0:14:5b:e1:3b:
87:72:cf:cd:16:c6:24:87:30:81:9f:8c:ea:40:d7:b3:d3:97:
f6:03:da:47:9a:0a:cc:72:ee:cb:a4:36:61:fb:b0:97:f7:e7:
c8:60:b7:3e:4d:ad:2e:03:65:8e:a7:0d:79:d3:89:3c:f3:5d:
85:9a:83:1a:73:d3:23:6c:b4:3c:2d:6f:ee:55:0d:c4:55:32:
4a:56:3a:fe:90:a5:93:0a:40:b4:64:67:50:a5:dc:5b:18:28:
1b:25:20:64:c2:96:f6:4b:76:a5:38:b3:74:d2:c1:fa:d8:68:
60:81:35:a5:25:02:ca:e6:9a:80:76:f2:25:0a:7b:f1:cd:c7:
9a:48:f1:bc:d7:cb:f2:0e:a3:71:4f:79:0b:fa:44:93:ad:ca:
e6:45:6b:e7:14:27:f8:8d:45:6b:6e:83:df:20:5d:78:a1:a0:
c6:54:8b:43:95:1e:cd:3b:90:7e:ab:8c:83:e5:47:af:8f:c1:
4c:80:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:18 2026 by rpki-client