Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/u24qDBWEu9RBKIlNcnVjTPEWriA.roa
File: u24qDBWEu9RBKIlNcnVjTPEWriA.roa (raw, json)
Hash identifier: dXa0B1vtzAvU3OpTSRkC30g9i7RuE0UaT2flClYSH2M=
Subject key identifier: BB:6E:2A:0C:15:84:BB:D4:41:28:89:4D:72:75:63:4C:F1:16:AE:20
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A152B0B4212AB7291C77E40F2FFEC18C2E
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/u24qDBWEu9RBKIlNcnVjTPEWriA.roa
Signing time: Mon 19 Oct 2026 05:44:34 +0000
ROA not before: Mon 19 Oct 2026 05:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a12:cb41:1100::/40 maxlen: 48
2a12:cb41:1100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:b0:b4:21:2a:b7:29:1c:77:e4:0f:2f:fe:c1:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 19 05:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb6e2a0c1584bbd44128894d7275634cf116ae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:68:62:8d:82:1c:7d:be:40:83:c9:2b:38:
53:c4:65:8a:57:cc:2a:94:a9:46:7e:69:fe:7b:bd:
66:a5:3a:5e:18:e1:05:5a:87:21:8a:71:4d:64:bf:
fb:92:f3:61:35:1c:c0:9a:b3:14:f2:be:85:fc:67:
05:d1:3b:e1:aa:c8:63:db:5f:bb:96:b6:bc:b0:dc:
a1:ad:ae:a8:16:cb:8e:30:e0:40:f6:e4:63:08:30:
21:af:d8:d1:de:3e:6e:3a:a8:0e:d7:44:75:f7:bb:
9b:0b:a5:87:6a:39:02:e3:96:d8:f8:f3:ae:84:87:
ad:7d:37:ef:e0:9c:c6:e1:7c:fb:ca:0b:5d:49:fc:
22:2b:28:a1:b5:6b:83:b9:2c:49:ec:2a:14:f4:08:
38:fe:f7:a2:60:84:3d:05:c0:0b:62:d7:5e:bc:8d:
51:ce:7b:43:ca:5d:64:e1:48:52:3a:5c:5f:d0:f8:
5a:1c:69:34:a1:b0:ab:27:74:a5:43:0c:75:a4:6b:
7d:ce:d1:40:29:b4:b9:9c:17:19:c7:ea:76:17:bd:
fa:90:98:70:78:6b:4c:86:2a:16:3e:97:9e:c8:03:
8a:97:ae:21:0b:7a:93:e1:3c:dc:fd:09:f0:16:a6:
56:12:0a:d7:7f:42:56:7f:74:d9:16:87:50:1b:b8:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:2A:0C:15:84:BB:D4:41:28:89:4D:72:75:63:4C:F1:16:AE:20
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/u24qDBWEu9RBKIlNcnVjTPEWriA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:1100::/40
Signature Algorithm: sha256WithRSAEncryption
a1:63:87:03:0d:04:0e:43:ca:02:ea:93:0f:ea:0e:37:2a:f3:
17:36:9a:bc:56:89:6a:d2:10:b0:2c:53:ae:af:a3:57:db:25:
84:0a:6e:27:a3:5a:ed:74:94:93:ed:e8:72:7c:12:8c:0e:84:
93:d8:32:a5:06:e5:2a:1b:2d:c0:e1:98:79:aa:de:ee:66:03:
49:b2:2a:e4:9b:50:e4:b4:13:05:c2:fc:c2:fc:32:1a:ee:3a:
4e:4d:60:f7:bc:6c:41:b7:34:a8:67:98:38:40:f6:c3:b9:7d:
b4:ce:1a:cc:33:ca:bc:26:2c:3b:26:a1:be:ea:a6:35:a1:a4:
a1:ef:7c:0f:f1:6f:01:2d:44:20:c7:1f:94:14:55:91:85:43:
6e:4b:4b:08:c0:e7:20:cc:ff:06:d7:82:be:2c:56:2c:1e:0c:
be:4a:da:6a:9f:c5:d7:02:1d:df:b3:a6:cd:f9:89:ae:71:47:
23:de:1a:85:33:d2:cb:b1:dd:03:c4:67:dd:5d:0d:9e:6c:1a:
43:69:4e:02:78:fc:1b:1e:62:7e:db:b7:dc:92:70:56:1a:16:
dc:7d:fc:00:72:a4:3c:d4:b2:29:3b:64:bd:a9:58:43:5c:38:
ab:f1:f6:5a:ee:b3:c5:d6:7b:3a:0c:0f:7d:92:54:6c:bf:fe:
2a:74:c1:0b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaFSsLQhKrcpHHfkDy/+wYwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj
YTYyYWUwHhcNMjYxMDE5MDU0NDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjZlMmEwYzE1ODRiYmQ0NDEyODg5NGQ3Mjc1NjM0Y2YxMTZhZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6VoYo2CHH2+QIPJKzhTxGWKV8wq
lKlGfmn+e71mpTpeGOEFWochinFNZL/7kvNhNRzAmrMU8r6F/GcF0Tvhqshj21+7
lra8sNyhra6oFsuOMOBA9uRjCDAhr9jR3j5uOqgO10R197ubC6WHajkC45bY+POu
hIetfTfv4JzG4Xz7ygtdSfwiKyihtWuDuSxJ7CoU9Ag4/veiYIQ9BcALYtdevI1R
zntDyl1k4UhSOlxf0PhaHGk0obCrJ3SlQwx1pGt9ztFAKbS5nBcZx+p2F736kJhw
eGtMhioWPpeeyAOKl64hC3qT4Tzc/QnwFqZWEgrXf0JWf3TZFodQG7htZwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLtuKgwVhLvUQSiJTXJ1Y0zxFq4gMB8GA1UdIwQY
MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt
YzBkMjA3YzAyZDI3LzEvdTI0cURCV0V1OVJCS0lsTmNuVmpUUEVXcmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3
LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLLQREw
DQYJKoZIhvcNAQELBQADggEBAKFjhwMNBA5DygLqkw/qDjcq8xc2mrxWiWrSELAs
U66vo1fbJYQKbiejWu10lJPt6HJ8EowOhJPYMqUG5SobLcDhmHmq3u5mA0myKuSb
UOS0EwXC/ML8MhruOk5NYPe8bEG3NKhnmDhA9sO5fbTOGswzyrwmLDsmob7qpjWh
pKHvfA/xbwEtRCDHH5QUVZGFQ25LSwjA5yDM/wbXgr4sViweDL5K2mqfxdcCHd+z
ps35ia5xRyPeGoUz0sux3QPEZ91dDZ5sGkNpTgJ4/BseYn7bt9yScFYaFtx9/ABy
pDzUsik7ZL2pWENcOKvx9lrus8XWezoMD32SVGy//ip0wQs=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:19 2026 by rpki-client