Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/CLI88VHiEhgKE-1aGQUntQikJ5Q.roa
File: CLI88VHiEhgKE-1aGQUntQikJ5Q.roa (raw, json)
Hash identifier: ZVHFqHEU1nz5pNZPpYsPfnWS/ZMoHolHN6V8GvVDEFc=
Subject key identifier: 08:B2:3C:F1:51:E2:12:18:0A:13:ED:5A:19:05:27:B5:08:A4:27:94
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019E57582C74D6B8B7AA21D80CA95AA0E92B
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/CLI88VHiEhgKE-1aGQUntQikJ5Q.roa
Signing time: Sun 24 May 2026 00:17:36 +0000
ROA not before: Sun 24 May 2026 00:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:d040:1::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:10::/48 maxlen: 48
2a13:d040:11::/48 maxlen: 48
2a13:d040:12::/48 maxlen: 48
2a13:d040:13::/48 maxlen: 48
2a13:d040:14::/48 maxlen: 48
2a13:d040:15::/48 maxlen: 48
2a13:d040:16::/48 maxlen: 48
2a13:d040:17::/48 maxlen: 48
2a13:d040:18::/48 maxlen: 48
2a13:d040:19::/48 maxlen: 48
2a13:d040:1a::/48 maxlen: 48
2a13:d040:1b::/48 maxlen: 48
2a13:d040:1c::/48 maxlen: 48
2a13:d040:1d::/48 maxlen: 48
2a13:d040:1e::/48 maxlen: 48
2a13:d040:1f::/48 maxlen: 48
2a13:d040:20::/48 maxlen: 48
2a13:d040:21::/48 maxlen: 48
2a13:d040:22::/48 maxlen: 48
2a13:d040:23::/48 maxlen: 48
2a13:d040:24::/48 maxlen: 48
2a13:d040:25::/48 maxlen: 48
2a13:d040:26::/48 maxlen: 48
2a13:d040:27::/48 maxlen: 48
2a13:d040:28::/48 maxlen: 48
2a13:d040:29::/48 maxlen: 48
2a13:d040:2a::/48 maxlen: 48
2a13:d040:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:58:2c:74:d6:b8:b7:aa:21:d8:0c:a9:5a:a0:e9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: May 24 00:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08b23cf151e212180a13ed5a190527b508a42794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:7f:fb:f5:c7:bc:fa:4e:6a:c7:bc:ea:23:
85:be:73:7c:99:c4:4c:37:1f:d3:1b:cf:88:69:8c:
69:6e:16:2e:d3:37:fe:52:41:54:4f:ef:66:15:a0:
04:53:bd:de:ee:bf:12:92:d7:56:9e:74:67:20:5f:
d3:62:f9:2d:76:3f:89:af:ba:de:17:7a:be:e3:bb:
22:d8:f4:7f:c8:51:17:44:0c:ce:e8:b7:2d:c2:0e:
62:b5:2c:d8:00:c2:3a:0b:98:3f:69:16:8b:b9:78:
cb:c7:32:74:88:25:b4:c3:ee:e2:c7:68:9b:c1:0d:
ba:54:48:c0:eb:84:d7:96:09:20:bf:ea:55:99:ff:
24:8d:58:b7:42:a4:44:94:8d:2e:f6:a7:e9:34:8f:
73:b8:46:37:40:7f:50:6b:14:95:aa:92:94:76:c3:
f9:cf:99:b3:df:11:05:1c:7e:e1:d1:95:70:51:3a:
b4:5d:73:bb:ac:e9:03:78:96:e0:d8:17:93:cd:9f:
5d:6a:a5:fd:77:d5:94:c1:c4:0d:41:19:cf:45:2f:
f1:14:aa:ab:e9:5a:28:bb:c2:91:59:28:98:40:45:
61:19:db:f8:29:6b:c1:ea:33:44:aa:03:26:b1:a0:
eb:23:10:60:8b:ca:8d:d7:c3:e9:13:47:c9:e5:91:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:3C:F1:51:E2:12:18:0A:13:ED:5A:19:05:27:B5:08:A4:27:94
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/CLI88VHiEhgKE-1aGQUntQikJ5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040:1::-2a13:d040:3:ffff:ffff:ffff:ffff:ffff
2a13:d040:10::-2a13:d040:2b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:99:45:21:09:a6:db:06:18:1b:a1:99:cb:9c:bd:f4:bc:8f:
ad:c8:4d:27:53:ea:02:6d:69:55:a0:ce:0e:a7:b5:c2:cc:05:
7d:21:0e:a4:5c:ee:1d:e4:f0:6c:da:83:fb:a9:91:ec:3c:31:
e5:63:aa:aa:bd:30:08:7b:11:54:7f:3f:a4:73:ce:0e:9f:17:
ce:b6:41:68:ec:c4:3e:1c:fe:0d:87:85:c8:cc:25:fd:53:7f:
0c:16:12:9e:b9:3e:93:dd:38:f1:be:6e:bb:3d:eb:13:8b:26:
d3:02:e1:57:47:23:6d:0e:95:c5:e4:68:ed:da:7f:32:90:06:
44:06:31:cf:5b:42:0f:68:03:49:90:87:d6:e7:78:06:a3:ca:
a6:58:ba:d5:e5:61:9a:5f:11:34:a2:82:b3:47:6e:46:e7:78:
2f:06:ad:e7:99:58:c8:82:68:e8:52:91:5f:d8:52:b2:0a:6c:
7a:b8:fd:11:e9:cd:ac:a5:65:71:2e:5d:08:01:c3:7a:6a:7d:
e0:21:e7:24:3a:b0:95:ab:9b:c9:7a:17:69:bf:d5:2f:ec:43:
94:72:69:ea:ab:8e:a7:4c:e8:4a:df:ad:43:80:df:0e:1d:d9:
46:2b:4e:d5:35:00:de:d1:4e:fe:bb:61:91:3c:68:f0:7b:ab:
2e:c5:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:11 2026 by rpki-client