Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EmyaY_gGLVp2EbRhlKsXtDw78pM.roa
File: EmyaY_gGLVp2EbRhlKsXtDw78pM.roa (raw, json)
Hash identifier: 60gdqfHeBl8beF532HzAXaMjrczrig9QaqpgfTpd81Y=
Subject key identifier: 12:6C:9A:63:F8:06:2D:5A:76:11:B4:61:94:AB:17:B4:3C:3B:F2:93
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A0A00305D308FA335C5CE1024BC37A1921
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EmyaY_gGLVp2EbRhlKsXtDw78pM.roa
Signing time: Mon 14 Sep 2026 13:02:27 +0000
ROA not before: Mon 14 Sep 2026 13:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213482
IP address blocks: 2a12:bec4:1780::/44 maxlen: 44
2a12:bec4:1c50::/44 maxlen: 44
2a12:bec4:1e40::/44 maxlen: 44
2a12:bec4:1e60::/44 maxlen: 44
2a12:bec4:1e70::/44 maxlen: 44
2a12:bec4:1e80::/44 maxlen: 44
2a12:bec4:1f40::/44 maxlen: 44
2a12:bec4:2030::/44 maxlen: 48
2a12:bec4:2040::/44 maxlen: 48
2a12:bec5::/32 maxlen: 32
2a12:bec6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:03:05:d3:08:fa:33:5c:5c:e1:02:4b:c3:7a:19:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 14 13:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=126c9a63f8062d5a7611b46194ab17b43c3bf293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:02:f8:04:e0:a5:20:42:85:2c:4c:2c:f7:
76:8e:b8:02:28:9c:69:85:1e:0a:96:d6:44:e7:88:
eb:ae:f5:53:80:e4:e8:bf:40:5e:fa:6c:95:33:b7:
fd:87:ab:90:06:59:30:be:a5:7f:3f:eb:79:6d:37:
dd:09:83:f8:2a:84:a2:80:c3:b4:e2:09:51:d1:19:
65:a8:aa:d0:6d:ea:1c:09:28:b4:8a:f7:a9:e9:af:
72:87:f3:71:89:e9:3d:6d:76:42:d8:3a:49:a8:01:
a0:97:4f:f0:50:c3:16:5d:92:d5:7b:6f:16:c4:c8:
78:13:d3:e2:3a:0d:41:33:78:9e:dd:2f:c8:32:1e:
d0:d1:71:f3:6d:45:af:57:44:8d:55:33:0d:4c:a5:
92:50:41:4d:9e:b2:de:b8:1e:13:f8:c8:86:73:94:
38:12:0a:ea:d0:71:16:8e:50:89:b2:e7:ee:6f:8a:
c6:b2:6c:c1:35:6c:32:c2:5a:f9:15:e9:ce:3c:22:
a6:82:b0:57:95:ee:c5:f3:2e:1d:e6:bb:40:d7:8c:
ce:25:98:b4:5e:d0:91:85:a4:77:98:78:c0:e3:85:
7e:98:15:96:3c:06:8b:51:b4:e2:a3:ed:52:fb:b0:
d3:99:3a:ee:a5:c7:dd:bc:ed:fd:b5:49:8f:d7:45:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:9A:63:F8:06:2D:5A:76:11:B4:61:94:AB:17:B4:3C:3B:F2:93
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EmyaY_gGLVp2EbRhlKsXtDw78pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1780::/44
2a12:bec4:1c50::/44
2a12:bec4:1e40::/44
2a12:bec4:1e60::-2a12:bec4:1e8f:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1f40::/44
2a12:bec4:2030::-2a12:bec4:204f:ffff:ffff:ffff:ffff:ffff
2a12:bec5::-2a12:bec6:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b3:ff:03:9a:28:8d:01:63:2f:c8:7a:70:ad:4f:31:84:05:c0:
bf:7a:a6:4c:36:83:fc:50:e8:9a:21:71:f9:c2:a1:8e:73:1e:
a0:92:cc:a8:64:58:88:7d:72:ea:a2:9e:9a:d2:31:8d:2a:00:
2e:c9:d1:ec:f4:be:d5:f7:52:f6:55:30:56:fe:b0:eb:27:a7:
36:e8:a9:d0:85:9c:d3:60:6e:cc:78:92:af:8e:61:e6:39:c4:
89:2c:8f:00:19:2a:64:b6:ee:fd:e8:3a:31:b1:91:59:d5:fd:
c3:d7:af:2d:d5:50:98:89:57:a0:aa:49:d6:fa:ea:2d:04:a4:
fb:be:a1:57:1b:7f:66:66:38:f2:a9:22:95:c6:41:6d:3c:a0:
7d:d8:6a:74:20:72:9c:68:3f:b7:76:96:d8:e8:97:a6:98:d7:
db:f5:c2:5e:6b:25:7f:56:2a:34:0b:7a:56:d9:9d:92:e8:11:
ee:66:48:5e:93:e9:2c:7b:46:6c:b5:8a:dd:eb:26:2c:38:5f:
9a:7a:2a:2a:1a:8d:0d:4b:6d:88:99:5b:95:4f:aa:e8:66:a9:
e7:99:cb:26:3d:6a:c8:33:ed:d0:fc:61:b2:88:bc:fd:1e:6d:
ae:2e:85:d2:70:ec:66:02:ff:90:29:f3:ac:a2:ae:74:71:cc:
bc:13:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:48:52 2026 by rpki-client