Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X1f0ZFPfB5ruZ_NafcJH8LcVWEQ.roa
File: X1f0ZFPfB5ruZ_NafcJH8LcVWEQ.roa (raw, json)
Hash identifier: Uc/MaeE7ML7QZbEuW+NIs1r4+PNLca7e2ubkfnzQZ2s=
Subject key identifier: 5F:57:F4:64:53:DF:07:9A:EE:67:F3:5A:7D:C2:47:F0:B7:15:58:44
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019EBC81516ABF1965885298EA763892E8CC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X1f0ZFPfB5ruZ_NafcJH8LcVWEQ.roa
Signing time: Fri 12 Jun 2026 15:44:12 +0000
ROA not before: Fri 12 Jun 2026 15:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214630
IP address blocks: 2a12:bec4:16a0::/44 maxlen: 48
2a12:bec4:1c40::/44 maxlen: 48
2a12:bec4:1d50::/44 maxlen: 48
2a12:bec4:1dc0::/44 maxlen: 48
2a12:bec4:1ec0::/44 maxlen: 48
2a12:bec4:1ed0::/44 maxlen: 48
2a12:bec4:1f20::/44 maxlen: 48
2a12:bec4:1f80::/44 maxlen: 48
2a12:bec4:1f90::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:81:51:6a:bf:19:65:88:52:98:ea:76:38:92:e8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 12 15:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f57f46453df079aee67f35a7dc247f0b7155844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:28:e8:ad:f1:f0:96:b2:b7:08:fb:8b:63:
bc:6a:68:e1:23:e4:40:b7:a8:b7:5b:7b:46:6c:6a:
4e:2b:de:2f:33:3a:48:c5:2e:6b:c1:51:e7:cb:fd:
66:de:00:7e:68:65:44:83:8b:13:c4:53:1e:52:f3:
aa:98:87:4d:ae:c1:d7:9f:23:fd:58:e9:cb:08:60:
38:71:7f:6c:70:3a:80:0c:83:c8:4f:08:2d:b0:06:
3b:ac:03:d9:4f:f1:3f:9b:16:94:15:28:7e:0d:90:
2c:d1:50:bc:47:ad:7b:53:1d:89:56:8f:ab:56:af:
80:17:b5:ea:21:24:b4:4a:18:22:3c:00:26:51:7f:
d5:fd:5e:89:44:06:32:21:c0:82:b1:6a:3b:e7:5a:
f7:d0:22:0e:3a:cc:76:0d:83:39:db:e8:20:85:88:
c8:35:ec:2d:03:e6:bd:2e:38:93:68:9e:8b:cc:f6:
e6:10:1e:94:7e:63:8a:7f:ad:38:aa:51:70:84:80:
67:66:20:81:30:9f:45:d7:34:a3:43:01:e7:d9:78:
c0:6e:0e:a5:4d:bf:fb:b5:a0:af:84:86:cb:41:2a:
38:68:7a:f7:45:f4:54:c0:89:91:8e:6d:3d:98:15:
92:a1:a2:7a:57:9e:35:61:ed:6a:b4:9a:a1:96:27:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:F4:64:53:DF:07:9A:EE:67:F3:5A:7D:C2:47:F0:B7:15:58:44
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X1f0ZFPfB5ruZ_NafcJH8LcVWEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16a0::/44
2a12:bec4:1c40::/44
2a12:bec4:1d50::/44
2a12:bec4:1dc0::/44
2a12:bec4:1ec0::/43
2a12:bec4:1f20::/44
2a12:bec4:1f80::/43
Signature Algorithm: sha256WithRSAEncryption
0d:93:a3:f4:c5:06:9b:03:ec:2d:4b:a1:16:16:3e:5c:19:5f:
d1:a1:71:22:9f:e3:d0:74:65:66:7c:50:0d:bd:8a:2f:1f:f5:
ad:ac:2a:b4:c7:22:0b:9b:ef:49:22:29:a7:bd:a1:6c:e3:cb:
b6:09:87:57:8f:77:50:38:8e:ef:69:7e:6d:cd:dc:3a:ea:2c:
18:7c:25:9e:c0:6a:80:bd:67:44:e0:08:e4:72:70:c2:98:0f:
5f:f1:54:d4:f7:c3:24:26:28:92:60:d6:0c:13:a7:a0:e9:4f:
94:ad:25:15:e1:b8:03:97:66:14:2b:33:89:41:5d:e9:b6:41:
0a:08:4c:57:0c:5d:ed:53:23:ad:62:db:8d:cb:7a:df:5f:0a:
22:d0:cd:16:74:c3:38:1b:88:55:16:40:9f:bf:e1:6e:4f:7e:
c6:ab:d2:32:2f:fd:4e:a0:87:0b:c2:aa:64:6c:0b:c1:83:08:
13:f5:58:38:4f:41:09:d5:b5:df:06:67:64:39:eb:d7:73:68:
a8:36:67:74:5d:8f:b5:06:8e:19:47:82:60:61:e9:9f:3c:f9:
e5:30:2e:84:3c:d4:4a:73:95:0f:ee:e1:42:48:e1:17:44:27:
d1:bd:f9:82:f6:40:67:63:87:8c:94:b6:49:1a:48:2f:19:76:
8d:f9:08:76
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZ68gVFqvxlliFKY6nY4kujMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwNjEyMTU0NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjU3ZjQ2NDUzZGYwNzlhZWU2N2YzNWE3ZGMyNDdmMGI3MTU1ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklgo6K3x8Jaytwj7i2O8amjhI+RA
t6i3W3tGbGpOK94vMzpIxS5rwVHny/1m3gB+aGVEg4sTxFMeUvOqmIdNrsHXnyP9
WOnLCGA4cX9scDqADIPITwgtsAY7rAPZT/E/mxaUFSh+DZAs0VC8R617Ux2JVo+r
Vq+AF7XqISS0ShgiPAAmUX/V/V6JRAYyIcCCsWo751r30CIOOsx2DYM52+gghYjI
NewtA+a9LjiTaJ6LzPbmEB6UfmOKf604qlFwhIBnZiCBMJ9F1zSjQwHn2XjAbg6l
Tb/7taCvhIbLQSo4aHr3RfRUwImRjm09mBWSoaJ6V541Ye1qtJqhlif2DwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFF9X9GRT3wea7mfzWn3CR/C3FVhEMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvWDFmMFpGUGZCNXJ1Wl9OYWZjSkg4TGNWV0VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwcEKhK+xBag
AwcEKhK+xBxAAwcEKhK+xB1QAwcEKhK+xB3AAwcFKhK+xB7AAwcEKhK+xB8gAwcF
KhK+xB+AMA0GCSqGSIb3DQEBCwUAA4IBAQANk6P0xQabA+wtS6EWFj5cGV/RoXEi
n+PQdGVmfFANvYovH/WtrCq0xyILm+9JIimnvaFs48u2CYdXj3dQOI7vaX5tzdw6
6iwYfCWewGqAvWdE4AjkcnDCmA9f8VTU98MkJiiSYNYME6eg6U+UrSUV4bgDl2YU
KzOJQV3ptkEKCExXDF3tUyOtYtuNy3rfXwoi0M0WdMM4G4hVFkCfv+FuT37Gq9Iy
L/1OoIcLwqpkbAvBgwgT9Vg4T0EJ1bXfBmdkOevXc2ioNmd0XY+1Bo4ZR4JgYemf
PPnlMC6EPNRKc5UP7uFCSOEXRCfRvfmC9kBnY4eMlLZJGkgvGXaN+Qh2
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:30 2026 by rpki-client