Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/CYSDTEbN7HCPv6WiTf4vl9sTrPY.roa
File: CYSDTEbN7HCPv6WiTf4vl9sTrPY.roa (raw, json)
Hash identifier: z82DlMwvfURdZOYsNEnqd/DqjQsx8SUcftkxrBVOKkI=
Subject key identifier: 09:84:83:4C:46:CD:EC:70:8F:BF:A5:A2:4D:FE:2F:97:DB:13:AC:F6
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D71A74326FC125CF60D7D7E4014B74E70
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/CYSDTEbN7HCPv6WiTf4vl9sTrPY.roa
Signing time: Thu 09 Apr 2026 09:51:20 +0000
ROA not before: Thu 09 Apr 2026 09:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153376
IP address blocks: 2a12:cb41:200::/39 maxlen: 48
2a12:cb46:6000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:a7:43:26:fc:12:5c:f6:0d:7d:7e:40:14:b7:4e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 9 09:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0984834c46cdec708fbfa5a24dfe2f97db13acf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:43:99:0b:e8:0a:58:a5:06:e6:f0:bc:cb:
d8:85:22:74:f0:c3:6c:93:c6:4a:2b:73:8c:ff:f1:
6b:9c:1e:86:7c:62:8b:93:a8:0b:95:89:00:eb:c3:
36:7e:e2:77:0a:4b:9f:46:e6:34:45:0e:e3:cd:6f:
49:c2:c6:73:b1:b3:6e:0a:1c:9f:8b:bd:58:41:83:
69:92:8e:6c:96:d5:d0:c0:93:15:d0:41:37:4b:13:
de:7a:d5:da:58:c9:f5:98:52:e6:eb:09:74:b2:69:
13:0f:f8:2a:86:1b:7d:93:dd:3c:48:03:6c:6a:70:
23:99:68:26:49:6c:fd:7e:fc:fb:44:a6:ba:c8:06:
8f:56:ef:0d:af:0f:50:3d:55:62:0a:6d:68:8b:0d:
65:0f:0a:71:09:ea:fa:5d:4f:77:ec:fe:30:2b:4c:
10:8a:a9:6a:9b:3d:af:2a:f8:74:e5:cb:e0:f7:8b:
34:dd:42:d7:b9:41:e2:68:f0:2a:4e:f1:a5:f8:0d:
2f:d0:6f:6c:aa:5a:9c:b0:8d:30:83:23:33:3f:39:
60:97:43:1f:95:7a:96:00:bb:fc:a0:a3:60:68:dd:
3e:bf:6a:d8:95:a7:0e:1b:1a:43:91:93:1d:bd:5c:
42:0b:90:f5:6f:79:e2:fb:f5:cd:ba:05:a9:ed:ab:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:84:83:4C:46:CD:EC:70:8F:BF:A5:A2:4D:FE:2F:97:DB:13:AC:F6
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/CYSDTEbN7HCPv6WiTf4vl9sTrPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:200::/39
2a12:cb46:6000::/36
Signature Algorithm: sha256WithRSAEncryption
42:5e:e9:ff:64:0f:52:86:1b:b7:de:a5:bf:41:21:b8:40:94:
98:cc:b1:ae:34:47:b8:ec:8f:46:67:d5:7f:46:06:95:ec:69:
63:c8:72:6d:ec:c5:00:5d:37:be:f0:b4:7d:67:68:4d:0d:87:
eb:1d:bb:ee:7a:3e:59:3f:08:10:2d:56:ba:a0:78:bb:b9:05:
14:79:84:c2:d2:7f:48:58:f4:b4:13:13:93:b2:1c:c5:ef:8f:
c8:cb:3c:13:7f:d6:fe:4a:4e:dc:b6:30:f1:42:c0:b3:0b:46:
97:56:10:f8:47:38:aa:5c:f4:cd:06:f2:dd:62:88:f8:c6:7c:
71:f6:ff:f9:bc:e5:2c:7a:09:a3:5d:2e:90:ce:48:45:48:0b:
f8:9d:72:ca:2e:a7:95:4c:c8:80:a6:06:71:5c:0b:a6:31:10:
1d:8f:64:06:66:60:67:7c:c3:d8:b9:9d:2e:ca:3c:41:d4:54:
e8:a6:63:12:9a:67:ea:2f:fd:6f:7b:ad:ef:5e:92:a9:20:7b:
ca:ab:25:c1:eb:6c:b6:95:af:2e:48:e7:16:51:ee:e7:2f:22:
b8:da:d9:1a:03:52:67:e1:c0:27:3c:21:49:52:a9:ae:3e:92:
51:ab:23:96:81:ce:f2:41:67:45:e6:70:1a:ed:16:4a:55:02:
35:94:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:15 2026 by rpki-client