Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Nwdo9pCrD81ywh_gJmPjPhdaStc.roa
File: Nwdo9pCrD81ywh_gJmPjPhdaStc.roa (raw, json)
Hash identifier: CByN02Aqb3g+j+Q+mQ1Lee+5OIhmSlvoV3blLVBIyuw=
Subject key identifier: 37:07:68:F6:90:AB:0F:CD:72:C2:1F:E0:26:63:E3:3E:17:5A:4A:D7
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D70AE3E0124C6B3C618D9349559B080FF
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Nwdo9pCrD81ywh_gJmPjPhdaStc.roa
Signing time: Thu 09 Apr 2026 05:19:20 +0000
ROA not before: Thu 09 Apr 2026 05:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207529
IP address blocks: 2a12:cb47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:ae:3e:01:24:c6:b3:c6:18:d9:34:95:59:b0:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 9 05:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=370768f690ab0fcd72c21fe02663e33e175a4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:3a:dd:fc:1a:8b:3a:bd:40:96:7d:a1:9b:
66:49:82:08:60:3f:37:b9:a0:19:f3:23:64:fd:fd:
11:23:94:f8:a5:dd:e7:40:81:9e:bb:c7:9f:35:0e:
f1:7d:94:e2:4e:a7:de:41:d4:9b:c7:19:39:11:11:
18:a7:39:b0:5c:be:1f:bf:1f:21:dc:0c:ab:58:a0:
fd:09:4a:80:79:2c:46:7c:84:c4:35:88:b1:92:a7:
5a:66:cb:1c:59:08:d1:42:5d:6d:1c:16:db:a0:b7:
35:50:91:95:d4:21:48:11:dd:25:98:c2:65:38:4e:
e3:32:ed:8c:f6:36:6a:70:90:4f:79:e1:f3:f3:b4:
bc:30:82:98:6b:e9:30:2b:c7:fa:55:57:6f:5c:4c:
38:45:1d:a3:7f:4c:d9:51:8c:f9:4c:9a:e4:fb:22:
3f:84:a3:b5:b5:6d:54:28:95:46:89:d5:b9:4f:a9:
8a:fd:20:58:b4:d2:1c:86:7d:c6:f5:e7:ec:78:47:
d5:c9:43:7f:3c:d7:cd:fe:a2:10:30:da:70:bf:e7:
51:59:b5:0c:ce:a1:ed:5b:62:93:da:1d:ed:a7:0d:
97:12:60:f3:25:3b:87:0d:91:02:27:bb:a5:c5:b4:
6e:b4:d3:e9:ad:72:9e:b3:19:1b:84:ed:a4:90:ec:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:68:F6:90:AB:0F:CD:72:C2:1F:E0:26:63:E3:3E:17:5A:4A:D7
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Nwdo9pCrD81ywh_gJmPjPhdaStc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f0:67:2b:99:60:6f:90:ef:5d:d8:fb:2d:df:0e:71:8d:f1:
5e:3e:b6:5c:da:f7:ec:e7:a7:66:f3:71:67:3f:99:6e:cf:51:
b3:5b:5e:44:94:24:b9:ab:ed:4c:86:b0:a3:30:3a:61:25:48:
c9:cb:e9:26:c3:42:33:d3:57:b3:66:ac:00:bb:fa:6e:9b:0a:
80:2a:d7:25:60:3d:ab:f1:41:b3:d4:e6:44:1f:88:66:8e:39:
75:75:9a:d8:04:15:59:16:1a:2d:2c:e8:7f:06:da:78:d9:03:
ae:ce:1e:af:dc:38:c1:48:d6:f9:10:eb:7b:3b:eb:8f:e3:7a:
3c:63:b0:66:97:f5:34:df:dc:cf:82:21:bc:53:8e:aa:a8:c0:
1f:af:c4:7d:60:c5:af:ba:e1:7e:56:76:50:98:d6:b3:0b:24:
66:d1:b8:02:5d:8b:e1:c7:a7:d7:4f:3d:ab:d4:ee:d2:45:a2:
bf:49:6a:66:60:32:47:ae:d9:5f:dd:f5:84:ea:d1:aa:02:cc:
58:12:f8:7e:54:21:6e:d9:4b:78:45:93:8a:21:3b:86:e1:5b:
7f:78:68:3e:d8:8e:8f:1a:1c:c4:5b:71:8f:15:65:81:1f:e1:
60:38:cd:c2:0e:19:8c:d2:68:d3:de:de:db:45:b2:35:06:51:
cf:0c:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:40 2026 by rpki-client