Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Pjr8P4WxPjNWQYpDxrZZw8gQcac.roa
File: Pjr8P4WxPjNWQYpDxrZZw8gQcac.roa (raw, json)
Hash identifier: hnkHYyW4iqL/9EC+ffrxQuiBvp6Sspix+g4e3XwjMN0=
Subject key identifier: 3E:3A:FC:3F:85:B1:3E:33:56:41:8A:43:C6:B6:59:C3:C8:10:71:A7
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D75B837414BB02FA302F209E9F267FE43
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Pjr8P4WxPjNWQYpDxrZZw8gQcac.roa
Signing time: Fri 10 Apr 2026 04:48:20 +0000
ROA not before: Fri 10 Apr 2026 04:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199353
IP address blocks: 2a12:cb41:200::/39 maxlen: 48
2a12:cb46:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:75:b8:37:41:4b:b0:2f:a3:02:f2:09:e9:f2:67:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 10 04:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e3afc3f85b13e3356418a43c6b659c3c81071a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:fa:02:52:1c:08:ab:fb:25:5c:cb:3f:3d:
9b:bb:aa:3d:ce:f9:d3:6d:0b:11:13:a3:c7:0b:92:
4c:b7:00:a8:3d:3d:fa:8c:5c:ce:da:c7:bd:64:bb:
6c:bf:5f:8b:9d:29:b3:a1:64:4d:26:f7:c7:c1:b1:
d7:f8:af:33:4f:1e:5c:c8:af:1c:e5:e8:43:0c:38:
b9:fd:fb:ea:09:e0:f5:6c:09:cd:1b:e6:e4:a1:12:
b3:d5:67:85:55:d4:ad:fa:81:4e:31:ee:d9:6e:39:
03:7d:55:38:85:f8:4c:ff:03:64:1b:4b:96:ab:1d:
93:e2:8e:90:39:0c:db:fb:1c:e9:13:3a:e5:fc:8b:
d8:86:fa:6e:66:fb:cd:07:cf:b2:e6:22:d8:2a:55:
cf:6d:ad:ae:3b:77:82:4d:3b:9f:94:ed:8a:de:7f:
e2:5f:34:10:8f:ac:03:03:51:2c:20:a5:cf:12:57:
6e:74:a2:37:47:1f:7c:53:22:31:2b:e2:6b:d8:92:
4f:3f:85:78:ab:59:cd:7d:2d:47:c0:82:91:f6:1e:
bf:20:e6:49:b3:9a:95:85:94:d6:d3:28:32:4e:70:
bd:3f:02:5a:72:f9:b9:9d:9c:a1:41:24:d7:1a:e2:
52:cd:23:14:de:bb:e9:0c:e9:44:cc:84:67:b9:32:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:FC:3F:85:B1:3E:33:56:41:8A:43:C6:B6:59:C3:C8:10:71:A7
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/Pjr8P4WxPjNWQYpDxrZZw8gQcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:200::/39
2a12:cb46:6000::/40
Signature Algorithm: sha256WithRSAEncryption
51:68:e0:af:95:cb:67:77:6c:a5:84:4d:8c:99:ca:12:a9:95:
66:55:0e:a7:22:3e:e3:50:9d:ca:95:9e:5a:e1:bf:6f:8f:67:
57:b0:0a:9b:7a:7d:3e:86:6c:3f:77:15:53:6a:38:76:c8:0b:
b9:42:c5:5d:43:83:46:d2:57:0e:2e:6c:fd:dd:14:49:58:1e:
cc:f0:37:54:d4:ca:fb:69:47:77:6b:d1:e7:10:23:9b:64:e9:
0f:26:24:76:6f:07:2a:10:99:3d:0d:9a:23:0d:1e:00:2f:8a:
89:7f:5f:42:a7:81:da:9a:bf:b1:9f:1c:8e:7e:c9:bd:6a:0e:
ab:8c:ef:28:df:72:10:99:fd:41:37:36:0f:4b:f8:d7:d9:6b:
0b:66:c4:fb:ae:db:05:41:6f:2a:2c:07:25:af:1a:9c:bb:34:
ac:ca:44:05:0b:43:88:1a:46:86:0a:f9:5a:37:55:c5:38:fe:
38:d9:ec:50:06:b2:fb:8b:9b:c1:7b:0c:ea:12:83:c4:70:71:
01:c6:2d:a5:dc:41:e7:71:f8:a6:86:5a:d7:53:2d:70:b0:01:
95:b6:c9:c2:4e:d1:21:df:fd:0e:a6:9d:f3:97:b3:9a:ad:19:
f9:40:34:95:18:e2:9a:2f:8d:42:0f:9c:22:4f:36:a5:e4:60:
25:2d:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:39 2026 by rpki-client