Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/yNImWxuyQjHzmmv-3_EoOXHf-CU.roa
File: yNImWxuyQjHzmmv-3_EoOXHf-CU.roa (raw, json)
Hash identifier: +omRj5AvhzVWWvcblTxHnl95I2HJgpEVlK0ldmd1MWY=
Subject key identifier: C8:D2:26:5B:1B:B2:42:31:F3:9A:6B:FE:DF:F1:28:39:71:DF:F8:25
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D8658802A4568E0CD43431F040B0A3774
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/yNImWxuyQjHzmmv-3_EoOXHf-CU.roa
Signing time: Mon 13 Apr 2026 10:17:20 +0000
ROA not before: Mon 13 Apr 2026 10:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216299
IP address blocks: 2a12:cb41::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:58:80:2a:45:68:e0:cd:43:43:1f:04:0b:0a:37:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 13 10:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8d2265b1bb24231f39a6bfedff1283971dff825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:9d:f0:71:78:42:c4:07:e2:8a:ca:f6:0b:
5c:56:e3:a1:47:55:6b:b9:12:db:47:dd:33:96:d5:
5e:51:59:f5:bc:1e:9f:2e:b5:d3:e1:be:c0:55:75:
3c:2b:13:64:92:35:f0:09:ac:86:e5:46:ed:04:e4:
fb:cf:97:09:c9:c7:81:3b:a6:2c:9c:2b:62:5f:0f:
c5:56:cf:f6:b5:7a:59:6c:57:0e:c8:5a:3d:e3:c7:
60:34:fa:b4:bf:5e:3d:06:6c:65:71:ad:43:4d:8e:
7f:d5:23:75:04:23:88:73:82:d0:2e:81:1f:6b:04:
5a:c7:fd:14:90:5d:1c:fc:96:98:71:93:3a:b8:7f:
2b:49:2f:2a:0b:10:05:5d:3c:46:39:be:ff:0d:64:
10:93:63:37:b5:56:a5:fe:48:5b:6b:c6:f2:36:e7:
0c:05:f3:38:a4:53:21:64:78:ac:57:bd:26:73:ef:
b1:3d:c3:19:67:f4:81:11:5f:ab:ca:cc:91:c5:4e:
5d:ec:90:79:3e:62:46:c4:f0:46:1b:aa:79:33:5b:
c8:e8:3a:0e:91:ad:93:25:bf:6b:db:be:c1:86:49:
f3:36:8c:e0:12:90:3a:b2:1c:44:a2:80:15:c6:4c:
23:2b:52:1b:bd:9d:4b:66:87:ca:f1:db:dc:2d:ec:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:26:5B:1B:B2:42:31:F3:9A:6B:FE:DF:F1:28:39:71:DF:F8:25
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/yNImWxuyQjHzmmv-3_EoOXHf-CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41::/39
Signature Algorithm: sha256WithRSAEncryption
7e:10:72:20:9b:fc:4c:be:c4:4f:8d:e5:26:fd:b7:6d:47:60:
bd:c8:9b:be:4c:3f:cd:38:d5:a1:2a:62:e6:ee:ea:c8:c2:b9:
61:3f:95:ac:0e:61:f4:59:b2:8f:9f:67:14:12:2f:39:43:04:
21:8c:ab:8f:4a:cc:50:49:ea:d5:eb:3c:d6:90:f2:fb:a4:63:
c7:51:b7:dd:a4:54:f3:cf:88:34:e5:46:99:98:7f:31:19:91:
c8:d1:83:7c:5e:64:65:22:92:23:2c:72:c8:4e:3b:e3:78:1b:
c4:08:7a:df:0c:55:00:35:15:59:1e:96:43:b2:9a:bc:cd:e9:
cb:78:a1:48:d4:bc:8f:00:82:b9:4e:4c:39:46:40:e1:d8:3f:
63:e3:1b:38:81:24:53:77:8d:c9:f9:46:e8:24:02:c3:52:23:
b6:d4:06:c9:f7:a4:5d:d8:78:ca:07:eb:7f:11:7c:7a:c8:af:
e9:ee:33:79:07:b6:4b:59:a3:d3:35:28:7e:a2:a4:7e:28:8c:
d5:c2:10:f2:4c:16:79:36:a8:06:14:14:37:54:09:59:89:3a:
98:7b:a5:be:d8:25:9c:85:a0:90:c5:7f:aa:59:ab:d8:df:f0:
7b:c2:c0:4b:3e:dd:a6:bc:d3:1f:47:24:61:7d:c0:d0:6e:6b:
7c:7d:55:a0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ2GWIAqRWjgzUNDHwQLCjd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj
YTYyYWUwHhcNMjYwNDEzMTAxNzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGQyMjY1YjFiYjI0MjMxZjM5YTZiZmVkZmYxMjgzOTcxZGZmODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKd8HF4QsQH4orK9gtcVuOhR1Vr
uRLbR90zltVeUVn1vB6fLrXT4b7AVXU8KxNkkjXwCayG5UbtBOT7z5cJyceBO6Ys
nCtiXw/FVs/2tXpZbFcOyFo948dgNPq0v149Bmxlca1DTY5/1SN1BCOIc4LQLoEf
awRax/0UkF0c/JaYcZM6uH8rSS8qCxAFXTxGOb7/DWQQk2M3tVal/khba8byNucM
BfM4pFMhZHisV70mc++xPcMZZ/SBEV+rysyRxU5d7JB5PmJGxPBGG6p5M1vI6DoO
ka2TJb9r277BhknzNozgEpA6shxEooAVxkwjK1IbvZ1LZofK8dvcLeyBnwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMjSJlsbskIx85pr/t/xKDlx3/glMB8GA1UdIwQY
MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt
YzBkMjA3YzAyZDI3LzEveU5JbVd4dXlRakh6bW12LTNfRW9PWEhmLUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3
LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKhLLQQAw
DQYJKoZIhvcNAQELBQADggEBAH4QciCb/Ey+xE+N5Sb9t21HYL3Im75MP8041aEq
Yubu6sjCuWE/lawOYfRZso+fZxQSLzlDBCGMq49KzFBJ6tXrPNaQ8vukY8dRt92k
VPPPiDTlRpmYfzEZkcjRg3xeZGUikiMscshOO+N4G8QIet8MVQA1FVkelkOymrzN
6ct4oUjUvI8AgrlOTDlGQOHYP2PjGziBJFN3jcn5RugkAsNSI7bUBsn3pF3YeMoH
638RfHrIr+nuM3kHtktZo9M1KH6ipH4ojNXCEPJMFnk2qAYUFDdUCVmJOph7pb7Y
JZyFoJDFf6pZq9jf8HvCwEs+3aa80x9HJGF9wNBua3x9VaA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:25 2026 by rpki-client