Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/NiJjnS2W8XolKFCF5C-hCnJigso.roa
File: NiJjnS2W8XolKFCF5C-hCnJigso.roa (raw, json)
Hash identifier: EyKkMTntRufNQ6fGUNFtsAIez79BZS5wKkj4xW4e4a8=
Subject key identifier: 36:22:63:9D:2D:96:F1:7A:25:28:50:85:E4:2F:A1:0A:72:62:82:CA
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF8DEF46924FF86986BA3788AE2EE54
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/NiJjnS2W8XolKFCF5C-hCnJigso.roa
Signing time: Tue 16 Jun 2026 10:27:34 +0000
ROA not before: Tue 16 Jun 2026 10:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f8:de:f4:69:24:ff:86:98:6b:a3:78:8a:e2:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3622639d2d96f17a25285085e42fa10a726282ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:ee:11:7b:40:5f:53:8d:0a:27:29:ae:5b:
a0:11:69:77:61:87:14:18:73:b3:c5:5a:92:1b:4f:
ec:b3:08:cb:5e:24:3f:5d:03:b4:7d:b4:ae:fd:3c:
ec:d3:c6:2e:c6:19:ff:83:6e:f5:47:85:91:25:f8:
9b:0d:17:4b:05:5f:12:fe:a0:6c:8b:34:47:71:fe:
8a:67:33:35:84:82:59:bd:32:90:61:3e:7c:33:73:
9b:b4:07:c8:b7:24:6c:31:ad:6f:09:b2:86:a5:1a:
31:87:01:3f:2e:2d:98:92:64:e1:d2:f4:49:83:27:
f6:83:06:f0:46:fe:f8:fe:d6:08:64:e2:ca:2e:c7:
08:63:d2:b7:50:2c:b6:a9:0a:72:6b:28:09:b6:fd:
51:17:ba:0b:cf:42:4c:41:1f:f2:dc:2c:d3:ae:c6:
87:19:a1:a0:33:fa:64:34:1d:34:a1:a6:c2:46:88:
b0:69:81:59:75:24:6e:1a:da:d9:63:70:f8:07:2c:
57:0c:05:32:c4:44:22:dd:19:7a:fe:36:c9:8a:c4:
42:7e:9a:7e:bf:0c:19:cc:fb:70:58:9d:29:cf:82:
92:f7:d6:54:8c:42:3c:61:97:56:24:14:96:d6:48:
44:84:b2:01:80:e5:75:53:22:a4:bc:fb:33:a1:07:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:63:9D:2D:96:F1:7A:25:28:50:85:E4:2F:A1:0A:72:62:82:CA
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/NiJjnS2W8XolKFCF5C-hCnJigso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
7b:1d:9c:c1:b0:52:c6:de:7b:71:58:3a:48:49:d9:34:10:13:
99:97:e3:38:aa:c3:15:be:68:3a:6d:d6:86:76:c4:57:c3:a6:
b3:25:73:33:06:08:18:9c:1e:db:0b:b5:23:cb:f9:1c:d9:b9:
52:39:94:23:e1:8d:5b:93:85:cf:bc:72:2b:a9:c8:cc:e1:63:
09:71:b3:2c:cf:37:71:95:5a:cc:e7:7e:13:8b:d0:ba:3d:82:
ef:57:3e:1a:a8:e5:c2:73:98:69:7e:13:62:6c:95:50:bc:f5:
83:de:5a:2c:b9:a2:0b:3d:44:23:34:8b:16:ee:0d:01:19:48:
57:41:39:42:e6:45:d5:cd:5f:21:63:e2:26:c3:82:fa:6c:54:
cc:24:de:02:ae:4b:1a:43:32:82:5f:85:10:18:91:b8:14:99:
3e:53:63:c2:34:68:91:01:01:64:b2:0c:85:89:77:c5:80:2a:
31:a2:f2:d4:6a:bf:4f:2a:99:0e:99:31:3a:f9:2a:b9:f2:17:
d1:2c:de:e5:7e:1e:d7:d5:84:de:77:55:9e:2e:0f:f2:85:44:
65:9d:f5:80:4b:81:96:af:43:20:a8:29:0b:53:cb:77:bf:bb:
47:33:a6:c1:fc:e0:46:7f:af:7b:9f:0e:f6:2b:64:e6:f4:42:
b9:d5:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:32 2026 by rpki-client