Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/narWmTNN-iVSVw7MPTKk2ZAQD1w.roa
File: narWmTNN-iVSVw7MPTKk2ZAQD1w.roa (raw, json)
Hash identifier: J/H6097eg7tRkkWlKYldBfxYKU2ElEuNEqgUee+4WC8=
Subject key identifier: 9D:AA:D6:99:33:4D:FA:25:52:57:0E:CC:3D:32:A4:D9:90:10:0F:5C
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A1367923B632EB3D06C2DE277A16D010C2
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/narWmTNN-iVSVw7MPTKk2ZAQD1w.roa
Signing time: Tue 13 Oct 2026 18:14:30 +0000
ROA not before: Tue 13 Oct 2026 18:14:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212868
IP address blocks: 2a0c:6d87:f0d5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:79:23:b6:32:eb:3d:06:c2:de:27:7a:16:d0:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Oct 13 18:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9daad699334dfa2552570ecc3d32a4d990100f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:86:1a:df:b8:4e:b8:48:ab:bf:a7:1d:3d:
01:5f:9b:c5:60:51:0b:2d:29:7e:bb:08:3b:0e:23:
c8:e5:4e:85:17:2e:de:94:d5:1c:9b:2c:a6:e8:2a:
38:d6:79:91:fe:de:a1:76:95:e0:54:cb:d4:48:5d:
d1:2f:83:2d:7e:56:7d:c4:18:fa:45:5b:03:e5:36:
1d:b4:5a:07:85:27:c9:07:4c:2d:5c:86:4b:ff:ea:
6e:94:46:fc:10:5e:24:64:c0:01:25:1e:d0:28:58:
63:9e:60:7d:ef:7b:bb:52:3c:bc:b4:d9:b1:e4:40:
6b:8d:ae:58:c4:f5:e4:a1:f4:1b:f1:5e:9c:5c:07:
a7:9f:11:4f:fe:d9:71:fc:39:f1:17:1c:02:2e:02:
8b:43:d9:e9:6b:f4:df:e3:9d:fc:aa:46:b6:e6:23:
80:19:63:88:37:38:40:ee:a5:72:45:a0:ca:46:ff:
ff:84:f8:d3:22:8d:03:d2:d9:1a:af:ee:17:fd:9c:
2c:20:bf:97:e6:38:b4:5a:4d:26:37:eb:d8:4a:70:
eb:71:5a:40:af:94:00:8b:89:6d:03:57:7a:00:cf:
a1:69:91:50:89:dc:e6:3f:4d:c8:2f:17:eb:31:2d:
94:48:95:e6:00:b7:11:75:e7:40:f9:53:32:e4:e4:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:D6:99:33:4D:FA:25:52:57:0E:CC:3D:32:A4:D9:90:10:0F:5C
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/narWmTNN-iVSVw7MPTKk2ZAQD1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d87:f0d5::/48
Signature Algorithm: sha256WithRSAEncryption
4c:0d:5b:62:fe:6b:01:27:75:55:f9:80:37:6a:71:e1:de:50:
33:21:b5:29:4d:cc:92:8e:e8:e6:3a:09:ff:65:e5:ea:9d:c7:
dc:65:3b:aa:bf:36:28:b9:d3:f5:21:b8:68:68:af:d1:a9:9b:
0b:a7:c7:61:f3:c8:ab:db:2c:a3:ce:3f:fb:42:28:be:4d:74:
99:b2:0e:d8:84:61:9a:07:84:1d:76:29:a3:2b:07:da:88:d5:
7a:9a:c8:dd:b3:69:c4:3b:e6:f2:97:a7:04:54:7b:eb:39:dc:
f9:b1:e0:00:b9:9f:50:45:7e:55:75:3d:45:76:d4:18:01:b0:
49:42:2d:51:a0:b0:b3:d0:2e:af:7b:c0:14:7a:81:67:37:de:
d0:3a:87:11:75:9f:f9:44:b0:c1:1a:d1:64:32:e0:60:22:80:
8c:b5:23:47:94:96:8c:8b:4f:63:26:3f:2f:fd:c2:c9:9b:d0:
6b:e4:22:29:1a:70:e7:82:6f:5d:53:37:a5:3e:49:22:e7:1e:
76:81:5a:62:3d:6c:7f:0a:8f:1e:1c:11:1d:be:15:31:9d:e6:
2f:8d:35:91:6b:1a:59:50:65:6a:62:84:c7:69:e8:6b:26:9b:
4b:86:c2:a7:1c:bb:32:8d:67:ce:d7:92:2c:3e:3e:ca:48:10:
a9:89:79:97
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaE2eSO2Mus9BsLeJ3oW0BDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzY3Njc3YTMzZDNhNzk5ZjM2NDM4NDI5NmRmNDZhOTFk
MzkyN2YwHhcNMjYxMDEzMTgxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGFhZDY5OTMzNGRmYTI1NTI1NzBlY2MzZDMyYTRkOTkwMTAwZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKOGGt+4TrhIq7+nHT0BX5vFYFEL
LSl+uwg7DiPI5U6FFy7elNUcmyym6Co41nmR/t6hdpXgVMvUSF3RL4MtflZ9xBj6
RVsD5TYdtFoHhSfJB0wtXIZL/+pulEb8EF4kZMABJR7QKFhjnmB973u7Ujy8tNmx
5EBrja5YxPXkofQb8V6cXAennxFP/tlx/DnxFxwCLgKLQ9npa/Tf4538qka25iOA
GWOINzhA7qVyRaDKRv//hPjTIo0D0tkar+4X/ZwsIL+X5ji0Wk0mN+vYSnDrcVpA
r5QAi4ltA1d6AM+haZFQidzmP03ILxfrMS2USJXmALcRdedA+VMy5OTxlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ2q1pkzTfolUlcOzD0ypNmQEA9cMB8GA1UdIwQY
MBaAFBp2dnejPTp5nzZDhClt9GqR05J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMt
MDYyNDI5MzYwNzVlLzEvbmFyV21UTk4taVZTVnc3TVBUS2syWkFRRDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMtMDYyNDI5MzYwNzVl
LzEvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxth/DV
MA0GCSqGSIb3DQEBCwUAA4IBAQBMDVti/msBJ3VV+YA3anHh3lAzIbUpTcySjujm
Ogn/ZeXqncfcZTuqvzYoudP1IbhoaK/RqZsLp8dh88ir2yyjzj/7Qii+TXSZsg7Y
hGGaB4QddimjKwfaiNV6msjds2nEO+byl6cEVHvrOdz5seAAuZ9QRX5VdT1FdtQY
AbBJQi1RoLCz0C6ve8AUeoFnN97QOocRdZ/5RLDBGtFkMuBgIoCMtSNHlJaMi09j
Jj8v/cLJm9Br5CIpGnDngm9dUzelPkki5x52gVpiPWx/Co8eHBEdvhUxneYvjTWR
axpZUGVqYoTHaehrJptLhsKnHLsyjWfO15IsPj7KSBCpiXmX
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:24:11 2026 by rpki-client