Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/NArDRiSAZ-QhUg_-Fgf0wKv271U.roa
File: NArDRiSAZ-QhUg_-Fgf0wKv271U.roa (raw, json)
Hash identifier: 7yz7RaFGcqx7LA52Xi6+zm5pJfwsmL5rNQwP1JX4N7k=
Subject key identifier: 34:0A:C3:46:24:80:67:E4:21:52:0F:FE:16:07:F4:C0:AB:F6:EF:55
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01A036D0CA459202CF4DC78A9A7CD7275542
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/NArDRiSAZ-QhUg_-Fgf0wKv271U.roa
Signing time: Tue 25 Aug 2026 02:47:27 +0000
ROA not before: Tue 25 Aug 2026 02:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135671
IP address blocks: 2a14:67c2:500::/40 maxlen: 40
2a14:67c2:519::/48 maxlen: 48
2a14:67c2:520::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:36:d0:ca:45:92:02:cf:4d:c7:8a:9a:7c:d7:27:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Aug 25 02:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340ac346248067e421520ffe1607f4c0abf6ef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:64:60:13:11:da:02:f3:4f:c3:fc:ae:71:
2d:04:e1:b9:04:90:b8:ef:1f:9e:7a:e5:88:b5:a4:
c4:98:0c:a2:83:d7:be:d0:d4:7e:86:50:e7:ef:f0:
7b:73:c3:c1:95:48:72:07:ee:10:42:02:ae:a5:bb:
46:36:a1:a2:80:e1:0c:76:6a:cd:9d:7a:c5:12:58:
98:0b:12:46:06:47:e8:38:fb:7d:42:e5:22:73:01:
86:41:4c:8b:42:10:2f:8e:ec:80:f3:dc:6d:93:f2:
8a:ce:2e:a7:ff:63:6f:ac:0d:29:df:21:43:0d:27:
4a:21:77:23:4a:94:56:14:4f:e4:77:a5:5b:ea:ef:
a5:69:14:b0:1e:55:62:7d:a7:47:18:54:c1:fd:78:
c8:ea:68:39:77:ac:68:69:b0:7e:5d:3f:3e:ce:20:
43:9b:bb:5f:70:13:5c:da:dd:70:d3:6d:81:5b:b9:
39:ae:8d:45:93:b9:56:e4:15:87:ad:d4:d5:3c:c3:
51:84:ad:66:98:b8:c6:25:03:f1:b6:5b:75:e1:f2:
48:b9:be:da:73:04:db:71:be:18:1a:3e:4c:26:4c:
c2:83:f1:2b:91:20:5d:ab:71:27:d0:46:f3:7f:11:
55:ad:7c:fe:61:11:b6:79:d8:51:c9:64:31:d2:45:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0A:C3:46:24:80:67:E4:21:52:0F:FE:16:07:F4:C0:AB:F6:EF:55
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/NArDRiSAZ-QhUg_-Fgf0wKv271U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:500::/40
Signature Algorithm: sha256WithRSAEncryption
da:5e:5a:bb:95:2a:82:d4:87:b3:20:f6:f5:8c:43:6b:41:c3:
29:57:ba:67:3e:fd:29:d4:dd:da:c5:13:81:43:28:90:49:ab:
2d:85:f2:4a:46:e0:a2:29:71:7c:8b:44:ab:a0:9f:b9:c3:aa:
9f:41:a0:4b:8c:68:4b:95:60:56:36:1c:15:04:b9:c1:4f:f9:
25:f6:fb:e3:96:14:c4:8c:25:39:29:0c:55:6d:da:29:fc:c4:
24:86:ac:c4:75:e4:0f:80:65:22:57:0a:21:2e:ee:66:5b:53:
b6:1d:66:23:4c:c8:43:2a:bc:db:bb:6e:55:53:7a:0d:0b:b6:
e0:16:8c:68:39:10:a0:3e:71:bb:5d:31:24:0b:b7:de:f1:c5:
da:2a:37:3f:67:e1:1f:5b:9d:6f:e4:5f:7a:43:ae:13:59:dc:
33:62:d0:2c:a6:bf:6c:04:fc:4d:9c:7a:37:66:cb:57:75:6a:
ec:35:7c:82:ac:7e:34:33:34:b1:52:78:25:5a:10:7a:a6:b5:
47:9a:09:17:8e:d5:06:9c:9b:47:06:91:6c:dc:92:76:d5:2d:
72:d5:86:16:13:b0:53:0f:9f:55:39:29:03:1e:a7:71:42:92:
b1:e3:05:1a:7b:51:de:3b:4b:e8:9f:1b:47:88:76:fa:c3:38:
0f:b5:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:48 2026 by rpki-client