Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nwVAMuXlksGCkwlIsFODbXuGqX0.roa
File: nwVAMuXlksGCkwlIsFODbXuGqX0.roa (raw, json)
Hash identifier: Jz2GC37TPQPriywIaCO9SJUkXCV3axyP6vQgMDeHbsc=
Subject key identifier: 9F:05:40:32:E5:E5:92:C1:82:93:09:48:B0:53:83:6D:7B:86:A9:7D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A05C67AC13F0853DEF191D4807CA2DDB2B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nwVAMuXlksGCkwlIsFODbXuGqX0.roa
Signing time: Tue 01 Sep 2026 09:58:13 +0000
ROA not before: Tue 01 Sep 2026 09:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218810
IP address blocks: 2a0c:9a40:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:67:ac:13:f0:85:3d:ef:19:1d:48:07:ca:2d:db:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 1 09:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f054032e5e592c182930948b053836d7b86a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:5e:fe:70:89:c5:fd:d0:ae:86:f1:b2:7a:
49:03:5e:6b:56:59:f7:af:bc:c5:08:e4:48:37:b3:
5f:3f:67:54:0b:0d:c2:3e:7a:59:55:9e:71:65:b9:
24:d5:30:9f:30:ed:6c:0b:dd:b1:2d:86:d2:c2:a2:
a8:8d:fe:1e:52:4c:64:8a:d9:88:dd:cc:3c:1a:2a:
b9:36:ee:aa:6d:10:dd:ba:fb:2f:2a:c8:e4:33:f7:
ae:8d:1a:aa:b0:84:43:05:02:f3:cf:cd:16:c0:57:
c3:75:96:3a:40:e6:46:bf:05:48:04:d0:88:7f:dc:
0d:86:61:2c:45:3f:00:a8:8f:5d:10:ea:2c:65:02:
5d:79:fe:db:61:98:59:7d:3c:e6:1b:47:76:bf:19:
74:7c:3f:df:bf:dc:e8:59:20:40:4f:82:e7:26:41:
08:3f:73:66:c9:67:72:a6:82:4c:a4:a2:5e:7e:8e:
1a:11:6e:0d:16:e1:6a:12:40:83:09:58:95:f9:56:
37:5b:2f:bc:80:42:fe:92:b2:6a:7c:70:4a:8d:5a:
d6:61:bb:b4:8d:f5:6f:fb:62:13:fd:65:49:7b:ef:
e2:98:6e:e4:06:b7:80:de:4b:4b:5b:61:8b:85:32:
d2:28:40:9d:d2:42:a7:f0:4d:de:7f:22:b3:6d:5f:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:40:32:E5:E5:92:C1:82:93:09:48:B0:53:83:6D:7B:86:A9:7D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nwVAMuXlksGCkwlIsFODbXuGqX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e040::/48
Signature Algorithm: sha256WithRSAEncryption
b4:0c:a8:5e:74:c2:a7:53:41:cc:01:57:db:de:1e:89:d6:7d:
ee:e1:d0:27:e6:f9:8c:0f:71:ca:8a:83:cf:d7:1f:84:0b:a6:
a3:9f:2f:d4:0c:d1:12:7a:ce:3f:53:b1:6a:1e:36:01:79:9e:
af:29:66:60:bf:31:b7:61:ef:5a:b4:07:ad:08:1a:18:ed:21:
82:64:2b:37:24:22:17:ce:c4:a7:06:9b:5c:35:af:0b:05:cc:
d9:d5:09:fe:83:04:2b:50:d5:ad:22:ad:6a:e3:8a:00:e9:45:
95:a3:87:b0:99:ff:18:d9:e3:89:2d:8f:f7:44:df:0c:df:d8:
9c:43:c4:98:87:6e:5e:a6:42:be:7f:eb:8d:0f:88:6f:31:38:
c1:96:16:f3:d5:02:95:50:ef:ba:db:4b:df:97:d7:35:86:30:
78:29:d0:26:ef:5e:78:01:c8:0a:9f:93:35:d7:67:34:94:c1:
e8:4e:d2:a9:86:95:00:8c:32:14:8e:40:fa:8d:7a:b8:5d:c2:
a5:57:ba:61:f9:fc:01:67:ba:db:ac:e9:07:6f:79:d0:d7:e5:
49:ef:d9:16:06:2d:a6:ac:89:6b:44:5a:1f:8e:2b:fa:ff:09:
a7:8c:d8:69:d7:11:ec:7c:99:ac:8e:ad:46:25:19:62:73:1b:
d3:f9:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:08 2026 by rpki-client