Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nu5C6TimIZf86hT6yeDzyfoKTQE.roa
File: nu5C6TimIZf86hT6yeDzyfoKTQE.roa (raw, json)
Hash identifier: t+8MjD4d9sOapvEr7dX9OMRelbguagmpj3s0OAMNtXU=
Subject key identifier: 9E:EE:42:E9:38:A6:21:97:FC:EA:14:FA:C9:E0:F3:C9:FA:0A:4D:01
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019ED02C76EAE13B4127F5DA8FD86679512C
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nu5C6TimIZf86hT6yeDzyfoKTQE.roa
Signing time: Tue 16 Jun 2026 11:23:55 +0000
ROA not before: Tue 16 Jun 2026 11:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 2a0d:d940:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:2c:76:ea:e1:3b:41:27:f5:da:8f:d8:66:79:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 16 11:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eee42e938a62197fcea14fac9e0f3c9fa0a4d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:68:12:5b:49:80:d6:0d:50:a9:6c:d6:09:
12:08:5d:8c:2d:2d:4e:88:ff:cf:c7:a8:39:0a:63:
16:51:1a:48:47:3d:fa:b4:04:64:94:93:db:4e:1e:
97:37:cf:bc:df:63:b1:e6:2b:62:ed:d8:d3:7b:81:
f8:5d:90:ca:1b:5e:9b:61:37:7c:72:08:93:1a:79:
ba:1f:2c:f2:d6:bd:8b:18:e8:79:01:ba:54:ab:2b:
97:ad:55:f6:d6:5d:17:fe:63:ff:25:b7:c1:ae:4b:
2a:a9:db:3f:22:e0:3b:83:32:3d:65:3b:27:27:55:
65:5d:72:c3:4a:e4:c0:07:f7:08:a4:cd:62:b1:b0:
87:25:7d:19:c9:4d:bd:9b:01:ff:15:01:c1:79:c8:
aa:fb:1f:5a:7c:ce:a4:0e:b2:13:41:01:d9:68:64:
81:20:a4:6f:9a:ce:48:54:4c:34:17:82:ff:c4:e0:
a4:9a:80:36:29:78:93:b2:e2:ac:aa:1a:ab:77:86:
15:81:00:58:7a:7e:08:74:85:7c:44:23:35:24:f5:
63:86:10:a0:fc:bc:07:32:01:66:90:0b:b0:ff:df:
5f:ed:92:52:62:9d:b5:d5:29:16:cd:d5:04:aa:5f:
c6:07:46:0b:0f:91:0f:4f:56:3f:ba:c9:c9:e6:cc:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:42:E9:38:A6:21:97:FC:EA:14:FA:C9:E0:F3:C9:FA:0A:4D:01
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nu5C6TimIZf86hT6yeDzyfoKTQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:400::/40
Signature Algorithm: sha256WithRSAEncryption
70:6b:47:3c:cf:48:98:ef:a0:c6:4b:1a:bb:bd:a3:f5:f8:96:
b3:a4:6a:38:95:7d:47:85:e2:74:a9:e3:e8:4c:7e:8c:55:2f:
36:5d:57:be:95:9d:6a:08:cb:dd:df:7c:1a:a7:2e:4c:22:18:
ed:bf:dd:fa:8c:1e:5f:52:60:ba:a9:9a:58:39:94:3c:89:69:
4f:dc:da:81:53:ae:91:9c:30:5d:48:9c:5b:11:60:50:5e:08:
3f:45:31:0e:fe:19:b4:ef:61:2a:a5:8c:2e:75:44:23:3b:93:
97:8a:02:7f:78:7f:95:8e:f3:87:b1:82:e1:f1:c2:b1:10:59:
b7:cc:97:d3:35:dd:2b:c2:ca:c9:bf:81:60:97:b6:1e:37:67:
00:9d:98:80:f3:b0:e2:03:e8:fb:67:cb:0d:e1:14:7b:7f:a7:
1b:52:35:8e:b2:4a:3d:72:01:43:bc:10:f6:41:53:fc:da:ed:
44:9a:ec:1f:1c:8f:33:bb:fe:a3:ca:48:39:ba:77:36:3e:33:
ed:db:1a:73:7b:3d:3b:01:af:a1:a8:34:e4:4d:3e:4c:35:1e:
0c:c7:ca:68:76:9f:c6:fb:b9:58:62:02:4a:28:68:5c:2c:2d:
aa:71:f5:44:f6:71:82:b7:bf:51:cf:ae:62:af:92:1a:fb:38:
50:d2:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:12 2026 by rpki-client