Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nyzxojqdr7GadWVNqp3JGjL6kyU.roa
File: nyzxojqdr7GadWVNqp3JGjL6kyU.roa (raw, json)
Hash identifier: q5dWFszXIabWJc1BgCPYys8QljRHfta5E7euZKd5518=
Subject key identifier: 9F:2C:F1:A2:3A:9D:AF:B1:9A:75:65:4D:AA:9D:C9:1A:32:FA:93:25
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F55D360A350B133810DC0B9D4D258222F
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nyzxojqdr7GadWVNqp3JGjL6kyU.roa
Signing time: Sun 12 Jul 2026 10:15:43 +0000
ROA not before: Sun 12 Jul 2026 10:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219297
IP address blocks: 2a0d:d940:170::/44 maxlen: 48
2a0d:d940:2016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:d3:60:a3:50:b1:33:81:0d:c0:b9:d4:d2:58:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 12 10:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f2cf1a23a9dafb19a75654daa9dc91a32fa9325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:6e:03:2e:7a:bc:f2:15:ec:f2:40:07:0c:
ac:83:7f:34:b1:8e:f1:23:20:ce:a1:f0:a5:b9:1c:
9e:7b:88:ec:49:c4:18:e6:91:e0:96:3e:23:18:c8:
6f:a4:be:66:35:ee:d4:53:2b:ea:c0:de:97:6d:d1:
15:eb:bb:b5:d8:59:1c:b4:64:55:e5:f4:79:af:70:
d3:c8:4d:cc:01:9b:6c:91:c2:b6:87:c3:68:2f:49:
71:0b:61:08:1b:db:73:a7:0e:de:de:98:0a:00:a0:
74:81:96:2d:c9:3b:b7:bc:c1:06:ca:ce:ca:70:d7:
bd:a6:c9:9e:e8:e7:6d:da:27:4e:a1:30:8f:96:ee:
f3:0f:d2:62:f2:13:0a:b5:a8:70:5e:6d:04:ed:4a:
17:c1:c9:01:1b:7b:80:16:35:60:a5:12:82:bc:a6:
ae:ae:2c:c6:a6:6d:3b:88:45:78:e1:eb:dc:25:60:
cf:55:44:61:87:4b:9c:7b:00:4b:fa:b2:f7:9a:f8:
a4:d1:3f:a9:c8:46:aa:c9:a1:a7:f6:1f:29:ca:27:
d0:c6:d3:b6:83:85:1e:8f:ca:78:4d:d6:4b:dc:11:
49:8b:d8:0c:e1:54:2a:b6:ca:1e:8a:b0:36:90:fc:
2e:de:e4:63:07:ac:4f:0e:2e:fa:66:c4:c3:3e:28:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:F1:A2:3A:9D:AF:B1:9A:75:65:4D:AA:9D:C9:1A:32:FA:93:25
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nyzxojqdr7GadWVNqp3JGjL6kyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:170::/44
2a0d:d940:2016::/48
Signature Algorithm: sha256WithRSAEncryption
a5:9e:ae:d9:c5:3c:64:a8:fc:a1:ef:36:55:08:ee:40:d6:b4:
71:42:1a:fe:0e:95:18:6d:96:8e:8b:c1:51:1c:33:ba:b7:33:
65:e6:2a:79:06:5b:21:27:a5:89:83:73:c0:00:cc:1c:3a:df:
20:1f:0f:b4:15:94:70:f6:da:cf:6e:fc:9e:5f:b9:18:4e:e4:
d2:a6:e2:af:d9:47:e6:75:f3:bf:21:37:ee:91:bf:9a:c9:8d:
dd:0c:51:82:2f:c9:62:9b:9d:6e:31:00:14:9a:56:28:34:fb:
8e:7b:ec:a3:16:eb:85:6b:64:a1:77:c3:f6:eb:17:23:b7:66:
a7:c6:90:9f:ea:9c:5d:d9:ae:7f:d8:79:62:8d:1c:28:21:e0:
45:94:9a:b1:61:a1:45:a7:5a:4c:6a:88:6a:6b:7e:78:65:d3:
2b:58:cc:95:df:20:8e:8e:5f:7e:e5:12:33:19:05:5d:f0:44:
21:f7:26:1a:3d:dc:c1:14:7b:77:39:c0:1e:3d:5b:5d:18:2f:
6e:22:02:4c:bc:5a:f2:64:eb:e5:78:25:0e:c1:7e:9c:9f:b1:
26:b3:4a:73:22:f9:39:e3:81:62:53:4a:54:e6:19:1c:15:64:
42:d1:a1:82:3e:99:75:58:29:bd:20:50:12:1e:cb:a7:5e:b3:
bf:8c:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:45:46 2026 by rpki-client