Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/NU3ZFfNgA8efAquftEl1zyXc2nU.roa
File: NU3ZFfNgA8efAquftEl1zyXc2nU.roa (raw, json)
Hash identifier: uWtaU79cWtcg5Y3TKAJ9EoLkhuic26BBHeop1nAHl0U=
Subject key identifier: 35:4D:D9:15:F3:60:03:C7:9F:02:AB:9F:B4:49:75:CF:25:DC:DA:75
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A05CF3BE323AE038010EC0F05EC460AFB3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/NU3ZFfNgA8efAquftEl1zyXc2nU.roa
Signing time: Tue 01 Sep 2026 12:31:12 +0000
ROA not before: Tue 01 Sep 2026 12:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:f3:be:32:3a:e0:38:01:0e:c0:f0:5e:c4:60:af:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 1 12:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=354dd915f36003c79f02ab9fb44975cf25dcda75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:3c:69:a8:a1:6b:f2:9a:7f:91:3f:41:12:
39:27:3e:54:e0:d7:a0:82:32:7c:66:da:29:ac:f4:
e7:c4:85:4b:d0:64:21:f9:63:b2:29:8c:b3:bf:f3:
67:b6:34:67:84:0d:cf:7d:f4:0a:a4:cc:1e:3f:a4:
f8:f8:3d:27:4b:4f:d9:bf:3b:81:f2:99:45:1f:a4:
00:02:de:bf:04:63:ac:e1:de:48:35:8b:27:26:2e:
8c:94:40:af:1d:7e:04:ae:5e:a8:b6:16:2e:12:bb:
f4:8f:90:b1:f1:93:90:01:9b:69:95:46:19:e5:98:
b6:51:86:34:e1:2d:df:88:33:94:a6:a9:f5:7a:19:
11:69:34:0b:c9:9d:04:06:52:77:45:02:93:39:eb:
37:75:92:6d:6f:96:26:54:b9:5c:c2:5b:2a:3e:c6:
28:bb:bc:84:7c:80:72:cc:9c:c2:4d:a8:e9:ac:6e:
dd:53:99:eb:5f:94:93:53:89:5a:7e:36:dd:f5:22:
57:76:d6:3a:0b:ab:af:e8:4f:ea:6c:00:fd:3b:a6:
92:e6:3d:a3:30:22:aa:23:52:39:f4:85:a5:bc:43:
c0:94:f9:68:6b:f5:24:3b:bf:a7:6b:7f:81:e4:78:
e9:6c:90:53:80:5e:9d:73:81:fc:bb:6f:8e:c1:00:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:D9:15:F3:60:03:C7:9F:02:AB:9F:B4:49:75:CF:25:DC:DA:75
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/NU3ZFfNgA8efAquftEl1zyXc2nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
25:c8:7a:7a:88:08:f8:05:bf:31:d2:e9:56:a4:d2:27:8d:9f:
98:bb:3d:9f:da:af:04:ea:4f:bd:2e:1a:1e:07:df:e5:55:c0:
34:fe:be:a8:3c:0d:40:5e:ae:4d:de:4f:03:1e:04:4e:31:c7:
46:d3:83:e9:e3:70:c9:66:aa:ac:da:93:d6:c6:8a:23:a7:49:
7c:3b:1a:22:b7:1d:ff:db:27:04:d0:f2:24:3a:9e:dc:a2:9e:
75:c4:6f:6a:aa:b1:6e:88:5a:6a:17:11:c6:5f:15:e1:4d:8b:
bc:65:1f:3d:3e:c5:f8:6d:ff:6a:88:33:22:5e:94:e0:53:12:
97:9e:7f:44:16:a7:13:5f:1c:4b:9f:78:90:ab:30:5e:f6:db:
0a:de:ea:d1:50:05:49:00:ca:53:2f:1e:5b:f9:93:bd:e3:0d:
9a:e7:14:da:04:b4:8c:a1:a1:40:b4:de:db:87:a1:9b:94:92:
e6:03:96:74:e3:b3:48:21:3c:ad:54:6e:fe:1c:6e:8a:57:14:
54:49:0a:26:4a:2c:d5:b8:c2:95:e5:43:a3:fa:e7:a2:fe:88:
1a:4f:a8:39:2f:67:46:04:16:b7:8e:54:eb:cc:01:7d:56:db:
9a:3f:10:98:a4:49:71:4d:f1:e1:55:bc:37:f0:ac:ff:23:5a:
30:27:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:06 2026 by rpki-client