Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/nbuk7h3-iaOQmNLuUZT8l-r2PpU.roa
File: nbuk7h3-iaOQmNLuUZT8l-r2PpU.roa (raw, json)
Hash identifier: ffZLpx06ADLQTYUrm4khcDBnd2uHS1KEuKpr5jiE7BU=
Subject key identifier: 9D:BB:A4:EE:1D:FE:89:A3:90:98:D2:EE:51:94:FC:97:EA:F6:3E:95
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019C7C40CC18BB6BBE530A4620F22CA27482
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/nbuk7h3-iaOQmNLuUZT8l-r2PpU.roa
Signing time: Fri 20 Feb 2026 18:12:27 +0000
ROA not before: Fri 20 Feb 2026 18:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:40:cc:18:bb:6b:be:53:0a:46:20:f2:2c:a2:74:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 20 18:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dbba4ee1dfe89a39098d2ee5194fc97eaf63e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:73:73:51:3f:50:48:6f:b4:dc:ed:0c:2a:
6a:6b:42:71:6d:0f:7f:60:b7:91:9a:a5:b9:fc:00:
9b:42:f5:d1:8d:31:b2:5f:53:c1:9c:6b:52:ab:b9:
b1:7a:cf:b2:20:e1:12:63:83:ac:35:55:7b:43:65:
17:2b:02:8b:b8:12:a6:45:38:a3:2a:f6:e0:4c:bf:
87:fa:97:83:0b:d9:48:53:01:64:38:25:d0:2d:34:
94:10:69:61:6d:dd:48:9d:e4:cc:1d:7a:3d:b0:53:
00:4f:42:4f:26:1a:24:05:8a:b4:75:3a:56:31:3c:
27:67:81:4c:4d:4c:84:4d:a1:c0:cb:62:6e:29:5c:
ed:5e:2e:94:c0:10:a1:90:63:4b:3a:98:d0:6e:11:
2d:52:bc:d3:bb:c3:d8:36:66:46:c0:3f:45:1f:48:
c1:82:44:1c:98:2d:45:6d:b3:45:23:4b:b4:89:5d:
f0:bd:db:a7:bb:b8:d5:72:54:c3:2b:eb:0e:13:02:
69:80:91:54:c5:a5:09:95:b1:9c:90:bb:aa:0b:7c:
a6:7f:c3:1f:8b:ac:8e:23:95:c2:76:d0:87:fe:01:
cf:f3:4d:92:d9:0b:22:72:fe:a6:03:4d:97:c1:94:
16:5a:ed:24:30:df:2c:38:3a:30:0f:c4:a2:4e:98:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:A4:EE:1D:FE:89:A3:90:98:D2:EE:51:94:FC:97:EA:F6:3E:95
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/nbuk7h3-iaOQmNLuUZT8l-r2PpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3f80::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a14:1100::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
01:e2:e8:2c:0f:71:5f:f1:ca:e7:cc:38:b2:84:4e:eb:4d:d6:
9a:10:1b:cd:36:8f:d0:be:b1:43:cc:a6:cf:ae:13:38:8e:15:
7a:d6:6d:58:4a:0a:f5:ce:2f:b5:14:2a:d7:5f:06:11:32:a4:
2a:20:3d:90:d6:1f:f7:aa:1b:23:43:b7:46:5a:db:59:6f:f2:
c1:6c:fd:1c:81:3d:0c:86:83:97:db:43:39:44:ad:5c:15:c7:
3b:7c:6f:99:b8:1c:e8:ca:20:0c:65:48:69:3e:47:ca:bd:1e:
78:1a:42:8b:dd:ec:41:26:73:1b:cd:7a:36:20:f6:a4:0e:fe:
7f:70:c3:7c:7c:e2:cc:9e:14:61:b2:2c:04:2e:6f:70:e5:54:
52:6c:66:ba:43:c8:76:b9:39:d2:d5:f2:81:cf:01:ff:0c:56:
c0:d8:ec:c5:05:69:e2:32:d2:ef:39:fb:cb:4d:42:d6:1e:02:
f8:c1:aa:17:22:0f:90:6e:ea:eb:b6:8c:eb:cd:36:9d:fc:de:
e4:87:30:b1:78:5a:8a:75:c2:32:37:6f:d2:ac:5e:5a:25:8d:
f8:35:63:c4:98:83:85:50:54:50:ff:99:5c:77:98:b2:f4:85:
c9:42:5e:ae:60:8f:b0:d1:2c:16:e8:7d:9e:53:3e:c6:f6:b7:
05:a1:b6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:34 2026 by rpki-client