Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nqfKUCLFUHo2V2SSMeRAb-Sa8-g.roa
File: nqfKUCLFUHo2V2SSMeRAb-Sa8-g.roa (raw, json)
Hash identifier: 2mcQpSZI1uMt2SpzyIyQKLiQ71hmCeUMiY4Tf17FCVo=
Subject key identifier: 9E:A7:CA:50:22:C5:50:7A:36:57:64:92:31:E4:40:6F:E4:9A:F3:E8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019ECA9B9440B6273384D85CDBAACCD8A32E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nqfKUCLFUHo2V2SSMeRAb-Sa8-g.roa
Signing time: Mon 15 Jun 2026 09:27:34 +0000
ROA not before: Mon 15 Jun 2026 09:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 193.31.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:9b:94:40:b6:27:33:84:d8:5c:db:aa:cc:d8:a3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 15 09:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ea7ca5022c5507a3657649231e4406fe49af3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:dc:3f:0e:33:2a:f0:de:3b:23:41:a1:75:
16:4e:94:0d:87:dd:a7:cc:11:dd:4c:7d:17:68:55:
09:d6:7d:e2:1c:61:67:64:4d:4b:6d:6d:f9:d6:9e:
6c:d0:d5:7a:b9:b3:5c:d5:45:68:2b:ba:69:1f:8d:
2b:7a:4d:d1:f9:76:4a:00:74:24:77:7c:9c:82:96:
db:51:73:a9:44:cf:23:7c:dc:49:a2:93:cb:e1:8d:
2f:b4:bd:c5:60:2f:d3:09:f6:3b:fb:16:03:24:19:
d6:6e:5e:29:ca:df:a7:ba:98:94:c5:96:a4:52:0b:
a6:a9:e8:fe:51:76:64:49:ca:9e:fe:e2:22:f5:34:
98:b7:09:72:a6:15:1a:53:bf:9a:09:3b:ae:34:3b:
78:95:e0:0d:6f:d7:74:f3:ae:cc:7e:90:d6:66:05:
85:77:95:88:ea:46:b9:52:23:3f:90:15:2c:fe:a3:
0c:5b:48:f6:c6:73:8a:6c:65:07:e7:00:ea:c2:0b:
88:64:02:a1:19:59:7e:70:a1:d0:b0:ed:b9:ae:a0:
05:ab:ce:17:84:40:33:b3:0b:7f:0b:00:3b:6f:0e:
be:cf:3f:21:5f:48:7f:78:8b:ec:d2:52:41:84:ef:
d0:bd:84:21:62:52:43:a7:d7:8a:a3:1b:ac:c2:9b:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:CA:50:22:C5:50:7A:36:57:64:92:31:E4:40:6F:E4:9A:F3:E8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nqfKUCLFUHo2V2SSMeRAb-Sa8-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:48:f2:b4:96:ac:5e:25:26:07:1a:8e:6f:cf:46:26:1f:5e:
9a:be:55:27:f7:17:30:50:38:17:93:a2:a5:6e:84:d3:2a:fa:
ef:24:72:f4:ca:6c:21:be:41:81:b6:e7:d8:f9:ea:d0:eb:73:
c8:09:22:1d:74:4e:13:16:1a:4e:ca:b7:49:ed:3c:62:d1:a0:
42:c3:44:2f:4c:84:f7:4b:54:63:fb:63:fb:73:39:15:4e:32:
2b:d2:5b:af:13:2f:b7:17:a2:31:2b:11:65:36:47:d0:21:f4:
f3:46:9d:29:a2:09:3d:a3:a8:05:f9:ce:d0:42:78:3b:05:73:
0d:64:8e:65:05:e2:38:87:1f:4e:84:49:70:5c:6c:91:37:83:
db:ac:4b:5c:f1:3f:b6:76:72:9e:cc:38:05:74:bb:c1:10:60:
a6:eb:58:2c:4f:53:6d:9c:db:8b:3b:d7:9c:7f:cb:32:b2:9a:
d1:40:18:13:ac:d2:e4:57:6e:09:22:3b:d7:e6:d8:d4:38:eb:
ca:5f:a6:95:cc:95:35:86:1c:6b:92:ab:f6:2b:bb:03:c3:fe:
5d:89:eb:92:ae:d7:97:14:e1:75:4b:b8:a1:81:b9:fa:dd:8d:
83:02:45:91:f3:f1:5d:97:7a:f5:0e:42:a5:17:55:36:72:70:
ad:9b:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 23:34:38 2026 by rpki-client