Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/nVDUP2rL8AMBZXQhKZmcdjiBqkc.roa
File: nVDUP2rL8AMBZXQhKZmcdjiBqkc.roa (raw, json)
Hash identifier: 7J3lvOeXvSjLPAyO7lHAwEBn9QuvBcMEh8pfOvbaehE=
Subject key identifier: 9D:50:D4:3F:6A:CB:F0:03:01:65:74:21:29:99:9C:76:38:81:AA:47
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0137D35245292F7CA070C7D89630B2A55
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/nVDUP2rL8AMBZXQhKZmcdjiBqkc.roa
Signing time: Tue 18 Aug 2026 06:09:27 +0000
ROA not before: Tue 18 Aug 2026 06:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402664
IP address blocks: 2a02:ffc0::/29 maxlen: 29
2a11:4940::/29 maxlen: 29
2a12:bf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:7d:35:24:52:92:f7:ca:07:0c:7d:89:63:0b:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Aug 18 06:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d50d43f6acbf0030165742129999c763881aa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:01:e4:4f:13:59:54:03:1d:34:26:69:ef:
2d:2c:f3:bb:42:64:17:5a:af:3a:a3:01:b4:43:c9:
aa:9c:56:ee:21:fc:91:62:06:1f:b6:73:21:cc:47:
b3:68:83:bf:38:d6:79:48:ac:37:5f:fb:a6:f9:08:
1c:13:0b:82:ee:c1:01:ba:87:0e:6f:a7:8f:5d:c1:
19:54:8f:78:2a:eb:3e:53:ee:8c:5d:a3:96:4a:a1:
c4:d0:c4:e7:81:26:15:65:33:8d:1a:ca:1b:20:a9:
2b:7b:6d:ee:1b:f2:6f:30:d3:78:06:9b:45:9c:a1:
d4:1b:43:f1:4b:9c:44:8b:8f:27:58:8b:75:4c:82:
17:18:2c:e0:63:8d:88:f8:d9:2b:a5:4f:82:4d:76:
ca:25:45:47:5e:3a:35:78:8a:5a:de:b9:ba:82:10:
ea:12:6a:8f:ca:5a:c4:7d:66:ac:9a:74:91:5c:d5:
93:5f:cb:32:26:58:fc:0d:86:c6:91:d5:f8:49:06:
b9:e6:a3:12:cb:ee:51:fa:21:71:73:40:bc:79:af:
4e:f7:28:b8:a8:2a:da:80:a5:6d:3a:9f:60:e6:89:
26:2d:0b:2c:f8:e3:2a:13:a1:bb:a7:11:4d:e6:48:
5f:f7:c2:ec:e5:ce:cf:ae:f0:df:eb:f6:92:70:4a:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:D4:3F:6A:CB:F0:03:01:65:74:21:29:99:9C:76:38:81:AA:47
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/nVDUP2rL8AMBZXQhKZmcdjiBqkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ffc0::/29
2a11:4940::/29
2a12:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
93:9d:a2:b8:ca:31:ee:4c:be:dc:f9:2a:14:f9:90:d9:2b:55:
68:11:b5:f4:84:70:21:9e:7b:fc:d3:cb:81:22:64:56:30:52:
7f:dd:07:c0:e1:c0:80:ad:07:58:d9:9a:e8:55:10:d2:5c:98:
dc:a1:a5:fe:06:b3:cb:37:07:93:92:7e:84:69:db:73:2c:ba:
7f:4f:cd:c8:1d:c9:66:00:e2:49:62:28:eb:d2:84:4b:8d:eb:
0b:bc:35:60:be:6c:bb:ba:22:ea:ee:4b:7c:5c:5b:6d:aa:55:
bb:64:04:98:6f:ef:7c:40:ab:fc:5f:dd:de:9e:37:6a:3c:26:
ff:3e:73:b1:13:a9:d3:92:a2:53:0a:e5:9c:4e:a8:e1:84:5c:
72:08:d4:b6:d6:23:39:e5:87:39:7e:51:52:b7:0a:04:d0:82:
55:86:5d:96:60:98:f8:72:e6:94:c9:54:2b:b0:4e:5a:3e:88:
f9:87:fd:05:9a:0b:77:18:08:ae:90:f2:2d:3a:d7:3e:28:ee:
df:c4:7f:be:6c:35:34:fe:49:b6:bf:e2:04:a0:39:9c:1e:0c:
d9:30:55:8f:ef:c0:b6:53:0c:3e:d2:12:78:18:c0:d9:9a:ec:
26:05:90:7c:36:59:65:6f:85:87:1d:df:36:29:a7:19:7f:6d:
a4:12:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:34 2026 by rpki-client