Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/N0d4E5xUxilQFQ3BD28MNcNwtAY.roa
File: N0d4E5xUxilQFQ3BD28MNcNwtAY.roa (raw, json)
Hash identifier: cXc+LwKEtKuFXxCvFSXQT+shOABpS5kN631zfb9ug9k=
Subject key identifier: 37:47:78:13:9C:54:C6:29:50:15:0D:C1:0F:6F:0C:35:C3:70:B4:06
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A150171E4C8D68F90DF5BA65A8D989A961
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/N0d4E5xUxilQFQ3BD28MNcNwtAY.roa
Signing time: Sun 18 Oct 2026 17:37:34 +0000
ROA not before: Sun 18 Oct 2026 17:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204901
IP address blocks: 2a0a:3e45:be00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:17:1e:4c:8d:68:f9:0d:f5:ba:65:a8:d9:89:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Oct 18 17:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374778139c54c62950150dc10f6f0c35c370b406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:84:81:d1:20:d4:a2:8d:5c:69:ed:10:d6:
24:19:c9:13:26:56:a2:f8:d8:14:8a:d9:2e:f6:4a:
eb:f7:72:28:27:84:e2:2d:cb:f6:ef:c7:50:a6:13:
15:8c:4b:91:c3:64:63:66:1a:45:e2:d0:e3:55:59:
57:c2:e2:ee:17:8a:19:c6:91:96:77:85:e9:68:92:
06:0b:a6:1f:b2:49:6b:b0:8d:35:2a:71:89:f4:1e:
8a:d9:99:59:bf:f0:c3:23:fc:ff:0b:ae:1e:5f:a5:
8f:3a:fc:4e:06:85:5b:3b:bc:0c:b9:25:18:d8:9d:
e4:8b:b9:48:10:a5:de:ac:38:be:ea:9b:30:c0:2e:
f6:1a:4e:df:b4:e4:d8:2f:4a:d6:aa:aa:9a:06:43:
ef:c6:1d:91:99:da:5c:86:aa:cd:be:03:01:fe:be:
19:93:c3:d7:7e:39:ac:fe:25:a8:24:f2:df:68:b7:
34:0e:15:76:9b:48:98:31:5b:b9:dd:bd:e3:89:4f:
95:cb:ec:bb:f2:0e:6e:08:c0:a0:e1:d3:73:e7:a3:
73:cd:75:ee:38:3a:c4:89:51:72:4a:0f:14:bf:5e:
a2:ea:d0:dc:63:75:8b:e5:a4:97:ae:31:97:d3:47:
c1:33:1a:3e:5a:8f:83:99:fc:89:88:fe:81:2c:d5:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:78:13:9C:54:C6:29:50:15:0D:C1:0F:6F:0C:35:C3:70:B4:06
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/N0d4E5xUxilQFQ3BD28MNcNwtAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3e45:be00::/40
Signature Algorithm: sha256WithRSAEncryption
17:91:a2:38:6a:cb:6a:dd:8c:73:12:76:4e:2d:22:27:16:7f:
6d:8f:68:2c:65:b3:64:ae:6d:e5:d3:e4:89:4d:e9:ee:01:fd:
d6:a0:28:d6:bc:c3:b5:5e:ac:0a:54:f1:ce:b1:47:f8:f9:af:
c3:72:d6:6a:4e:b6:07:54:a4:94:0b:39:f7:06:76:0d:53:a5:
27:d0:75:23:4f:f6:34:81:39:38:89:43:3c:a9:31:96:5f:13:
31:61:6e:80:99:c2:1d:75:75:ee:e1:e2:2b:a9:04:ff:75:3f:
d8:a9:34:13:31:1d:fa:22:8e:6a:e1:4e:cf:c4:0b:07:55:f2:
68:98:f3:3e:70:bc:4a:c3:33:8f:18:cf:b1:e4:33:6f:5e:e9:
82:2c:4b:09:46:36:b6:ae:ec:02:12:8b:18:46:aa:cd:97:67:
6f:da:65:cf:ca:cf:b5:44:83:c7:8c:ee:38:2e:91:f1:46:3f:
9b:a2:c3:b5:af:8b:41:30:75:cf:7e:fe:9d:93:02:26:cf:1f:
31:e0:ac:0c:9a:22:10:3e:78:95:79:78:b1:e1:cb:4b:9a:52:
a1:2c:eb:33:0b:9c:40:54:14:bf:a9:40:89:b8:88:bf:31:b4:
63:1e:2e:6f:12:2c:a6:1e:93:68:81:87:55:6e:04:40:b3:b3:
3e:81:a6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:50 2026 by rpki-client