Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NWM0RCydhKXTuVh256Ruld9sLGw.roa
File: NWM0RCydhKXTuVh256Ruld9sLGw.roa (raw, json)
Hash identifier: iQfTR28lhYfncA9xAsIuC76ggkZxFLoU9dzT+gpsFmo=
Subject key identifier: 35:63:34:44:2C:9D:84:A5:D3:B9:58:76:E7:A4:6E:95:DF:6C:2C:6C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E49D9EA054B8E9E4A5ABE6E68A38CDD0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NWM0RCydhKXTuVh256Ruld9sLGw.roa
Signing time: Thu 21 May 2026 09:24:38 +0000
ROA not before: Thu 21 May 2026 09:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197371
IP address blocks: 2a0e:97c0:c90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 09:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:d9:ea:05:4b:8e:9e:4a:5a:be:6e:68:a3:8c:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 21 09:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=356334442c9d84a5d3b95876e7a46e95df6c2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:a6:0e:1a:80:5c:6b:f9:38:e6:99:be:cf:
42:02:cb:d6:38:f3:4f:1a:e3:7a:fe:06:54:36:7c:
a6:43:91:27:8a:5c:90:b4:f3:0b:3d:90:13:e2:ac:
76:fa:08:f1:49:f5:24:71:af:a5:71:80:72:3b:8c:
c7:09:f5:f9:f0:c9:94:5a:9a:dc:9b:d5:39:cf:b4:
ff:e5:d3:9f:a7:65:37:f1:35:78:78:b0:56:4a:5a:
b9:d7:67:f5:fa:93:57:91:47:32:d4:40:14:2d:ad:
26:e0:da:1a:bf:4e:2c:d7:6c:5f:10:05:c1:7b:ec:
88:56:7e:8d:42:44:1e:4c:b4:f8:51:58:33:55:ce:
74:3a:ed:72:bb:1a:8e:ad:44:19:3f:61:08:2c:fa:
46:5e:fe:4c:eb:d1:ea:2b:7f:b7:00:a5:1a:58:61:
b0:5f:5c:ba:10:fa:72:dd:80:40:6d:ec:dd:f8:0b:
9a:9b:15:6c:b3:2c:bf:ad:2d:9a:98:94:50:d9:3f:
18:c3:ec:07:bf:bc:eb:c0:33:28:92:fb:79:67:ad:
c8:bd:3d:d8:07:c8:8b:f7:32:31:49:10:d6:bd:f3:
da:6a:6a:51:15:74:a8:41:83:2f:6e:3f:53:66:eb:
00:20:07:1e:52:78:6a:df:78:7f:57:96:00:cc:21:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:63:34:44:2C:9D:84:A5:D3:B9:58:76:E7:A4:6E:95:DF:6C:2C:6C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NWM0RCydhKXTuVh256Ruld9sLGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c90::/44
Signature Algorithm: sha256WithRSAEncryption
00:9a:cf:2e:24:23:66:d0:af:f1:db:0e:a5:98:56:bf:1d:52:
3c:d7:10:cb:d6:ab:07:ce:26:1f:ba:dc:e6:8c:bf:ef:d3:84:
69:ff:d0:4b:5c:f8:c6:87:6c:dc:68:7c:e5:26:68:6c:77:39:
85:93:5b:f7:19:75:4f:3d:f4:9e:15:2b:5a:96:48:da:d6:3e:
52:12:9a:58:b9:6e:0b:b2:54:dc:2f:d5:68:37:80:54:2e:6a:
be:46:d7:af:3a:fc:a8:f5:8a:78:e8:54:22:cb:c2:91:28:88:
fc:3c:d2:ad:c3:d6:e1:6e:7d:93:bf:e5:ea:3b:bc:39:3c:fe:
97:1b:7c:32:81:a3:be:b7:94:b8:36:d4:94:39:0d:a3:77:1d:
96:57:19:f4:c2:2c:8f:5d:9e:80:10:42:e2:19:a2:28:fb:ea:
33:6c:47:12:c6:56:bc:74:86:cb:08:46:01:bd:46:e8:cb:95:
79:8a:a4:b5:43:88:2a:45:4a:a8:d3:54:fb:73:69:9a:82:c0:
2d:93:ab:af:33:b1:c0:45:cb:49:f9:9c:1a:ad:f6:05:fa:ac:
4c:23:96:22:ce:dd:5f:54:cc:ce:2a:c4:7c:ef:c4:bc:7b:9a:
d6:01:3b:6f:2e:2b:53:e8:f5:f9:6f:12:14:45:e3:4c:5b:04:
be:e5:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 16:35:15 2026 by rpki-client