Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/NYMiViosdH9_4pb4GrGmYXreRLk.roa
File: NYMiViosdH9_4pb4GrGmYXreRLk.roa (raw, json)
Hash identifier: +zZYAlnSqEknoj1ol6xGExD0ML3HjwlMnuE300t6plo=
Subject key identifier: 35:83:22:56:2A:2C:74:7F:7F:E2:96:F8:1A:B1:A6:61:7A:DE:44:B9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A141E21A53A05B1D660159A2C719E6E1B1
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/NYMiViosdH9_4pb4GrGmYXreRLk.roa
Signing time: Thu 15 Oct 2026 23:24:59 +0000
ROA not before: Thu 15 Oct 2026 23:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 2a14:6782:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:e2:1a:53:a0:5b:1d:66:01:59:a2:c7:19:e6:e1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 15 23:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=358322562a2c747f7fe296f81ab1a6617ade44b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:90:ed:57:c7:a0:6a:3e:f2:4a:ba:df:c4:
98:ca:e0:26:6d:a9:36:ad:1c:27:fc:4f:fd:ac:68:
b6:60:08:45:a0:bd:c7:40:ee:21:4f:34:4d:2c:d6:
a7:78:ce:75:26:ed:13:aa:10:31:07:b8:1e:0f:44:
24:cb:e6:f5:46:fa:e5:10:ad:13:82:1c:50:3c:32:
ce:56:b2:8c:f9:c5:46:b2:12:e3:50:71:2a:f0:cb:
cc:f5:0b:61:5a:ff:85:1d:ad:75:72:ce:5a:4e:29:
f1:49:df:cd:b8:73:89:3e:34:c8:99:d7:ad:a8:12:
e3:c4:23:c4:11:8e:1a:9d:94:cf:3f:c4:15:5a:bc:
6c:11:8d:30:de:e1:8e:54:03:61:20:5e:fc:05:b3:
d0:5c:49:d8:4e:54:4a:a1:5d:2f:3a:8c:43:07:21:
fc:61:f5:ee:91:58:c1:ea:23:2f:4c:44:81:b8:b5:
09:b4:cd:1d:6a:c6:da:1f:a2:52:83:ee:fa:d6:e5:
20:1b:53:50:1b:17:1a:a7:cb:41:74:7f:90:04:92:
dc:84:af:69:b5:c1:74:15:e9:7a:7f:ad:3b:85:2d:
c2:f1:21:fc:b5:26:c5:db:73:7e:6f:d6:61:5c:2a:
ca:15:0f:f7:86:87:eb:a5:23:ec:6d:50:95:57:df:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:22:56:2A:2C:74:7F:7F:E2:96:F8:1A:B1:A6:61:7A:DE:44:B9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/NYMiViosdH9_4pb4GrGmYXreRLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:202::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d1:13:96:3a:d4:72:59:c3:83:98:14:93:0b:30:a4:86:81:
cc:95:fe:59:31:38:6c:d6:71:fd:a2:34:ae:de:dc:9d:cc:6c:
da:36:2c:a9:bb:11:94:6b:55:53:00:3b:1c:39:69:53:bb:1d:
13:9d:5e:ed:69:ef:74:5b:95:45:72:b2:62:b5:a3:58:b9:66:
c7:28:9a:f7:be:c2:fd:cc:c8:ad:cc:8e:cc:f3:53:2c:4e:ab:
4c:01:a5:e6:72:bf:6d:83:9f:22:86:f9:01:da:3d:42:88:ba:
24:8f:bf:86:f1:17:f3:d6:1b:1d:d1:30:22:0e:21:60:09:95:
b0:47:7b:a2:6c:5f:06:cb:29:1d:ab:0d:e7:df:7a:24:1d:b3:
25:e9:7a:e6:d5:9b:2c:48:5c:3e:a2:8d:03:dc:a3:91:b7:91:
cc:2a:96:f0:dc:fe:9a:c7:ce:d2:6e:7c:ba:10:9a:9e:ef:bc:
a0:82:4f:49:94:a9:51:63:53:c7:d9:85:2f:a7:4e:21:ff:67:
10:58:ba:36:70:0a:0f:35:b0:33:08:0c:39:ea:a9:4e:e5:25:
3d:6c:75:ed:5c:c3:5b:c7:b2:db:1a:c8:b6:28:55:61:5d:e6:
c4:91:36:2b:3e:a9:d5:b6:cc:a4:56:f1:7c:f6:9a:26:62:2c:
69:fc:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 12:09:18 2026 by rpki-client