Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/l3-NhbJzA_XVE-TmzzNypY-VV5c.roa
File: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (raw, json)
Hash identifier: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=
Subject key identifier: 97:7F:8D:85:B2:73:03:F5:D5:13:E4:E6:CF:33:72:A5:8F:95:57:97
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019E3BFF23D1D2943CE7D420021C1C479DEE
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/l3-NhbJzA_XVE-TmzzNypY-VV5c.roa
Signing time: Mon 18 May 2026 16:50:36 +0000
ROA not before: Mon 18 May 2026 16:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:ff:23:d1:d2:94:3c:e7:d4:20:02:1c:1c:47:9d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 18 16:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=977f8d85b27303f5d513e4e6cf3372a58f955797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:d3:4e:72:b0:17:b3:8a:f6:f9:3f:0f:b0:
93:ca:d2:18:8b:51:1d:8b:1f:bc:f8:a1:37:3c:ea:
4b:b2:74:4b:6d:5a:f7:83:c7:d9:5c:36:c4:1e:fa:
d1:71:41:a2:86:f8:73:e6:71:eb:fc:6e:0e:72:2f:
36:8d:64:3c:57:4c:27:c1:38:51:64:e2:fc:f5:8d:
2d:9a:9d:5c:cc:3e:a0:0e:51:e3:b9:77:e2:dd:da:
47:76:6e:74:2b:bf:ca:ac:e1:f2:6a:ed:4f:43:a9:
86:8a:7f:e4:f5:29:1f:45:23:f5:f2:29:d0:7d:13:
63:24:aa:d2:04:d0:51:35:5a:18:4d:f0:e1:1c:f9:
27:19:1f:7c:a9:4b:79:6a:ce:64:67:d4:e2:aa:49:
cb:93:23:12:be:c9:ee:78:38:7e:ed:a5:fd:ab:6f:
89:ab:e1:1f:99:54:54:e6:b9:df:17:f8:52:a7:44:
d8:32:e7:f6:f5:ce:86:42:e4:98:68:c0:c3:48:8e:
bb:3a:90:8d:1b:e8:71:ff:42:f5:a0:eb:93:cb:ff:
b7:7b:93:86:bf:fe:e8:03:1b:d2:99:45:97:f4:c2:
f2:d2:98:5d:a5:90:3c:bb:b8:29:05:ea:52:95:24:
2a:53:ea:47:cc:7a:66:c7:68:12:42:10:f9:54:1f:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:8D:85:B2:73:03:F5:D5:13:E4:E6:CF:33:72:A5:8F:95:57:97
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/l3-NhbJzA_XVE-TmzzNypY-VV5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
65:6c:dc:0e:b2:d3:dc:51:52:b3:9e:2d:a1:d7:56:81:c8:75:
d9:cf:6c:b0:54:52:d9:82:08:73:76:c8:41:bc:00:03:6a:ad:
81:c3:08:f2:c9:be:42:a1:28:0b:4e:63:02:a9:3a:c6:e8:3b:
5b:2f:46:f6:e5:70:dd:cf:1c:d9:ed:5d:7c:5a:35:9d:36:f5:
30:7a:15:5d:48:09:27:40:7f:18:6b:b6:d2:4e:c0:02:8e:c1:
ab:7a:ea:9e:1d:99:0a:92:cf:32:92:8f:0c:0d:d3:a8:6d:3b:
68:f2:19:29:d7:35:c0:e1:cf:79:54:1f:4d:a4:ad:e4:80:95:
5c:e8:e3:44:c8:53:9c:6f:b6:7d:93:b1:ae:64:d8:e5:e4:43:
9e:69:da:00:f2:22:e1:c0:33:4c:14:a0:4d:d5:ec:41:c9:dd:
28:83:2d:27:b6:84:40:e1:91:45:15:a6:88:f9:ed:a0:63:6c:
f8:07:e4:f8:90:89:ea:49:9a:a2:3e:5d:e0:9b:1b:cd:ab:fa:
0c:ba:e7:4e:97:b0:86:df:1a:3f:80:d5:f6:ec:0a:44:54:13:
d0:cb:81:21:5e:14:8f:31:66:81:26:25:80:2a:16:8e:10:0e:
f7:a9:ec:07:32:1d:f3:0c:59:a7:22:81:83:e0:a9:56:b0:a2:
08:18:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:23:31 2026 by rpki-client