Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/N01nmjoCA5ICXDchDhjf2gebFCM.roa
File: N01nmjoCA5ICXDchDhjf2gebFCM.roa (raw, json)
Hash identifier: x8UceU/FoS7PKLo0S8/CMDbljFaElX3UYAvdMG+7O3o=
Subject key identifier: 37:4D:67:9A:3A:02:03:92:02:5C:37:21:0E:18:DF:DA:07:9B:14:23
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0DA77BCC3CAE97C181E24DEB10C94E329
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/N01nmjoCA5ICXDchDhjf2gebFCM.roa
Signing time: Fri 25 Sep 2026 21:27:55 +0000
ROA not before: Fri 25 Sep 2026 21:27:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218571
IP address blocks: 2a06:9801:156d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:77:bc:c3:ca:e9:7c:18:1e:24:de:b1:0c:94:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 25 21:27:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374d679a3a020392025c37210e18dfda079b1423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:f8:4c:bc:ac:b7:d7:5b:9b:4c:f7:2b:3b:
3c:03:e5:3b:29:69:e2:88:b7:76:46:81:9d:ee:d3:
41:1d:ca:10:d5:f4:18:1b:ef:0f:d1:4e:f7:ac:9a:
f3:4f:99:ad:e7:9b:7b:82:f6:8e:6d:d8:7b:83:57:
b4:ac:17:db:ff:c2:ff:34:63:31:c6:92:aa:0a:7b:
35:40:c2:3c:2a:ce:f7:92:5a:bd:fd:3e:a1:17:dc:
33:92:f4:32:b8:5e:ec:77:90:b4:39:9a:7d:65:df:
65:18:a7:da:95:cf:fc:a2:12:04:c4:34:1e:48:b9:
c1:33:2d:71:79:e9:2f:a1:9f:87:d0:6d:9f:bb:40:
c3:ac:84:16:44:18:15:c2:1e:6d:33:f5:e0:4a:3f:
9d:df:e1:3e:d3:49:96:fe:4e:63:5c:82:f6:fa:47:
f4:f2:a2:bd:cd:b4:e2:bd:13:cf:31:6e:86:a4:8d:
54:59:b9:3a:49:38:cf:85:6e:f8:31:7f:34:58:d9:
03:20:78:74:ae:2d:c1:84:59:9a:ba:9a:94:4c:00:
52:a6:8c:bf:55:a9:66:47:75:c9:e4:63:5e:cb:9f:
1f:bb:cb:43:56:41:7b:98:1c:c5:c6:fa:1c:4e:61:
b4:1d:10:fd:20:8c:88:9c:88:8f:bc:55:25:a5:a1:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:67:9A:3A:02:03:92:02:5C:37:21:0E:18:DF:DA:07:9B:14:23
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/N01nmjoCA5ICXDchDhjf2gebFCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:156d::/48
Signature Algorithm: sha256WithRSAEncryption
4c:44:39:68:19:39:6d:ae:a9:48:c4:e8:f8:4d:fa:91:68:72:
a0:e7:77:c5:22:2f:fd:b8:ad:41:c3:4c:76:52:78:50:bc:be:
8a:37:48:f0:a7:73:1e:2f:dd:bc:16:f4:10:87:54:22:f1:21:
a5:6e:79:35:50:d2:f9:36:7b:74:19:0e:fa:d5:e6:55:bd:d0:
a8:8f:a9:a7:37:9e:7e:5b:93:8e:7a:b5:c7:ac:a1:fc:b9:15:
5d:17:37:8a:78:43:11:96:c5:e6:28:13:dd:d6:d4:3b:b0:e2:
f3:e0:7f:d5:11:26:ee:01:cd:f1:9a:07:0d:b1:11:6d:b3:d6:
29:7e:10:aa:82:97:34:ae:15:5f:87:2b:ca:0d:ed:ab:a5:55:
84:e0:a2:47:36:17:e7:2f:a1:ac:fe:eb:66:58:ef:52:44:3d:
23:d4:92:5a:bf:64:ce:97:45:a1:2d:5d:83:3a:46:cf:90:19:
21:4c:f9:8d:4a:d9:d0:b3:a3:b3:d7:3f:be:35:62:85:a2:3f:
a5:83:03:0a:51:13:96:a7:02:3b:f0:b4:7d:30:ed:16:a3:7d:
f0:12:3a:75:07:7f:4e:51:51:2e:ee:f3:05:75:fc:06:3e:93:
a1:d0:a6:9e:d6:aa:c5:83:26:07:6f:c8:ce:ea:61:d1:8a:ff:
15:e0:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:45:24 2026 by rpki-client