Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NBhZpxOjIi-ru4BDRH3WYSm5eEg.roa
File: NBhZpxOjIi-ru4BDRH3WYSm5eEg.roa (raw, json)
Hash identifier: OiTWr7BtX+ROl6hsZNdQpOrb38xDupLvB2PclyG2j/g=
Subject key identifier: 34:18:59:A7:13:A3:22:2F:AB:BB:80:43:44:7D:D6:61:29:B9:78:48
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FF5682B0CB6204EA13228115695D55F70
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NBhZpxOjIi-ru4BDRH3WYSm5eEg.roa
Signing time: Wed 12 Aug 2026 09:57:52 +0000
ROA not before: Wed 12 Aug 2026 09:57:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200456
IP address blocks: 2a06:9801:7c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:68:2b:0c:b6:20:4e:a1:32:28:11:56:95:d5:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 12 09:57:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=341859a713a3222fabbb8043447dd66129b97848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:08:ad:2f:9a:60:5d:26:8b:f2:23:c0:2b:
a0:95:38:a0:c2:ca:b6:00:7a:b7:ca:4e:19:d9:31:
7a:80:cc:37:cc:0d:23:d5:13:1a:b6:b3:bf:a4:36:
93:ea:fe:7a:95:64:fb:a3:d3:a6:e0:41:75:a3:4b:
a0:f8:3a:c1:92:ee:82:57:e1:e6:0c:50:14:28:a3:
ef:24:66:62:a0:78:b2:d2:59:41:63:4f:59:7d:39:
fd:24:dc:b1:ad:c8:79:69:8e:cc:0a:98:5b:c9:b7:
66:ea:26:e2:7d:ff:7c:36:dc:c6:1f:82:be:07:10:
ab:83:44:96:3b:d6:c5:66:4a:d0:42:ed:b6:d4:96:
f9:83:b9:14:88:0f:d4:f1:98:4f:f5:6a:dc:1f:26:
75:fb:8c:a7:12:87:d3:a8:18:06:9f:34:e5:f4:af:
4a:ce:7b:55:41:10:73:95:c3:52:f3:98:e8:c1:ad:
65:29:07:55:1d:98:ac:15:53:73:b2:dc:6b:a1:13:
eb:6f:3e:be:7b:9d:05:e1:82:3e:a4:13:8a:bf:e0:
d3:fe:72:6f:20:41:0d:22:77:2a:16:15:ff:6b:36:
00:1b:29:d1:92:4c:fe:50:5f:35:31:9a:38:9f:6c:
3a:74:e6:ba:d0:ba:e1:10:9b:22:df:87:bf:58:8c:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:59:A7:13:A3:22:2F:AB:BB:80:43:44:7D:D6:61:29:B9:78:48
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NBhZpxOjIi-ru4BDRH3WYSm5eEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7c3::/48
Signature Algorithm: sha256WithRSAEncryption
53:4d:be:d6:38:2c:35:28:11:d1:48:57:3d:33:11:0e:c6:c2:
f3:bc:09:b1:b8:5c:ff:2b:fc:10:f3:ad:81:12:16:61:7b:f2:
a4:0f:c6:95:fd:b9:28:10:d8:b0:a3:d5:d6:ef:99:a3:32:bb:
9a:d8:fc:bf:17:74:d5:36:81:85:27:ee:d1:b7:42:1a:5a:2c:
1c:b2:5a:bc:6f:ed:a3:8b:a1:98:af:89:cf:23:90:ad:a9:d1:
57:42:08:ff:92:86:57:4f:4b:5d:6e:04:5a:b3:4c:82:25:7d:
13:b2:66:52:27:f3:2f:f7:a9:12:57:1b:26:a8:bf:28:a9:1c:
c5:71:97:7e:de:dd:16:4b:b4:1a:0c:47:43:e2:94:de:5a:5b:
ff:7a:98:36:03:1c:d0:75:ab:49:ca:54:4d:07:c7:83:b1:57:
8a:04:2d:82:d7:7b:60:1a:98:1b:b2:12:b3:2a:55:52:69:c0:
aa:00:e1:1e:d9:47:2f:5e:f3:6c:53:58:4f:86:99:20:3f:50:
ab:e2:b0:37:c3:d4:a4:d6:56:02:6c:c0:6d:a9:ea:af:01:e0:
4e:15:6f:53:bc:22:49:7d:cb:03:b7:df:c6:c3:89:87:c4:76:
3a:26:69:a6:4f:57:bf:a8:fa:b9:91:62:7e:0b:be:9a:c8:a8:
16:40:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:48 2026 by rpki-client