Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NF-ZpI25wnBXhXQ66dzxZ_lcdJo.roa
File: NF-ZpI25wnBXhXQ66dzxZ_lcdJo.roa (raw, json)
Hash identifier: NgsBXHZRTqGWZoAOqCQgcdsGkC1NY4A/0U1ClL6otS8=
Subject key identifier: 34:5F:99:A4:8D:B9:C2:70:57:85:74:3A:E9:DC:F1:67:F9:5C:74:9A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A023F278EBEA62F5B6AF7D9FDF45EB5678
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NF-ZpI25wnBXhXQ66dzxZ_lcdJo.roa
Signing time: Fri 21 Aug 2026 10:51:28 +0000
ROA not before: Fri 21 Aug 2026 10:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11967
IP address blocks: 2a06:9801:f9e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:f2:78:eb:ea:62:f5:b6:af:7d:9f:df:45:eb:56:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 21 10:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=345f99a48db9c2705785743ae9dcf167f95c749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:56:8a:53:ad:b0:18:be:4d:c0:4d:d6:53:
9d:a4:ba:04:2d:5c:b7:e8:15:cd:e3:af:26:6c:e4:
6b:e5:0b:91:31:02:1f:44:ad:74:06:15:c8:77:da:
fb:a1:4d:40:6a:60:dd:cd:dc:fc:c0:f7:fb:27:74:
1b:df:54:b1:9c:5c:4e:b2:ad:24:62:fb:2c:26:bd:
ae:3a:3e:76:81:66:c0:64:eb:7c:19:2b:8a:5a:dd:
49:4f:71:df:7c:8a:be:3c:8d:ad:5c:74:77:22:11:
0f:5b:17:be:46:ed:85:e0:a3:71:00:0c:a8:8e:95:
c6:9f:7a:7d:3e:0b:04:e7:01:0c:19:82:1a:ac:87:
2a:26:f3:cd:1a:cb:01:31:60:05:23:58:a8:06:05:
65:13:e8:eb:40:f4:ba:8c:5c:4c:a5:dd:2c:e5:1c:
fc:0e:33:76:b9:43:f5:af:2d:fc:ff:38:5c:4c:ae:
15:49:73:48:b1:57:be:fc:32:bb:16:14:67:ea:b9:
72:05:d4:0b:3c:a8:94:c7:ff:1b:f1:cf:4c:81:cf:
68:3e:2d:84:17:6e:49:65:34:24:8b:61:d1:aa:1e:
63:39:24:88:e7:dd:f0:cc:fc:cd:98:be:6d:ee:3d:
34:b8:2b:df:4a:cd:8d:a9:15:d1:1e:70:4c:11:d0:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5F:99:A4:8D:B9:C2:70:57:85:74:3A:E9:DC:F1:67:F9:5C:74:9A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NF-ZpI25wnBXhXQ66dzxZ_lcdJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f9e::/48
Signature Algorithm: sha256WithRSAEncryption
0d:5a:9b:23:13:33:49:85:fb:a4:49:79:fd:43:df:f4:6f:64:
ec:49:f7:c1:13:6d:d7:5e:4f:c3:1e:a2:45:97:d4:6f:77:71:
93:08:9f:8e:22:39:03:33:fd:8a:97:62:80:77:29:42:23:34:
7d:24:e2:79:3a:00:b3:db:47:ee:3f:3e:b8:15:db:dd:b0:08:
ac:8e:1f:03:0d:27:32:e1:12:16:86:7f:f8:7d:a3:f1:4b:fe:
38:05:9d:05:d4:47:93:e1:ae:d0:95:62:e8:c7:6c:33:77:73:
68:10:fe:04:8f:1d:d4:9d:89:de:3a:7d:1a:4a:da:ca:c4:09:
18:ed:8f:bc:13:96:f5:07:18:67:4e:eb:c8:af:ef:b1:44:78:
a6:5c:3e:64:50:bd:1b:20:e3:f1:87:94:fe:08:42:55:6f:50:
6a:38:fb:9f:d3:fb:1e:d5:21:91:ba:98:d5:12:c3:27:da:4a:
79:c1:b6:91:90:32:7a:05:c7:c4:20:ec:96:cf:2a:9c:e4:6c:
57:f0:1f:09:53:97:9d:8f:59:97:e3:1d:28:15:9d:4f:64:89:
09:c7:11:b7:0f:aa:84:5c:62:fe:75:78:84:0c:72:2c:e0:7c:
7a:84:0c:6c:cd:61:bc:b7:0a:3b:82:12:7c:e6:c8:28:68:33:
6d:cf:d3:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaAj8njr6mL1tq99n99F61Z4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODIxMTA1MTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDVmOTlhNDhkYjljMjcwNTc4NTc0M2FlOWRjZjE2N2Y5NWM3NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhttWilOtsBi+TcBN1lOdpLoELVy3
6BXN468mbORr5QuRMQIfRK10BhXId9r7oU1AamDdzdz8wPf7J3Qb31SxnFxOsq0k
YvssJr2uOj52gWbAZOt8GSuKWt1JT3HffIq+PI2tXHR3IhEPWxe+Ru2F4KNxAAyo
jpXGn3p9PgsE5wEMGYIarIcqJvPNGssBMWAFI1ioBgVlE+jrQPS6jFxMpd0s5Rz8
DjN2uUP1ry38/zhcTK4VSXNIsVe+/DK7FhRn6rlyBdQLPKiUx/8b8c9Mgc9oPi2E
F25JZTQki2HRqh5jOSSI593wzPzNmL5t7j00uCvfSs2NqRXRHnBMEdCcWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDRfmaSNucJwV4V0Ounc8Wf5XHSaMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvTkYtWnBJMjV3bkJYaFhRNjZkenhaX2xjZEpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ+e
MA0GCSqGSIb3DQEBCwUAA4IBAQANWpsjEzNJhfukSXn9Q9/0b2TsSffBE23XXk/D
HqJFl9Rvd3GTCJ+OIjkDM/2Kl2KAdylCIzR9JOJ5OgCz20fuPz64FdvdsAisjh8D
DScy4RIWhn/4faPxS/44BZ0F1EeT4a7QlWLox2wzd3NoEP4Ejx3UnYneOn0aStrK
xAkY7Y+8E5b1BxhnTuvIr++xRHimXD5kUL0bIOPxh5T+CEJVb1BqOPuf0/se1SGR
upjVEsMn2kp5wbaRkDJ6BcfEIOyWzyqc5GxX8B8JU5edj1mX4x0oFZ1PZIkJxxG3
D6qEXGL+dXiEDHIs4Hx6hAxszWG8two7ghJ85sgoaDNtz9OH
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:26 2026 by rpki-client