Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NIg9Pne2bQQTDM0QebVrJv7NGzU.roa
File: NIg9Pne2bQQTDM0QebVrJv7NGzU.roa (raw, json)
Hash identifier: Szzp57H6mwR41f54bqzu7JskuE9sStxjXxKgL1DYcxo=
Subject key identifier: 34:88:3D:3E:77:B6:6D:04:13:0C:CD:10:79:B5:6B:26:FE:CD:1B:35
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E1871E1DB35CA0DEAFB31CEE034741DA2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NIg9Pne2bQQTDM0QebVrJv7NGzU.roa
Signing time: Mon 11 May 2026 19:09:36 +0000
ROA not before: Mon 11 May 2026 19:09:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:9801:21e::/48 maxlen: 48
2a06:9801:2b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:71:e1:db:35:ca:0d:ea:fb:31:ce:e0:34:74:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 11 19:09:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34883d3e77b66d04130ccd1079b56b26fecd1b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:a8:09:23:ba:0f:71:ac:4d:45:d3:7c:65:
a7:f3:de:26:72:3e:42:0a:0b:e3:59:3f:0d:43:18:
33:7d:95:10:13:07:72:fc:51:13:ed:5c:7b:b2:04:
8d:e4:20:73:0c:3e:05:9e:ec:a9:2c:7f:b1:ad:25:
15:b0:c2:1d:49:88:0d:39:a7:43:09:91:ff:fa:d9:
8a:36:75:cc:c5:2a:b9:b7:60:a7:a1:91:aa:9e:d8:
91:c3:5c:b4:f9:04:94:7a:06:55:d1:67:c8:40:82:
5e:e6:31:cf:e7:2e:ba:6c:96:77:4c:15:09:71:6b:
03:65:c5:6c:da:1d:ad:e7:d1:39:bb:c2:a9:c1:ea:
4d:f5:e5:7d:98:b1:b9:7b:98:e4:c4:13:a6:75:91:
7e:16:c6:ad:63:f4:36:2b:79:48:ac:a3:1b:68:d5:
14:93:63:98:f3:79:55:7f:87:80:9d:f4:23:b5:55:
0c:b2:6b:6d:2a:8f:1c:41:04:14:66:f6:16:f0:bd:
a1:46:14:fd:00:c8:32:3e:06:7c:06:29:8e:18:ce:
dd:d3:1d:e4:98:99:06:f7:a2:1b:49:cb:12:87:65:
69:86:fc:3c:77:58:47:b7:ea:8b:41:8e:6d:e2:95:
3f:66:0f:95:67:d0:2b:26:e1:d2:6e:37:52:df:c9:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:3D:3E:77:B6:6D:04:13:0C:CD:10:79:B5:6B:26:FE:CD:1B:35
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NIg9Pne2bQQTDM0QebVrJv7NGzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:21e::/48
2a06:9801:2b0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:1e:9d:18:08:bd:c5:a7:60:3e:8a:10:b0:93:92:25:fc:08:
39:7d:32:69:4e:e0:7e:85:49:ce:a0:be:27:2c:b2:ca:a2:da:
3c:e8:fd:0a:36:ef:d5:3a:86:63:c3:0b:97:71:f0:36:ec:b9:
b5:d8:e7:3f:11:34:89:85:f0:e3:69:b5:2e:76:d5:66:fc:c6:
f0:0b:38:a4:c0:58:28:bb:c3:29:61:5d:f1:c0:e1:8e:2a:15:
89:61:fd:66:c2:35:6b:6c:43:8d:ad:7e:3b:5b:88:2d:40:6f:
f6:ef:97:2b:ce:58:69:bf:7b:29:e1:2a:06:37:86:eb:3e:f6:
76:48:be:11:9d:0a:30:bb:10:d8:d2:62:58:0e:39:a6:c0:92:
07:89:1e:cd:e9:f5:82:f6:4b:af:e5:a7:11:bd:c6:0c:df:d8:
e9:de:83:1f:c7:ed:18:c8:2c:51:77:f8:92:ca:13:55:ac:a3:
93:5f:b2:fa:91:f1:e9:d7:f7:c7:f6:e7:7b:55:43:31:96:3f:
80:68:b0:2e:0c:27:0e:30:f8:ab:75:a1:d5:13:b4:cd:be:8e:
2e:5b:24:c4:7e:72:8f:fe:6b:95:f8:2b:69:d5:83:6f:76:f8:
61:96:61:4a:58:3c:8c:23:f6:52:74:86:bb:f3:87:01:49:1c:
1b:57:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:05 2026 by rpki-client