Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NaSSPVLKEunTx0ujgsGRhR21fH4.roa
File: NaSSPVLKEunTx0ujgsGRhR21fH4.roa (raw, json)
Hash identifier: Hintsgs+9FXqUFpMKcK80kx5f2hlZCPehpc4sToMSCo=
Subject key identifier: 35:A4:92:3D:52:CA:12:E9:D3:C7:4B:A3:82:C1:91:85:1D:B5:7C:7E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F04C12DC47CBB82A3B9F30701FDC30B5C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NaSSPVLKEunTx0ujgsGRhR21fH4.roa
Signing time: Fri 26 Jun 2026 16:26:36 +0000
ROA not before: Fri 26 Jun 2026 16:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402270
IP address blocks: 2a06:9801:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:c1:2d:c4:7c:bb:82:a3:b9:f3:07:01:fd:c3:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 26 16:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35a4923d52ca12e9d3c74ba382c191851db57c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e2:e0:3b:7d:29:4d:6e:19:5e:b2:eb:4e:46:
6a:3a:3d:07:21:22:c3:92:32:89:6f:74:07:8e:f8:
a1:63:1a:1a:ce:05:ee:59:e3:0d:c2:cf:aa:0c:7a:
3f:4c:2f:d7:3a:9f:25:1c:d2:bd:49:08:06:3f:ed:
bf:07:9b:ed:3f:c5:47:b0:37:2e:7c:25:54:bb:70:
ec:96:25:b0:ba:11:10:b2:a7:b8:ee:75:6e:5e:5e:
af:84:97:a9:f8:a6:78:ad:5f:49:44:6f:f7:a1:65:
00:73:71:d2:31:65:98:45:df:bc:ad:c3:6d:91:fb:
75:aa:dd:59:37:68:f4:69:ae:cb:1c:87:57:e7:93:
a7:c0:18:f9:c3:4c:a3:a8:7c:4d:ea:52:84:45:94:
32:fa:b7:16:d5:0c:97:a0:10:10:42:b2:66:05:04:
4b:a2:51:c8:d3:58:6f:57:87:ab:4e:f3:c2:b6:9e:
1a:98:dc:7f:d4:5f:b4:e7:8e:69:f1:e5:39:62:92:
7b:34:37:7c:e1:0f:1a:bb:d2:ec:80:f6:63:8e:b0:
41:75:01:68:d7:55:1f:e6:85:f0:63:02:79:15:5e:
a2:1f:de:42:23:7c:cb:c0:b4:9a:18:d9:17:a3:06:
ea:05:92:0c:de:3a:c4:0a:27:0a:f4:c2:26:9b:06:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:92:3D:52:CA:12:E9:D3:C7:4B:A3:82:C1:91:85:1D:B5:7C:7E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NaSSPVLKEunTx0ujgsGRhR21fH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:900::/40
Signature Algorithm: sha256WithRSAEncryption
13:32:4a:9e:59:43:33:54:66:14:b6:70:7f:d4:ef:87:5b:5a:
09:89:e5:2e:40:94:7e:b3:7a:1f:8c:1a:80:c1:fa:f1:cf:67:
db:65:fc:22:27:a5:2a:a0:2b:4f:dd:fb:ca:0c:bf:a1:48:8b:
3f:06:12:2e:7c:25:c6:38:9f:4d:98:d8:a6:50:b1:96:97:b0:
f8:80:85:59:ca:23:5e:8a:95:b0:ba:12:37:07:8e:2e:46:fd:
19:6f:e3:1e:33:fa:93:96:5f:a0:f3:8c:a4:9c:7c:77:f1:c7:
54:48:c5:da:83:d2:0a:54:7c:fa:ae:b8:c4:ac:bd:39:bb:d6:
98:64:13:34:cf:23:1c:8c:6a:3d:35:21:f6:99:ff:85:d6:e0:
05:55:5e:c8:0a:9a:4a:8b:9f:7c:fd:63:01:99:7b:05:1a:5b:
f3:3a:6c:1f:7e:8d:29:4a:f7:3f:3d:f8:13:a9:a9:14:24:5c:
df:d4:6b:88:11:21:5d:1b:7f:0b:fd:1c:f0:77:b6:d3:29:0d:
b7:9a:d1:b0:71:44:3a:f4:c7:41:18:7d:c7:4d:c7:0d:1f:d0:
31:61:de:6f:0b:9e:f2:ee:b0:d2:3f:54:33:0f:0b:83:77:b0:
41:b9:80:42:6c:81:bc:79:22:1e:25:79:15:53:1c:25:48:6f:
b7:7b:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 21:30:57 2026 by rpki-client