Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Nl-1NyF8Hyqnd4Cva5SktTU0UXU.roa
File: Nl-1NyF8Hyqnd4Cva5SktTU0UXU.roa (raw, json)
Hash identifier: Ne3GYi8enPhePV4Jvw3dm26+R/KuSzVBLQ/PgOq+94g=
Subject key identifier: 36:5F:B5:37:21:7C:1F:2A:A7:77:80:AF:6B:94:A4:B5:35:34:51:75
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FAEFCDC9D71B96F178D64E3B371D954E6
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Nl-1NyF8Hyqnd4Cva5SktTU0UXU.roa
Signing time: Wed 29 Jul 2026 17:47:14 +0000
ROA not before: Wed 29 Jul 2026 17:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219240
IP address blocks: 2a06:9801:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:fc:dc:9d:71:b9:6f:17:8d:64:e3:b3:71:d9:54:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 29 17:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=365fb537217c1f2aa77780af6b94a4b535345175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:7e:92:86:70:af:27:ed:85:98:96:8b:5c:
64:a6:ca:6d:0b:b6:d2:a7:bd:f5:9a:ae:c7:31:2f:
b4:03:d8:f0:1e:41:f3:1b:a1:7d:a6:86:16:17:d0:
fe:a6:4e:8c:a0:bf:61:4b:47:3e:35:6a:34:ad:a4:
a7:30:e1:a8:41:2d:82:24:b2:53:4d:d7:35:94:16:
76:5b:b3:ae:bb:6f:69:45:9d:fb:a4:d4:48:df:15:
12:88:a0:28:08:87:a3:89:71:c7:11:e4:b6:e3:2c:
74:3e:eb:80:8f:22:9a:c4:8e:66:08:01:0e:39:5d:
62:13:80:86:2c:3b:50:42:2c:ae:35:50:7e:1a:17:
6f:c8:62:ce:cd:0f:f1:c6:dd:e4:65:a6:03:79:60:
e7:5d:e2:e3:32:ce:c0:75:79:c6:35:4e:67:d9:86:
ed:64:43:e3:de:f2:8d:2a:b2:b9:9e:10:b4:b2:22:
12:83:83:b0:a1:43:29:ad:ed:e8:39:a2:4d:a1:e0:
7e:b4:7a:2d:ac:86:54:f3:da:0e:5f:87:8c:47:6c:
b6:a7:85:65:d7:6f:69:86:d2:80:c4:f4:1c:0d:12:
f5:20:9a:a6:7c:7e:17:6c:da:47:2d:da:88:3d:27:
10:7d:86:fc:ea:e0:6d:da:c6:01:e4:a3:f5:85:97:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5F:B5:37:21:7C:1F:2A:A7:77:80:AF:6B:94:A4:B5:35:34:51:75
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Nl-1NyF8Hyqnd4Cva5SktTU0UXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1100::/40
Signature Algorithm: sha256WithRSAEncryption
4b:a1:ea:a7:c7:a1:66:1e:76:e1:34:5d:1f:e1:fe:54:f1:c9:
e3:8c:6a:49:90:6f:5d:18:d9:f9:57:8f:02:09:a9:46:ac:e9:
04:57:e1:49:4f:57:9a:2b:f9:43:49:84:6c:10:10:db:38:54:
21:e5:60:45:2a:c0:be:34:c0:ca:07:77:74:62:1a:9b:ea:5b:
ca:20:ca:60:14:3d:bc:2b:15:3d:a4:d8:76:de:1b:c5:b3:b3:
ad:43:b6:45:de:5b:06:08:40:76:cd:58:fc:0d:86:20:36:2f:
66:64:48:ed:a4:10:ac:88:5b:b4:2c:69:41:27:e1:3d:91:a6:
72:cd:59:6d:62:ff:49:6e:71:1a:e4:08:1e:37:2a:55:ba:d5:
78:3e:fd:e7:cd:b9:cc:2b:14:41:66:98:07:10:a5:fd:f0:d4:
ee:45:7c:03:7a:9d:b4:25:25:c2:89:b5:cc:ec:c4:64:03:a1:
de:3d:57:f2:8d:a5:87:03:f7:b2:d8:b3:32:39:ef:08:e7:49:
c4:8f:84:25:67:03:cd:6f:f3:30:df:54:c9:1b:d1:88:d2:6e:
05:a7:2f:f4:1c:6c:1e:00:31:0d:88:be:53:f2:14:ab:aa:32:
c6:cf:0c:e4:b8:aa:2e:9a:14:0c:d5:3a:10:52:5c:9d:da:30:
0d:90:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:13:34 2026 by rpki-client