Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/N8mXQ0earOWPRpbCulDg5kMAQMM.roa
File: N8mXQ0earOWPRpbCulDg5kMAQMM.roa (raw, json)
Hash identifier: 0BdZVikoRhJsXEaOvR6Fi4Wmixms962OGp0BE24GjrQ=
Subject key identifier: 37:C9:97:43:47:9A:AC:E5:8F:46:96:C2:BA:50:E0:E6:43:00:40:C3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A155208D799CB05F307FE259A3971E243D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/N8mXQ0earOWPRpbCulDg5kMAQMM.roa
Signing time: Mon 19 Oct 2026 17:05:59 +0000
ROA not before: Mon 19 Oct 2026 17:05:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204909
IP address blocks: 2a11:77c1::/32 maxlen: 32
2a11:7d00::/32 maxlen: 32
2a11:7d01::/32 maxlen: 32
2a11:ab83::/32 maxlen: 32
2a11:e2c5::/32 maxlen: 32
2a11:eac7::/32 maxlen: 32
2a12:f980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:20:8d:79:9c:b0:5f:30:7f:e2:59:a3:97:1e:24:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 19 17:05:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37c99743479aace58f4696c2ba50e0e6430040c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:c1:69:09:bc:8d:33:d4:df:b4:8b:15:94:
cd:49:29:bd:ae:be:ca:4d:aa:39:f2:5c:4f:9e:a3:
69:ee:9a:de:ca:ee:36:cc:08:cc:d3:d8:ab:1d:90:
32:57:f9:e4:b2:8a:16:ac:56:0d:e4:a7:3b:5c:a4:
ee:74:b0:2e:be:31:6a:3a:8b:55:78:a7:3b:78:cd:
7b:6c:5f:15:36:f1:5b:9a:2d:b3:76:3d:7f:0c:e8:
37:62:ea:6f:d5:5e:4f:4b:22:b7:b2:c1:e0:58:68:
2d:83:af:a6:86:0c:03:4b:fc:4a:93:04:ff:35:48:
10:6c:b7:71:77:b7:72:2e:00:a9:73:19:8e:b0:2a:
ac:9b:07:44:22:bd:7f:42:fb:89:39:25:cd:09:c5:
85:41:0f:f6:3c:93:54:c1:54:43:db:9b:76:43:32:
32:12:38:61:20:1c:e2:23:03:c2:ae:99:b6:a6:f8:
a6:e2:08:9b:f3:e4:ca:32:63:0d:65:cc:58:00:c5:
5d:b7:7d:e8:06:5c:7d:6a:a5:19:90:c0:0e:9b:0e:
d2:95:33:20:d2:8f:84:63:35:a6:c8:61:b0:df:02:
2a:c5:9c:5d:58:46:47:37:77:4c:96:9a:35:1f:19:
84:6b:c5:a4:30:54:ac:bc:2f:b4:0d:44:c3:7d:af:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C9:97:43:47:9A:AC:E5:8F:46:96:C2:BA:50:E0:E6:43:00:40:C3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/N8mXQ0earOWPRpbCulDg5kMAQMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c1::/32
2a11:7d00::/31
2a11:ab83::/32
2a11:e2c5::/32
2a11:eac7::/32
2a12:f980::/32
Signature Algorithm: sha256WithRSAEncryption
24:17:8c:29:64:85:b5:35:3c:ea:c4:3f:75:2b:8c:46:17:2b:
43:86:a4:cf:97:81:db:e6:ed:91:c2:4d:a2:45:60:f6:a6:34:
81:0c:2f:11:48:fa:cb:10:32:41:88:04:4a:79:77:a6:3a:10:
13:1f:1d:95:fb:91:bb:6d:4b:9f:90:b1:be:8f:c2:2b:bb:9e:
e1:8e:89:02:66:4c:bd:aa:ac:12:26:aa:f0:5a:5c:ea:61:f9:
7e:1e:ad:99:94:d1:86:24:af:b4:b9:86:f4:8e:fe:5b:d9:16:
77:df:4b:14:bb:db:93:98:f4:7e:d4:e1:e3:ba:d1:0a:88:4d:
a2:55:bd:9e:1c:a7:4c:1b:21:e4:ec:00:e3:bf:18:91:0f:ca:
f4:1c:ec:ee:13:92:b5:61:a1:67:f4:65:b4:90:2c:b1:ac:d3:
e1:fb:0c:41:c0:dc:73:39:8f:a7:24:a5:a9:13:60:4c:2f:de:
e9:a7:38:2e:aa:78:9e:2b:4f:fa:3d:da:d3:25:fb:b8:8e:1d:
a6:76:28:cb:ef:56:4a:da:ca:df:2d:14:a1:25:97:09:2b:20:
94:8c:b5:01:2e:50:c3:91:a8:da:59:a9:02:25:f6:6f:4d:80:
eb:09:40:1c:88:f0:63:88:3d:d6:62:60:29:6d:fa:6f:aa:f4:
e5:e4:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:13 2026 by rpki-client