Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NXvhB4avhIoB1LuLmg5YazzuK8g.roa
File: NXvhB4avhIoB1LuLmg5YazzuK8g.roa (raw, json)
Hash identifier: +QG11wdGndnIzFFy1MnXMRkT/a1yMu4y/RyiA6m5qLA=
Subject key identifier: 35:7B:E1:07:86:AF:84:8A:01:D4:BB:8B:9A:0E:58:6B:3C:EE:2B:C8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A02034D40F2C5A8D1BCCD4815C65102157
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NXvhB4avhIoB1LuLmg5YazzuK8g.roa
Signing time: Thu 20 Aug 2026 17:25:28 +0000
ROA not before: Thu 20 Aug 2026 17:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204490
IP address blocks: 2a0d:ad46::/32 maxlen: 32
2a12:2802::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:34:d4:0f:2c:5a:8d:1b:cc:d4:81:5c:65:10:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 20 17:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=357be10786af848a01d4bb8b9a0e586b3cee2bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:c4:a9:7c:ff:52:fa:af:4c:c2:9a:f4:1a:
79:5c:05:d3:8f:a8:ba:17:39:93:4e:d6:73:d6:41:
f5:44:ef:5f:9e:d7:11:0a:18:16:f7:82:c0:f5:1b:
14:05:d9:fc:33:b3:c4:72:f1:51:0e:21:41:8a:fd:
6e:0c:5f:16:06:a0:bf:ee:e4:ed:73:63:0c:2c:e5:
f2:43:9c:e1:5d:37:40:72:4d:4e:d3:f0:6b:32:43:
30:42:00:7d:3e:7b:e9:c5:a3:5c:67:7c:40:17:39:
27:18:33:53:a6:a4:52:89:d1:cc:5f:47:dc:11:55:
4e:25:48:25:37:17:4a:3a:83:ea:b2:21:9f:86:b2:
57:a3:1d:b5:ac:a4:ed:d9:b6:3d:77:bb:da:0c:d9:
30:6b:0e:1d:7c:30:ec:c4:4a:a5:f8:0f:9c:ac:e3:
43:d1:45:46:b0:b1:a2:dd:64:49:e1:22:a5:54:44:
8d:34:68:16:49:98:7a:0a:bd:c0:73:cb:88:78:90:
60:33:8e:c8:1e:ed:e3:c7:e9:ad:0b:4f:59:ec:b4:
46:e5:6a:cd:a2:6e:0f:df:89:6b:8c:52:b4:87:d2:
be:13:49:32:8c:70:6c:fa:33:03:7f:5e:08:57:50:
4e:3a:76:d2:27:f0:99:af:1c:df:c5:d5:98:14:06:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7B:E1:07:86:AF:84:8A:01:D4:BB:8B:9A:0E:58:6B:3C:EE:2B:C8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NXvhB4avhIoB1LuLmg5YazzuK8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad46::/32
2a12:2802::/32
Signature Algorithm: sha256WithRSAEncryption
77:a6:76:1e:e8:59:4d:87:cb:56:e8:94:b6:5c:a6:3e:8c:bb:
56:eb:99:81:de:12:93:98:4e:70:c4:ef:8d:2e:8e:ba:fb:b8:
55:e0:33:5e:19:bc:d6:85:d5:71:11:25:28:b2:ba:b0:06:8f:
dd:87:b4:6a:de:88:30:67:0e:24:6e:88:1b:29:38:eb:11:98:
45:57:48:54:8b:72:20:3e:ea:c9:3c:dc:9a:c8:7c:38:0e:17:
7c:0d:de:53:bd:f5:fb:35:b4:94:86:16:89:4b:14:27:60:6b:
03:d4:60:f3:cc:41:bb:fa:aa:dd:62:eb:bf:19:64:3a:d6:3f:
29:60:95:37:86:6a:1e:79:12:17:e3:4a:74:66:ce:97:f7:14:
2e:ae:4f:b1:f6:e2:f4:23:cc:4e:73:14:e8:db:fe:01:d3:52:
28:bb:9f:15:3b:0d:74:f3:95:70:58:d4:cb:3f:ca:58:e1:79:
71:4c:64:d1:52:17:16:75:ab:ba:c8:12:00:05:3e:39:07:09:
ec:cd:f1:32:32:80:b7:cb:08:05:6c:9b:04:08:91:1a:ce:3c:
3a:c0:94:c9:5a:48:ca:43:de:2d:95:0d:8d:e9:df:a0:bf:38:
3b:ad:c0:db:1f:25:80:65:c9:43:02:6f:ba:88:b8:1d:2c:ae:
e2:d2:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:10 2026 by rpki-client