Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/nfUh1_3AXxv2EmPNSsESpQNi7dQ.roa
File: nfUh1_3AXxv2EmPNSsESpQNi7dQ.roa (raw, json)
Hash identifier: Iy2x4VtZFaymgZhOLE4eF/mbwt8oIcKGBi7v5fLpvxE=
Subject key identifier: 9D:F5:21:D7:FD:C0:5F:1B:F6:12:63:CD:4A:C1:12:A5:03:62:ED:D4
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A121FEE4C2DDCAEB19DB5C065144229E0E
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/nfUh1_3AXxv2EmPNSsESpQNi7dQ.roa
Signing time: Fri 09 Oct 2026 18:48:35 +0000
ROA not before: Fri 09 Oct 2026 18:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 2a14:a084::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:fe:e4:c2:dd:ca:eb:19:db:5c:06:51:44:22:9e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 9 18:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9df521d7fdc05f1bf61263cd4ac112a50362edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:80:0b:ea:63:b9:85:93:77:05:54:23:12:
3d:dc:c2:17:92:73:37:a1:29:4e:08:9d:2d:0c:15:
00:ad:40:75:ba:c8:9d:a3:d5:c5:40:f0:af:b4:30:
9f:f7:57:62:ea:bf:04:93:4b:c5:76:f8:0a:70:76:
e4:4b:d5:ad:21:66:ab:80:e1:25:b8:75:43:ab:f7:
b3:04:b3:91:4a:35:12:04:08:a2:13:21:cd:1b:9b:
a2:b4:32:b8:32:5d:81:8e:d3:29:7b:03:e1:ff:a0:
c5:c7:26:ea:e5:b2:d0:28:19:9d:ea:0e:8b:ec:25:
ca:00:89:83:af:80:52:ea:6c:51:e4:96:77:25:8f:
b9:ed:ca:33:16:8c:47:64:67:9b:32:05:5d:76:10:
1e:80:23:2e:1a:d2:e1:7d:a3:ee:92:25:96:e2:1f:
fe:a5:b1:04:72:72:5f:1e:5d:c2:b5:ef:9e:f0:12:
40:9e:7d:b2:96:63:f1:73:53:f9:f2:5b:ea:8c:17:
73:46:af:bb:4d:5c:00:d3:11:9b:46:4d:d1:1b:1b:
54:41:9d:1e:ec:fc:b6:6f:77:0b:da:4d:a9:5f:83:
d2:b2:0f:e2:e0:a4:c7:42:1d:98:d6:7a:90:42:bc:
81:5a:10:60:03:18:fe:78:2f:17:eb:c4:d0:77:fc:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:21:D7:FD:C0:5F:1B:F6:12:63:CD:4A:C1:12:A5:03:62:ED:D4
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/nfUh1_3AXxv2EmPNSsESpQNi7dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a084::/36
Signature Algorithm: sha256WithRSAEncryption
07:8e:78:0d:8e:34:b2:9b:a5:07:1f:0c:23:44:3c:59:2e:2c:
58:1b:13:cf:f8:d9:a2:81:b0:b3:7c:d4:fc:6b:96:46:dd:b8:
f8:06:29:a4:9d:5c:0f:6a:1d:29:12:40:c8:1a:c8:ab:a5:7f:
b2:e6:ed:1d:2d:b8:27:bf:6f:ea:c7:7d:38:51:34:ae:38:e3:
13:40:31:90:70:7c:76:a4:52:21:f5:59:31:04:f2:04:6d:dd:
54:a6:b9:cb:65:bd:08:cc:80:a0:25:7e:ea:4c:e2:c3:2d:78:
0c:2f:f0:cc:0e:54:05:f0:13:71:06:f8:23:6f:b2:32:cc:36:
1f:56:e0:ac:18:05:b9:a3:bb:7d:76:80:94:35:3d:e9:90:2f:
a1:08:25:c4:a1:dd:7d:8d:e5:b2:55:96:f7:9e:b5:40:ce:3e:
29:e4:9e:16:60:bd:32:b1:b7:79:eb:7d:09:30:1f:12:d9:bf:
6f:90:9d:02:58:e9:50:ce:f9:83:f6:91:b0:18:33:45:5b:7e:
58:fe:8f:b2:85:f9:33:d0:0a:db:ae:84:64:1f:74:b5:4f:96:
f5:8c:08:1c:a4:e5:06:9e:9b:7c:67:0b:02:d7:0b:41:cd:d1:
24:a6:48:e3:30:a1:c9:f4:f8:b7:a6:b1:dc:fb:bd:23:47:57:
af:9d:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:08 2026 by rpki-client