Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NHgx5QZXgC1Z5ctbuQdoow-darE.roa
File: NHgx5QZXgC1Z5ctbuQdoow-darE.roa (raw, json)
Hash identifier: OP5KGK2YtOmMUXMMSavectFIl8F4W6kJ9nMUmeiJtdo=
Subject key identifier: 34:78:31:E5:06:57:80:2D:59:E5:CB:5B:B9:07:68:A3:0F:9D:6A:B1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A01C1538C584317020737081904B60F9CA
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NHgx5QZXgC1Z5ctbuQdoow-darE.roa
Signing time: Wed 19 Aug 2026 22:12:27 +0000
ROA not before: Wed 19 Aug 2026 22:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202294
IP address blocks: 2a0a:37c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:15:38:c5:84:31:70:20:73:70:81:90:4b:60:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 19 22:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347831e50657802d59e5cb5bb90768a30f9d6ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:ee:b0:95:80:a3:59:03:50:b6:49:48:72:
4c:2f:cc:be:62:10:96:73:3e:a2:ec:18:df:39:4b:
30:b1:24:63:89:af:cb:18:67:f2:d7:17:29:e8:ba:
59:ba:c8:14:72:2e:a3:d4:57:1e:df:a3:b2:46:46:
58:ce:53:37:d8:f9:7c:08:a5:ba:26:80:5d:fc:9d:
71:f5:30:db:ad:ce:0b:20:cd:ba:f6:2b:2f:a9:15:
79:cc:42:e9:54:3a:e2:8e:20:5c:c6:92:32:d9:e6:
2d:52:00:dc:eb:44:50:90:00:2c:3f:1c:c0:5b:94:
e5:f7:26:91:75:7d:7e:10:5b:9e:f4:39:27:d0:f1:
b0:62:97:1b:94:0f:79:23:44:4c:47:f9:aa:a6:f5:
94:3b:34:19:6e:7e:d2:eb:a9:ab:15:b5:e8:de:67:
5a:e2:53:19:9c:0e:62:91:f8:18:af:1f:00:d7:23:
79:1c:20:52:17:3a:ad:51:da:fc:e0:63:c2:79:17:
9e:45:cd:bc:4b:aa:0d:4f:0b:bf:82:35:53:60:4c:
a1:0f:99:fd:9d:06:34:90:bc:f0:08:a3:c9:78:00:
e9:00:fc:9a:3d:dc:9d:78:65:1c:d4:dc:5a:48:52:
71:79:2f:bb:7f:34:34:62:56:71:44:f1:09:1a:f6:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:31:E5:06:57:80:2D:59:E5:CB:5B:B9:07:68:A3:0F:9D:6A:B1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NHgx5QZXgC1Z5ctbuQdoow-darE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:75:1e:d8:bd:ee:ea:02:79:e9:b9:ee:b3:51:94:91:39:fe:
1c:3d:67:b7:c5:68:c3:d7:7d:9d:82:db:c2:b0:fd:06:11:64:
7f:88:7d:c2:d1:4b:85:e9:e7:1c:31:50:ef:cc:4f:19:9f:31:
54:25:bb:d2:d8:00:f5:b6:08:50:ab:87:38:b2:a6:57:b4:2c:
9a:0f:e8:f6:2a:77:78:60:38:dd:78:f3:bb:c7:fe:64:7e:fd:
f1:b1:2c:75:f5:0f:57:db:27:69:d4:eb:4e:90:25:d5:fa:43:
d9:57:63:36:0a:c8:da:43:7f:2a:32:d8:16:9a:65:64:9a:09:
c5:15:46:fe:cb:a3:d0:d6:b5:ff:4e:c3:45:7d:00:e8:ae:4d:
dc:9e:43:4d:bb:43:3a:a7:31:64:88:52:63:50:f4:7d:05:fb:
88:86:a1:d0:8b:18:01:30:78:ca:64:d0:d6:57:75:d1:e0:07:
93:b8:13:7b:e9:03:c4:9c:00:61:da:b5:11:4f:67:7f:79:cc:
54:ab:3f:4b:33:8d:56:ba:f3:f8:de:e8:7a:64:f7:62:66:7c:
b8:f1:f9:50:2b:70:02:59:1d:2d:14:ae:b5:73:16:62:cb:22:
fd:08:ef:e3:b3:7f:75:e2:44:84:02:79:eb:14:07:c1:cc:dd:
52:be:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:33 2026 by rpki-client