Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/nPlg5Apcfbk2XDk2K88egtmTy-k.roa
File: nPlg5Apcfbk2XDk2K88egtmTy-k.roa (raw, json)
Hash identifier: Yc40tcEIs4qWmAxFY5qMLEF4tlNRSDMHzrxrJEJYNjM=
Subject key identifier: 9C:F9:60:E4:0A:5C:7D:B9:36:5C:39:36:2B:CF:1E:82:D9:93:CB:E9
Certificate issuer: /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial: 01A026CA4F190CAE36FA6E4528BED7E72240
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/nPlg5Apcfbk2XDk2K88egtmTy-k.roa
Signing time: Sat 22 Aug 2026 00:06:27 +0000
ROA not before: Sat 22 Aug 2026 00:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47526
IP address blocks: 185.55.80.0/24 maxlen: 24
2a13:ccc0::/29 maxlen: 29
2a13:ccc0::/32 maxlen: 48
2a13:ccc1::/32 maxlen: 48
2a13:ccc2::/32 maxlen: 48
2a13:ccc3::/32 maxlen: 48
2a13:ccc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:ca:4f:19:0c:ae:36:fa:6e:45:28:be:d7:e7:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
Validity
Not Before: Aug 22 00:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cf960e40a5c7db9365c39362bcf1e82d993cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:70:b9:fa:b8:23:b5:27:b6:4b:f7:a9:83:
0b:13:71:11:9b:a5:f6:6c:f1:f6:ec:49:d9:ab:49:
53:2b:57:92:7e:8e:6f:84:ce:d6:e9:ab:f4:0a:74:
3c:ec:6a:70:69:a8:d4:bd:26:b5:53:a5:6e:76:6c:
47:68:e3:2c:38:99:86:4e:f5:0f:2b:a1:9b:3b:bc:
5c:fe:6f:14:96:ae:91:70:cb:f8:2d:95:1e:28:b3:
58:8a:fe:be:51:f0:6c:ee:d4:82:56:19:19:30:89:
6a:4e:4d:a8:12:8b:a7:68:78:31:30:a9:88:36:bf:
89:61:fd:5d:63:e5:29:a9:ee:d1:a5:9c:b3:63:21:
80:06:7b:e7:1a:54:45:b1:70:6d:88:11:dd:fd:1d:
e7:9b:c6:5a:d7:93:25:5d:d9:2b:a0:8e:f0:2b:44:
c3:95:59:85:05:50:66:cf:1c:b1:51:dd:46:62:1f:
5b:e2:a3:3d:bb:62:c3:14:cd:99:4d:0b:21:65:65:
5c:38:b5:17:e1:45:f8:73:f6:46:fe:da:b8:be:87:
47:03:a0:05:9d:ba:5d:03:2c:36:dc:2a:e3:68:73:
8e:4c:75:26:ed:96:d6:89:f2:02:26:9f:c7:5e:11:
60:17:c7:67:ab:f3:47:46:67:92:8f:48:36:33:4d:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F9:60:E4:0A:5C:7D:B9:36:5C:39:36:2B:CF:1E:82:D9:93:CB:E9
X509v3 Authority Key Identifier:
keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/nPlg5Apcfbk2XDk2K88egtmTy-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.80.0/24
IPv6:
2a13:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
58:69:c3:7b:10:dd:bc:7a:fd:72:62:a1:63:1e:76:11:1b:09:
f1:52:33:bc:cd:f1:31:07:f1:01:4f:b3:70:ab:02:f1:84:2d:
66:60:9f:66:2f:df:03:2d:1b:73:6b:13:f4:72:26:5c:f8:6f:
88:8d:95:4b:f9:4a:6f:cd:34:3f:c0:7d:b3:0d:d0:85:61:79:
c4:db:cf:be:51:4e:a1:f2:8a:3d:17:63:4d:d8:02:b7:4c:5b:
a3:3b:59:1e:ea:3c:9d:2c:a8:2c:0d:dc:72:96:07:9f:f1:54:
66:0e:46:84:74:c7:d0:8a:fc:f8:8e:a5:09:46:e4:db:45:b1:
dc:33:37:15:f1:de:a2:75:27:33:b8:96:7a:5b:96:25:a1:1b:
cc:78:f6:7e:41:89:33:d7:c1:91:61:ee:39:c5:13:06:6d:07:
0a:a1:b9:2e:08:3d:ec:ec:19:af:d6:79:1e:a6:49:03:42:d2:
71:7a:b6:7b:95:c3:29:e2:fe:3b:33:0a:5c:1f:8f:1f:3a:84:
b4:4f:1f:d9:10:b5:fa:16:88:00:1a:d6:db:c8:2f:34:96:ac:
5b:60:65:46:6f:a2:62:80:8e:de:2d:40:be:c4:7d:34:64:43:
bc:dc:39:f8:23:c3:e0:f3:98:f4:17:a8:54:47:06:16:31:fd:
c3:07:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:02:39 2026 by rpki-client