Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/nmAln1Muu-TVq_jeUNithW-yBaY.roa
File: nmAln1Muu-TVq_jeUNithW-yBaY.roa (raw, json)
Hash identifier: YAwAqexKIAqYfIiBMx6aVNRVN9byv11+Qsd+W4y5deM=
Subject key identifier: 9E:60:25:9F:53:2E:BB:E4:D5:AB:F8:DE:50:D8:AD:85:6F:B2:05:A6
Certificate issuer: /CN=6c23d5957bb54b1e6d5eb6b41888ccec45f99e49
Certificate serial: 019F236890120E5330AE32EA8BBD4661AC0E
Authority key identifier: 6C:23:D5:95:7B:B5:4B:1E:6D:5E:B6:B4:18:88:CC:EC:45:F9:9E:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCPVlXu1Sx5tXra0GIjM7EX5nkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/nmAln1Muu-TVq_jeUNithW-yBaY.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204816
IP address blocks: 217.20.253.0/24 maxlen: 24
2a12:ffc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/bCPVlXu1Sx5tXra0GIjM7EX5nkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/bCPVlXu1Sx5tXra0GIjM7EX5nkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCPVlXu1Sx5tXra0GIjM7EX5nkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:12:0e:53:30:ae:32:ea:8b:bd:46:61:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c23d5957bb54b1e6d5eb6b41888ccec45f99e49
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e60259f532ebbe4d5abf8de50d8ad856fb205a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:60:52:c9:e6:cb:23:4f:fa:f0:12:e7:fd:
19:39:b2:39:37:77:3b:5b:d8:db:61:ab:a5:65:ea:
8d:a7:72:38:e0:f0:54:11:cc:aa:ca:a0:54:74:db:
67:11:f6:96:04:7f:42:64:68:d4:80:98:a9:51:36:
fb:62:52:ba:e4:27:b2:81:73:25:23:cd:0f:4c:fc:
55:95:31:13:fe:fa:0a:da:0a:1e:c0:23:b5:f0:da:
c4:ee:6a:7e:1a:05:58:4f:dc:94:26:19:39:0b:15:
3d:53:5a:19:86:d5:1c:63:ff:5f:c2:29:b0:d1:b0:
cd:bb:4d:69:35:c0:3a:1a:4e:a8:72:49:f7:d7:37:
4c:34:77:71:8b:42:c3:45:6a:fa:45:0e:ae:79:44:
f6:15:bf:65:55:d5:c7:cb:86:33:24:8f:68:71:73:
9a:14:f2:b2:92:9c:f0:04:eb:d2:0e:1c:ff:fb:5e:
29:50:87:d2:ae:b8:c5:21:16:c1:8a:c3:40:db:f5:
1b:47:d7:b8:e9:09:32:36:f2:d5:38:90:16:23:f1:
c3:57:87:f1:12:6e:20:b2:87:8d:b0:51:cf:f2:a6:
7a:43:f3:5e:82:f4:8a:d3:bb:93:8e:a1:4b:ea:25:
eb:8c:cb:1e:6f:40:b6:ba:67:c2:bb:f1:f4:a9:70:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:60:25:9F:53:2E:BB:E4:D5:AB:F8:DE:50:D8:AD:85:6F:B2:05:A6
X509v3 Authority Key Identifier:
keyid:6C:23:D5:95:7B:B5:4B:1E:6D:5E:B6:B4:18:88:CC:EC:45:F9:9E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCPVlXu1Sx5tXra0GIjM7EX5nkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/nmAln1Muu-TVq_jeUNithW-yBaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/bCPVlXu1Sx5tXra0GIjM7EX5nkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.253.0/24
IPv6:
2a12:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:a5:c6:a5:5d:0e:d8:5b:d9:55:51:62:06:b6:06:67:d6:9d:
7c:b0:ac:f6:b2:63:2f:24:a6:df:24:fe:fb:e6:66:77:42:53:
d8:07:03:16:bf:59:b3:e7:84:38:1c:10:97:40:2c:45:07:71:
f3:b3:fe:e6:3e:7f:65:6d:90:7b:bc:a5:28:d6:4d:1b:a3:02:
8a:b4:e4:35:c7:27:df:4d:57:a6:50:e0:59:86:94:00:c0:ec:
09:e0:45:e0:da:16:74:6a:d8:22:2d:fc:9d:18:f4:fd:49:cd:
b2:ea:7f:4b:04:02:5d:18:a3:a2:8b:f0:97:37:ee:9f:df:5d:
a4:09:3e:6d:fd:ee:0e:e7:8b:98:87:26:b2:60:10:aa:62:a9:
8f:53:4e:9e:a9:eb:ce:a7:30:0f:e0:ae:c5:84:30:04:09:ad:
a6:7b:a6:43:f9:23:8f:81:c4:f3:3b:3d:ae:d7:69:14:8e:e4:
98:fe:60:65:4f:e3:35:b8:f5:4d:f8:0a:7c:ef:67:2f:85:55:
ea:9b:d4:c6:9a:e9:7b:ea:59:eb:79:f3:3c:df:38:dd:9d:cb:
0b:3a:02:69:6e:11:77:90:21:f9:06:ba:6d:89:ce:a7:b0:e3:
39:eb:f5:9a:88:db:7c:1c:62:1a:b8:a0:f6:dc:25:18:5d:4d:
fa:6e:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:13:18 2026 by rpki-client