Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/NkUUyvl7E5IFTmk2m4mmlVhtUxg.roa
File: NkUUyvl7E5IFTmk2m4mmlVhtUxg.roa (raw, json)
Hash identifier: byU3ctlajeSCymgZWoC888C7lxqYgLVG00fXCn9LR7w=
Subject key identifier: 36:45:14:CA:F9:7B:13:92:05:4E:69:36:9B:89:A6:95:58:6D:53:18
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A13526655E16B638D02989809228927E05
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/NkUUyvl7E5IFTmk2m4mmlVhtUxg.roa
Signing time: Tue 13 Oct 2026 12:04:31 +0000
ROA not before: Tue 13 Oct 2026 12:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8419
IP address blocks: 62.89.128.0/19 maxlen: 19
87.243.192.0/18 maxlen: 18
195.248.96.0/19 maxlen: 19
212.95.224.0/19 maxlen: 19
217.72.160.0/19 maxlen: 19
2001:710::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:26:65:5e:16:b6:38:d0:29:89:80:92:28:92:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Oct 13 12:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=364514caf97b1392054e69369b89a695586d5318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:0a:43:de:b3:cc:aa:d1:e2:dd:78:0c:76:
94:54:10:f0:10:26:ef:6b:2f:2f:7d:93:53:40:33:
44:4e:b4:a8:8c:8e:47:06:40:a0:bb:6a:a7:5a:12:
ef:7b:99:0b:b9:3a:5b:ce:db:f4:91:b3:06:b9:bd:
54:60:66:48:53:a0:99:17:dd:3c:df:e6:bd:19:f3:
23:d0:77:1e:27:02:d9:f9:b6:77:ab:f6:93:92:8b:
36:bf:72:df:cf:91:31:10:1b:de:21:67:d0:ea:5c:
64:ce:2c:ba:20:19:8c:49:cb:2a:c9:6d:91:84:9b:
08:d4:14:56:86:b4:d9:e1:2b:70:e2:a2:80:f3:6e:
28:e8:53:ab:61:58:ef:cf:df:c4:e2:27:18:38:d0:
e4:f1:60:8c:4f:14:59:70:f2:3e:a6:21:2e:36:70:
d4:17:be:94:ee:46:58:12:71:af:f3:91:ac:a1:ea:
fb:fc:2b:30:c7:11:c9:21:44:66:79:ba:d9:40:12:
d6:81:9f:bb:9d:4e:0b:15:d8:73:e2:fd:8e:d5:a8:
25:42:9c:31:d0:02:ed:eb:61:da:16:0b:47:69:9a:
13:2a:9c:ce:17:dd:38:ee:84:43:fc:26:6c:4f:51:
7b:2a:61:7d:c2:03:85:29:09:a9:a3:5c:30:0c:f3:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:14:CA:F9:7B:13:92:05:4E:69:36:9B:89:A6:95:58:6D:53:18
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/NkUUyvl7E5IFTmk2m4mmlVhtUxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.128.0/19
87.243.192.0/18
195.248.96.0/19
212.95.224.0/19
217.72.160.0/19
IPv6:
2001:710::/32
Signature Algorithm: sha256WithRSAEncryption
4e:2c:36:42:c1:90:35:28:f5:98:26:fb:48:48:4e:bb:65:e2:
73:52:9a:14:f2:61:e8:05:f5:1b:0a:c8:5f:0a:19:2d:20:5e:
4a:42:9d:4d:9a:1d:96:27:da:ed:61:e4:08:04:1f:d9:e6:68:
5d:32:c5:55:5c:9b:a6:4c:0f:a5:54:8f:d1:e2:23:87:c2:b3:
4c:fe:00:56:4b:43:3d:4a:10:10:da:8f:1b:06:4c:d9:67:db:
bb:21:43:7e:e6:86:60:31:95:b1:fc:ed:95:df:54:2f:15:9f:
82:81:bb:f6:ba:8e:e7:a7:ca:1e:58:69:3c:0f:4d:51:34:2e:
fb:04:51:9b:1b:21:94:e0:b0:d3:f9:8d:fa:4a:a9:ee:90:fd:
7a:c7:4c:0b:de:cb:ba:1e:15:08:ae:cc:8c:15:6e:9e:78:fa:
fb:96:4f:34:8a:4c:1e:e3:71:29:ae:e4:65:5e:cb:60:da:26:
2a:8c:27:d2:d9:c6:75:dd:41:51:dd:11:df:7a:d8:ac:27:29:
06:26:37:84:04:cc:24:20:3a:fd:45:e3:13:bf:a0:6f:a1:0e:
7b:b4:ff:55:b1:e2:d8:7f:4b:7a:35:49:ee:97:ca:f5:89:f5:
40:93:66:32:ed:d5:57:be:0d:89:01:90:46:cd:5b:8c:b6:95:
fb:a2:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:31 2026 by rpki-client