Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/nHdBW4xZSKMEpDVQ99SEP5FUoMY.roa
File: nHdBW4xZSKMEpDVQ99SEP5FUoMY.roa (raw, json)
Hash identifier: Bdp9RWbggMoS6e7ImTlV2OXqL80EbuxuKKBbdHitDbU=
Subject key identifier: 9C:77:41:5B:8C:59:48:A3:04:A4:35:50:F7:D4:84:3F:91:54:A0:C6
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019CFB95454DD32A59833512FA5E4D15D690
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/nHdBW4xZSKMEpDVQ99SEP5FUoMY.roa
Signing time: Tue 17 Mar 2026 11:36:29 +0000
ROA not before: Tue 17 Mar 2026 11:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11967
IP address blocks: 2a0a:79c0:1301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:95:45:4d:d3:2a:59:83:35:12:fa:5e:4d:15:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Mar 17 11:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c77415b8c5948a304a43550f7d4843f9154a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:71:d5:71:11:f1:05:76:99:60:43:67:01:
00:53:be:7b:eb:16:e5:c5:2a:a4:e7:4c:41:98:94:
09:e0:58:02:fb:ba:20:2f:05:2e:4f:7b:53:a4:f1:
78:3b:2e:c4:a2:09:3f:09:0e:26:25:ff:48:f2:37:
08:c5:98:b9:b2:29:b8:97:10:6e:7a:fa:22:eb:59:
5b:64:c5:bd:17:b9:1f:84:a4:90:51:47:b9:5a:a8:
1e:b1:34:db:06:e0:4c:b4:04:64:68:2b:2a:ea:06:
6e:a4:ec:c6:cb:56:b8:1e:49:6d:12:34:f8:d1:be:
7c:fe:62:c8:21:81:76:1c:f3:93:3f:92:04:cf:73:
b9:ca:d8:2c:64:2e:dc:50:bb:de:2c:44:ba:77:84:
7e:39:9b:4d:22:66:05:92:40:aa:85:dd:a1:41:45:
6c:5e:0e:60:2a:24:c3:85:0a:99:8b:ab:2c:37:af:
ef:48:19:f8:20:82:55:f9:e1:64:20:5b:cb:cb:72:
6c:0b:ba:2a:60:51:a5:1c:7c:03:10:52:57:e9:4e:
cf:bc:3e:17:ff:5b:66:8b:53:47:63:6d:79:e5:8a:
ca:5b:ff:f1:d0:c5:bf:41:70:79:3f:04:b5:76:d5:
bc:63:d3:0b:68:de:71:ac:3a:24:38:18:55:49:fc:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:41:5B:8C:59:48:A3:04:A4:35:50:F7:D4:84:3F:91:54:A0:C6
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/nHdBW4xZSKMEpDVQ99SEP5FUoMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:1301::/48
Signature Algorithm: sha256WithRSAEncryption
c3:55:e5:1c:12:62:a2:05:54:91:d8:a8:8a:f3:0c:2b:91:62:
ad:9c:41:75:04:4a:ca:36:26:34:78:93:70:0e:cc:2c:a6:20:
e0:70:85:d4:44:18:89:e8:6b:81:36:a8:77:e2:26:e8:85:11:
67:0d:67:63:e3:22:5e:1c:d6:f9:cd:0e:fc:18:68:f6:6f:a3:
88:23:a6:f5:38:45:d6:3a:29:7a:4f:81:b4:58:76:2d:b4:ea:
a0:c6:1b:72:72:e3:68:8b:fc:8c:a0:7b:2a:4e:d2:08:be:c5:
08:51:8b:33:f7:43:cd:06:05:e5:13:41:32:7f:8c:e2:40:3f:
c6:eb:5b:90:89:31:e7:85:dd:a9:90:02:88:9a:5c:8f:6e:e4:
6e:e5:06:90:c9:20:ca:74:7b:f8:7c:9f:e2:51:41:0d:3e:e4:
92:52:aa:3b:91:7f:32:db:c7:01:3a:67:f3:a6:95:fe:71:d3:
74:c5:c3:fb:17:25:8b:3a:4b:6d:34:af:b8:68:cd:7a:42:2d:
d6:6f:34:70:63:b3:95:23:88:cc:66:56:e8:0d:32:3e:47:17:
83:a1:6b:ed:65:4c:cf:04:8d:b5:68:a5:b7:52:32:04:1c:37:
95:e0:f5:47:84:85:56:8d:99:b2:2e:49:cd:dc:36:7c:fe:23:
7d:1c:30:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZz7lUVN0ypZgzUS+l5NFdaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjYwMzE3MTEzNjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yzc3NDE1YjhjNTk0OGEzMDRhNDM1NTBmN2Q0ODQzZjkxNTRhMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5px1XER8QV2mWBDZwEAU7576xbl
xSqk50xBmJQJ4FgC+7ogLwUuT3tTpPF4Oy7Eogk/CQ4mJf9I8jcIxZi5sim4lxBu
evoi61lbZMW9F7kfhKSQUUe5WqgesTTbBuBMtARkaCsq6gZupOzGy1a4HkltEjT4
0b58/mLIIYF2HPOTP5IEz3O5ytgsZC7cULveLES6d4R+OZtNImYFkkCqhd2hQUVs
Xg5gKiTDhQqZi6ssN6/vSBn4IIJV+eFkIFvLy3JsC7oqYFGlHHwDEFJX6U7PvD4X
/1tmi1NHY2155YrKW//x0MW/QXB5PwS1dtW8Y9MLaN5xrDokOBhVSfw7RQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJx3QVuMWUijBKQ1UPfUhD+RVKDGMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvbkhkQlc0eFpTS01FcERWUTk5U0VQNUZVb01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgp5wBMB
MA0GCSqGSIb3DQEBCwUAA4IBAQDDVeUcEmKiBVSR2KiK8wwrkWKtnEF1BErKNiY0
eJNwDswspiDgcIXURBiJ6GuBNqh34ibohRFnDWdj4yJeHNb5zQ78GGj2b6OII6b1
OEXWOil6T4G0WHYttOqgxhtycuNoi/yMoHsqTtIIvsUIUYsz90PNBgXlE0Eyf4zi
QD/G61uQiTHnhd2pkAKImlyPbuRu5QaQySDKdHv4fJ/iUUENPuSSUqo7kX8y28cB
OmfzppX+cdN0xcP7FyWLOkttNK+4aM16Qi3WbzRwY7OVI4jMZlboDTI+RxeDoWvt
ZUzPBI21aKW3UjIEHDeV4PVHhIVWjZmyLknN3DZ8/iN9HDDY
-----END CERTIFICATE-----
Generated at Wed Mar 18 04:40:51 2026 by rpki-client