Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/nHh5BULTK9Fe232Ft9flIdW1YN8.roa
File: nHh5BULTK9Fe232Ft9flIdW1YN8.roa (raw, json)
Hash identifier: dVSRnMowtL3hyATtH9ZaMFSKGuz1y2mL8iQx+/UymOg=
Subject key identifier: 9C:78:79:05:42:D3:2B:D1:5E:DB:7D:85:B7:D7:E5:21:D5:B5:60:DF
Certificate issuer: /CN=1b8777fe98e6e3dc5eb40313d0783f0b54ad29bd
Certificate serial: 01A0F714DEA2F084C437677A36B66C87D284
Authority key identifier: 1B:87:77:FE:98:E6:E3:DC:5E:B4:03:13:D0:78:3F:0B:54:AD:29:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G4d3_pjm49xetAMT0Hg_C1StKb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/nHh5BULTK9Fe232Ft9flIdW1YN8.roa
Signing time: Thu 01 Oct 2026 10:48:55 +0000
ROA not before: Thu 01 Oct 2026 10:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208920
IP address blocks: 2a07:5f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/G4d3_pjm49xetAMT0Hg_C1StKb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/G4d3_pjm49xetAMT0Hg_C1StKb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G4d3_pjm49xetAMT0Hg_C1StKb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:14:de:a2:f0:84:c4:37:67:7a:36:b6:6c:87:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b8777fe98e6e3dc5eb40313d0783f0b54ad29bd
Validity
Not Before: Oct 1 10:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c78790542d32bd15edb7d85b7d7e521d5b560df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:45:dd:1a:72:17:95:dd:35:91:74:66:72:
ce:78:5e:ec:d1:c9:c9:c5:d4:5a:56:e8:62:ce:a2:
49:59:a6:98:e3:58:68:44:8f:fe:29:b5:50:f2:55:
68:1e:67:0f:cf:e2:85:b5:83:5b:9c:b6:95:82:e9:
f8:0b:17:20:40:84:56:f3:73:50:05:4c:cf:68:dc:
0a:0d:0e:34:82:38:1a:ac:7f:e5:b0:b3:b8:03:8e:
f0:58:2c:ea:90:5c:71:e2:d3:b9:24:c4:09:84:ba:
67:9d:17:ff:59:21:8a:8b:4a:46:dd:05:5f:54:40:
ce:37:56:10:ed:a2:93:e3:3f:b3:96:fb:4a:3c:e6:
f0:2a:37:cb:6f:b5:95:c2:f0:65:5d:b2:52:98:46:
cc:19:70:b1:ef:12:1c:9c:d7:72:71:cd:14:60:87:
80:e1:05:8f:a1:36:d5:73:98:e6:a5:15:44:10:9f:
c3:68:fa:6f:4a:fb:ed:40:de:9b:eb:f4:fc:1d:7a:
b0:4d:40:a8:9b:89:de:ef:a4:d7:d3:75:87:3c:bf:
e9:d2:28:48:36:86:e8:92:6b:18:91:00:d7:57:a2:
03:21:3c:43:5f:4e:06:62:ae:c3:db:9c:85:db:78:
dd:25:25:9a:f9:21:98:d0:6c:f2:f2:cf:24:b5:f8:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:79:05:42:D3:2B:D1:5E:DB:7D:85:B7:D7:E5:21:D5:B5:60:DF
X509v3 Authority Key Identifier:
keyid:1B:87:77:FE:98:E6:E3:DC:5E:B4:03:13:D0:78:3F:0B:54:AD:29:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4d3_pjm49xetAMT0Hg_C1StKb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/nHh5BULTK9Fe232Ft9flIdW1YN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/G4d3_pjm49xetAMT0Hg_C1StKb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:d0:c6:84:e2:87:02:f5:ca:db:d4:44:b1:91:f3:5d:5b:9f:
71:9c:0c:cb:74:d1:12:b7:ac:83:5f:e7:aa:41:bf:95:52:56:
09:bb:7e:23:4f:ac:8e:f8:11:a2:e4:f9:1e:09:8c:70:f4:e6:
23:6d:7b:77:3a:23:9e:5c:7b:6d:98:6b:75:82:b7:bf:cf:5d:
7a:84:73:30:9c:bf:2b:0f:3f:3a:2a:89:cd:78:5e:89:bc:93:
af:c8:4c:82:1b:65:be:06:c3:f5:86:ae:85:7b:ff:85:e9:00:
95:12:62:f6:4e:6c:6b:8c:ad:df:4e:08:16:7e:61:cc:0a:9b:
0e:70:14:fc:0c:c5:7f:f3:97:8b:a8:4d:f6:c5:8b:9c:4e:a5:
4d:0c:81:8f:c5:a5:bd:2b:20:2f:e1:ac:9d:83:df:6f:22:54:
b2:8f:73:b3:68:15:f8:e9:88:29:e7:c0:0e:5a:34:c6:f3:19:
81:86:e1:e1:f4:b9:6e:dd:d3:f8:19:6f:cc:db:13:ba:cc:4d:
bf:c8:50:60:8e:a9:00:62:72:f8:19:9b:a5:ad:1d:02:5a:3f:
8c:04:8d:de:fb:54:6d:14:2f:b4:5d:f3:29:63:37:4a:7f:d3:
c3:53:63:2c:58:02:17:c7:60:25:75:75:23:9d:2e:30:2d:04:
f0:05:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:59:46 2026 by rpki-client