Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ny3Gn-sn_JZpfFLqwg5zmdCypB4.roa
File: ny3Gn-sn_JZpfFLqwg5zmdCypB4.roa (raw, json)
Hash identifier: OKFDl0SxEZmzhxf4ffg72UM79YUtPqJ2HxTdvnDqACY=
Subject key identifier: 9F:2D:C6:9F:EB:27:FC:96:69:7C:52:EA:C2:0E:73:99:D0:B2:A4:1E
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0BEBE0E2D19397964E50F3E6460928236
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ny3Gn-sn_JZpfFLqwg5zmdCypB4.roa
Signing time: Sun 20 Sep 2026 12:15:21 +0000
ROA not before: Sun 20 Sep 2026 12:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218995
IP address blocks: 2a10:fa81:1a01::/48 maxlen: 48
2a10:fa81:1a02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:be:0e:2d:19:39:79:64:e5:0f:3e:64:60:92:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 20 12:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f2dc69feb27fc96697c52eac20e7399d0b2a41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:fb:84:a2:8d:27:49:29:3f:db:8f:dc:9d:
d0:35:68:86:ef:76:8f:69:f2:57:7a:f6:e3:58:db:
45:24:dd:b7:83:8c:ff:81:ed:8b:ee:c8:3e:a1:6e:
18:1b:38:7d:01:21:2a:ba:a7:3e:f2:91:e6:2c:00:
7c:f5:66:c9:95:af:98:44:48:ed:d5:2a:89:1f:0a:
af:2a:5c:7b:2b:9c:64:9a:5e:4b:25:81:f9:81:a0:
09:72:98:da:18:16:f2:e8:e4:2e:90:c7:fe:47:e0:
7b:eb:f7:4a:03:71:35:0d:12:7d:89:27:a5:d8:f2:
35:d0:32:e6:ca:95:b6:7b:e4:ae:0b:fd:19:83:a2:
a7:49:47:ed:9e:24:8a:a4:62:ee:0c:25:41:72:0e:
3f:9a:69:e6:78:16:12:d6:92:5f:7d:2a:f0:bb:ee:
9e:16:07:67:0f:86:5b:c1:9d:b7:ca:9a:89:22:ee:
fe:6e:bc:04:61:b9:1e:42:64:c2:bc:66:97:32:b9:
0e:c7:72:2e:5f:91:b1:fc:c2:2c:3e:82:9e:13:e8:
76:21:72:2b:cc:29:dc:dc:8e:a1:5e:3c:f6:99:1e:
32:8d:7e:93:b9:01:99:3f:d2:6f:c5:51:77:00:8c:
ab:fa:44:9d:a4:73:7b:1e:b6:94:06:a5:7e:a2:b0:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:C6:9F:EB:27:FC:96:69:7C:52:EA:C2:0E:73:99:D0:B2:A4:1E
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ny3Gn-sn_JZpfFLqwg5zmdCypB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1a01::-2a10:fa81:1a02:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:7c:7a:b6:9b:70:a8:0f:18:21:4f:d3:65:c8:55:15:da:f7:
81:15:77:8f:f2:37:40:36:ab:db:4a:91:e7:4c:b7:63:d5:9a:
ef:93:67:2d:fd:71:4f:38:99:56:55:c3:c1:86:de:70:6d:f4:
98:f9:39:b4:4a:90:43:e7:06:47:38:ad:42:92:7f:43:b6:13:
1a:9d:9a:be:97:39:c9:a1:3a:5a:01:c1:30:10:97:5b:03:9a:
17:b4:87:e1:93:b0:10:4e:e0:bc:78:e7:d3:17:fe:50:c6:11:
db:4b:cb:33:37:f0:ea:12:af:7a:75:79:63:7b:24:16:ff:3a:
89:57:8e:53:9a:00:a1:1c:ef:d7:3d:04:f3:25:b4:32:f5:9a:
3b:b9:30:1d:17:52:d6:4b:f2:98:88:36:96:00:04:3a:c9:fc:
6a:ab:ca:fb:eb:8c:c7:20:91:8d:b5:c0:dd:46:e7:46:f7:6d:
e0:1b:f5:d6:7a:e9:bd:c2:8d:9c:2e:29:9f:1d:19:a2:50:88:
b5:a0:7c:df:a9:a0:e1:6c:08:2f:f9:68:b4:cd:64:26:1d:1f:
2b:29:c0:52:d0:ac:48:ae:8b:94:62:8d:43:5d:72:f5:28:f6:
b0:d2:51:33:9e:e1:f0:6a:7c:32:33:f0:73:74:06:e3:bd:0e:
98:b7:f4:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:09:36 2026 by rpki-client