Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa
File: NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa (raw, json)
Hash identifier: koZQTWGtu/yZU8GbkdRNcGGY7bBAtyvzqtTowhwY4EE=
Subject key identifier: 34:BC:40:02:F3:34:CA:B9:3F:81:A5:BC:51:36:19:96:90:FF:69:25
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 019F1CA4905B7F3B9A447903714266F7619E
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa
Signing time: Wed 01 Jul 2026 07:46:14 +0000
ROA not before: Wed 01 Jul 2026 07:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:c40::/30 maxlen: 30
2a13:c44::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:a4:90:5b:7f:3b:9a:44:79:03:71:42:66:f7:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jul 1 07:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34bc4002f334cab93f81a5bc5136199690ff6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:d5:91:ef:f4:fc:e7:4c:eb:b9:3e:79:d5:
17:8e:e5:94:cd:f0:29:d6:91:9e:e5:fc:9b:e3:3c:
e2:03:54:ce:e9:fc:6b:eb:14:74:0c:23:a3:1a:44:
80:1e:10:63:53:e2:dc:ff:be:a9:79:dc:63:cd:67:
d4:8b:c5:ac:10:87:85:e6:14:0b:b9:29:c0:e1:c1:
56:ac:5a:90:6b:3b:a3:3b:87:b6:2b:8c:4e:45:49:
7c:1c:f5:e4:4f:d7:7e:dc:da:1f:9e:11:b1:cf:d4:
94:1f:40:54:12:6e:11:ac:da:14:96:14:24:b1:96:
e5:e8:fe:a1:fa:dd:5a:05:e3:cf:f2:ac:ae:1a:f8:
13:2d:fc:60:e7:ce:9b:b4:da:09:e9:46:70:27:6c:
6e:24:42:16:a6:d9:ac:7c:f8:6b:f1:f5:d1:ca:76:
35:2a:8a:f6:26:c1:92:03:c1:3d:96:5e:52:ed:94:
2a:5f:b6:33:ad:c3:7c:51:4a:8c:57:10:e6:b6:cc:
5e:50:d5:a8:c0:4d:a5:24:ed:bf:01:2e:d8:5c:ee:
aa:bf:e0:79:64:8f:63:15:63:ad:ca:27:f9:e7:59:
79:68:50:5d:bd:a4:ef:87:9c:79:b6:e0:f0:f8:2b:
3c:15:aa:ac:bf:70:93:d5:4d:d8:7c:09:d7:7e:a9:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BC:40:02:F3:34:CA:B9:3F:81:A5:BC:51:36:19:96:90:FF:69:25
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c40::/29
Signature Algorithm: sha256WithRSAEncryption
77:d0:48:5c:ce:ca:2f:81:f8:72:54:d4:a3:44:6c:85:41:e0:
e5:fa:62:cb:92:c2:b3:f5:e9:28:83:e8:1d:ce:0b:42:7e:d9:
00:0d:ca:f9:4a:e4:5c:5f:fa:73:95:04:65:c3:9e:38:be:c1:
e1:6c:ba:df:67:11:4b:63:ab:11:c2:84:b1:2e:c9:32:bb:25:
70:93:db:87:84:41:e2:6e:80:02:74:15:90:4c:4f:e0:e3:3c:
3c:61:f4:43:8d:98:e5:89:27:c6:b1:4c:48:e9:5e:3e:89:d2:
6f:22:0a:2f:d1:d4:15:5e:39:e0:c8:10:f2:8f:82:a3:79:b1:
81:58:b8:c1:ed:ee:a4:2e:8a:bc:a3:96:ec:c0:5b:93:ab:31:
c0:4a:53:a7:ba:8d:1d:c2:48:48:49:33:40:bd:eb:f1:fc:f7:
4e:e2:b9:fc:ae:25:5a:35:21:5f:7d:3a:82:7a:fd:2b:03:bf:
8f:df:23:36:1e:27:52:7b:8d:2e:ea:30:2a:bc:7f:8d:99:48:
3b:2e:73:44:1f:2a:03:97:59:cc:05:94:99:0a:0f:78:20:73:
01:72:fb:16:1f:de:97:49:d4:5b:78:72:dd:ef:a0:31:68:15:
64:5a:90:ca:7d:f8:d2:51:77:ef:2e:32:3f:2c:4d:db:01:f3:
89:b4:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:33:58 2026 by rpki-client