Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NDiHxM6cBDe47KWzW-Fjwk4Ks6w.roa
File: NDiHxM6cBDe47KWzW-Fjwk4Ks6w.roa (raw, json)
Hash identifier: WcyliMbeaElxpNj1IGqieMWD0pfCkYQ3NCwdJp01pfY=
Subject key identifier: 34:38:87:C4:CE:9C:04:37:B8:EC:A5:B3:5B:E1:63:C2:4E:0A:B3:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A09168EDE2E795B40A531ADB2786372FDA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NDiHxM6cBDe47KWzW-Fjwk4Ks6w.roa
Signing time: Fri 11 Sep 2026 16:59:27 +0000
ROA not before: Fri 11 Sep 2026 16:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212504
IP address blocks: 2a0a:2d06:101::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0f:1584:1312::/48 maxlen: 48
2a0f:e202:acab::/48 maxlen: 48
2a0f:e847:1312::/48 maxlen: 48
2a13:18c6:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:68:ed:e2:e7:95:b4:0a:53:1a:db:27:86:37:2f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 11 16:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=343887c4ce9c0437b8eca5b35be163c24e0ab3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:99:23:58:44:a1:8b:fa:2d:fe:7b:8f:0d:
cf:c1:bf:99:6b:57:e5:9d:77:59:87:86:a7:86:07:
da:4c:98:86:f4:ea:a8:0d:ed:79:b8:70:ae:18:0e:
f7:e7:cc:b7:a7:2f:d7:cc:76:b8:87:85:d4:63:27:
75:f1:e2:e7:52:d5:7a:6b:78:07:c5:c5:3e:55:18:
88:a8:2b:9a:46:b0:3d:d6:0b:2b:51:9f:f9:ab:07:
6b:02:4e:a8:fe:a6:48:08:2b:8b:1f:48:a7:b2:4c:
a5:d1:16:04:63:7f:c8:04:8a:a7:16:f2:1d:11:d9:
b7:4f:e0:54:14:17:13:7a:46:10:a9:7f:93:3e:28:
a1:91:fb:dd:8e:a9:10:96:27:42:2d:b3:8a:c1:41:
a3:f8:28:67:27:f5:c1:8c:16:6e:18:27:0f:66:56:
40:a9:0e:ef:79:f4:5b:9e:fe:50:09:90:99:c9:d2:
63:24:71:a0:ed:84:64:c2:ff:88:74:44:e4:75:cb:
1f:59:40:70:0f:bb:62:ab:80:9b:69:a5:fc:e1:2d:
db:bf:dc:03:24:ec:f3:b1:54:69:d4:67:21:ac:12:
29:23:98:ab:d8:6f:b4:db:33:1a:c2:e7:f6:77:23:
7e:c0:05:2f:7b:ce:1b:62:98:f6:ab:56:b7:00:b3:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:87:C4:CE:9C:04:37:B8:EC:A5:B3:5B:E1:63:C2:4E:0A:B3:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NDiHxM6cBDe47KWzW-Fjwk4Ks6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:101::/48
2a0e:1a83:66::/48
2a0f:1584:1312::/48
2a0f:e202:acab::/48
2a0f:e847:1312::/48
2a13:18c6:11::/48
Signature Algorithm: sha256WithRSAEncryption
9b:29:01:b2:66:57:ca:6c:09:24:17:b8:30:9e:50:8c:33:e2:
4a:e2:85:24:b4:16:9c:78:2f:ab:1c:46:f4:8a:3c:57:74:fb:
b7:f4:59:d4:68:76:2e:10:22:a8:d0:c4:c5:d9:40:71:84:2b:
fe:ec:ac:e2:d7:a9:51:9c:4a:6c:e8:af:3d:a5:0c:73:b0:f6:
2a:f7:3c:72:a6:57:67:3d:46:9c:93:52:28:68:07:22:16:2c:
83:05:3a:60:f2:9f:00:56:89:c1:d3:0b:05:f4:37:dc:5f:31:
40:51:5b:c9:fb:62:5e:a2:b6:47:8c:bf:8a:d1:a3:e3:29:55:
79:d5:03:ee:30:64:e8:c8:e6:39:53:aa:68:f4:d9:42:76:ee:
cd:cf:fa:3e:fc:b2:36:0c:03:1c:69:0e:ad:1a:e5:5e:28:88:
cd:70:7d:75:99:50:8e:3d:81:f1:06:92:1a:d7:47:87:26:52:
ff:ae:cd:5f:f1:36:6b:fe:18:28:77:f0:40:27:0b:9c:ee:54:
c9:3c:c1:ab:23:28:90:e1:2d:a3:34:df:e2:28:f8:9d:71:bf:
f2:f2:4f:2c:04:1a:c0:a5:f0:77:8f:5c:3e:19:82:c2:af:09:
01:aa:44:f4:cd:77:d6:fc:61:f8:79:7e:83:35:50:bc:f8:eb:
2c:55:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:08:49 2026 by rpki-client