Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/NybaecP9BfQQL0WJhzHkc-8rYgY.roa
File: NybaecP9BfQQL0WJhzHkc-8rYgY.roa (raw, json)
Hash identifier: gW2thXluA7zwV2igYS/50lCxFzJ3ympAkH/mIHLC8u4=
Subject key identifier: 37:26:DA:79:C3:FD:05:F4:10:2F:45:89:87:31:E4:73:EF:2B:62:06
Certificate issuer: /CN=1f28cf548ff1df110f82269526e62938f3f57263
Certificate serial: 019E34535403E5D050B81DBE6931088DF2F7
Authority key identifier: 1F:28:CF:54:8F:F1:DF:11:0F:82:26:95:26:E6:29:38:F3:F5:72:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyjPVI_x3xEPgiaVJuYpOPP1cmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/NybaecP9BfQQL0WJhzHkc-8rYgY.roa
Signing time: Sun 17 May 2026 05:05:36 +0000
ROA not before: Sun 17 May 2026 05:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201251
IP address blocks: 209.131.118.0/24 maxlen: 24
2a0e:a1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyjPVI_x3xEPgiaVJuYpOPP1cmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:53:54:03:e5:d0:50:b8:1d:be:69:31:08:8d:f2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f28cf548ff1df110f82269526e62938f3f57263
Validity
Not Before: May 17 05:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3726da79c3fd05f4102f45898731e473ef2b6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:52:d9:18:52:52:ef:8d:07:3f:ae:5c:1c:
89:6f:2d:3a:b7:b1:59:4a:0c:dd:59:b0:d5:0d:68:
f8:9a:aa:c2:9e:f6:e9:3b:ad:09:ae:65:9b:47:40:
bf:00:4d:74:64:3b:a0:e8:37:39:ae:23:b2:97:fe:
3b:03:9a:ed:c7:ec:bd:d8:0f:da:9b:da:80:14:bb:
ca:76:b6:37:9f:a3:5a:30:00:44:eb:46:3f:11:db:
aa:74:bd:c3:11:5b:c1:d1:ea:2a:17:58:85:1b:8d:
21:59:d1:ff:66:20:fa:40:78:17:44:75:96:f4:45:
04:2c:ad:f8:a9:9b:c9:2c:40:6c:1f:a6:24:58:ee:
e1:7b:c0:6d:f6:d7:29:b0:a2:4c:be:fb:bc:e3:65:
cc:11:2d:11:e0:eb:a3:6f:a9:07:f9:ab:4e:f0:d4:
4f:d0:25:48:33:39:c4:40:f9:e2:92:dc:9a:32:4e:
9c:59:b4:e9:31:57:d8:93:b3:29:1e:a3:32:53:e5:
9e:0b:68:f4:62:dc:63:bc:95:bf:b9:e2:84:cf:e6:
ff:0a:37:9a:9d:f6:fa:26:7c:10:59:e4:c2:69:50:
94:95:1e:d3:27:83:24:50:8d:ee:d5:76:65:96:27:
06:9a:8c:3a:eb:5c:e5:18:24:40:8b:be:84:9a:01:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:DA:79:C3:FD:05:F4:10:2F:45:89:87:31:E4:73:EF:2B:62:06
X509v3 Authority Key Identifier:
keyid:1F:28:CF:54:8F:F1:DF:11:0F:82:26:95:26:E6:29:38:F3:F5:72:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyjPVI_x3xEPgiaVJuYpOPP1cmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/NybaecP9BfQQL0WJhzHkc-8rYgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.131.118.0/24
IPv6:
2a0e:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:ae:82:33:49:ab:dc:ed:32:a1:91:63:16:e4:ed:b7:52:49:
d8:f7:86:92:90:96:58:e2:e7:a7:1d:65:ff:1e:d5:da:d2:2d:
cc:97:36:52:c7:1a:4b:f5:03:82:a0:2d:81:2d:b2:c4:95:47:
7a:7b:0d:27:b3:33:d7:55:7e:8e:49:98:62:25:de:a1:06:71:
48:d7:62:ef:8e:77:d3:de:17:3e:ba:0c:b6:d5:db:95:44:ed:
e3:11:cc:ed:6b:3b:a3:93:20:52:94:35:c6:98:c4:ae:56:c7:
cf:cd:cb:e0:ee:eb:8c:66:46:f5:75:0e:e1:05:46:f1:a7:5d:
76:7a:a4:55:e4:6a:88:b5:70:08:1c:f4:b8:b1:83:ee:f5:a1:
71:e0:bc:3f:50:46:14:b8:7e:6d:14:b5:ed:d2:05:4c:26:0e:
28:4e:05:c3:05:80:1e:87:c6:10:e8:c3:24:42:2d:ce:2c:4c:
99:34:d3:ae:9d:6b:51:ee:d0:ca:6f:d7:a1:1a:92:4f:70:53:
ea:91:ed:ed:50:65:c9:2e:41:6c:af:da:f7:a3:1e:7b:90:68:
36:c9:ef:10:c5:72:1d:ea:db:d4:db:1b:62:0f:e6:5c:46:f8:
dd:b5:59:3d:0a:07:54:22:40:db:e7:71:a0:4f:c0:1e:a9:99:
49:ce:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:40:32 2026 by rpki-client