Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NqpDiEreKKo_aRwb6lg4HoJqixM.roa
File: NqpDiEreKKo_aRwb6lg4HoJqixM.roa (raw, json)
Hash identifier: ewsOmsechJ1LLharl3tMDJi5wotFlFEn1xIn9JQAJsQ=
Subject key identifier: 36:AA:43:88:4A:DE:28:AA:3F:69:1C:1B:EA:58:38:1E:82:6A:8B:13
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01A163DE6AEBB0A66EB291B1D72A7D7177D3
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NqpDiEreKKo_aRwb6lg4HoJqixM.roa
Signing time: Thu 22 Oct 2026 13:48:03 +0000
ROA not before: Thu 22 Oct 2026 13:48:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15739
IP address blocks: 2a0f:fd01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:de:6a:eb:b0:a6:6e:b2:91:b1:d7:2a:7d:71:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 22 13:48:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36aa43884ade28aa3f691c1bea58381e826a8b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:1d:ec:26:de:e7:74:f2:72:37:cb:84:43:
31:db:6c:07:f0:c2:f1:4b:6f:94:d0:17:3c:0f:50:
8f:a8:66:54:42:44:e8:5f:8d:1a:89:4b:ed:2b:75:
60:78:f8:26:55:4f:87:46:e1:a1:98:76:8b:0c:55:
da:b9:04:b8:74:23:47:94:1a:31:a4:0b:1c:a0:00:
1e:55:6c:1b:a1:f0:5c:44:20:7f:03:76:07:a4:50:
7a:d9:45:3b:eb:7f:d4:cf:c4:9c:e4:7e:5f:dc:3c:
26:9b:a7:fc:cd:06:1e:b8:98:57:07:31:db:87:2d:
32:7d:7e:45:48:25:d8:d5:a6:6a:9a:ae:13:e7:86:
11:9f:ca:96:11:46:5c:8f:57:09:a0:dc:bb:1e:a7:
c1:37:93:c3:31:4d:16:8c:08:df:8f:1e:91:7d:a0:
2a:d9:53:2e:63:6d:c7:d9:73:fb:c6:25:4f:ea:05:
5e:fd:90:8d:1a:b4:b3:67:27:e7:32:64:73:06:19:
17:fd:a3:a5:a7:37:35:c0:21:90:f6:62:69:5c:13:
51:78:f9:43:e3:ec:2c:50:3d:9c:ab:ce:a4:23:c0:
10:db:45:ef:e3:e3:b5:cb:cc:63:ea:50:85:5e:c5:
9a:1d:a6:ce:17:c5:57:e5:b4:0a:d8:7e:91:31:84:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:43:88:4A:DE:28:AA:3F:69:1C:1B:EA:58:38:1E:82:6A:8B:13
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NqpDiEreKKo_aRwb6lg4HoJqixM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:fd01::/32
Signature Algorithm: sha256WithRSAEncryption
58:5f:de:49:44:85:5c:00:3a:3e:3e:ab:b2:a2:9d:ca:18:fe:
4d:0a:cf:af:1c:66:9d:ce:e7:87:89:93:e4:e3:be:1e:0e:6a:
85:25:21:fd:2b:98:8a:37:02:e5:28:bc:7b:53:e9:48:a1:cd:
6b:10:87:cf:79:f6:90:50:d8:64:6d:69:04:a7:7e:19:16:29:
f1:b2:ab:38:92:82:68:86:22:e6:ae:0c:42:16:b4:2b:33:72:
a7:cc:24:f7:9e:c8:2a:4d:cc:1d:ed:67:7f:e6:25:06:11:76:
e4:3a:a5:d9:cb:45:46:36:49:de:9c:5a:a1:f1:b0:9a:64:21:
d7:ea:29:99:b9:7c:86:a0:fb:66:c6:84:a1:c9:44:32:b1:40:
31:3e:3a:f6:93:86:b4:1a:8a:9c:24:97:7c:6a:ed:38:63:6a:
16:c6:ed:28:3d:aa:3a:fe:75:86:ca:f0:c9:78:01:18:c8:65:
e3:3a:0b:43:52:25:a4:02:23:14:0a:9c:21:96:78:fe:28:3f:
0a:5c:69:bd:fb:cf:d9:ae:4c:6c:e2:88:82:c5:d0:6e:fc:d2:
01:d9:1f:15:06:b8:6e:b4:d2:04:39:5f:42:96:87:25:26:41:
c9:65:5f:13:1e:cf:a4:a4:69:fe:8d:e7:e5:dd:2d:f8:bd:3b:
66:bf:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:48 2026 by rpki-client