Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/0iZfFzG8zQcbIj4oUYolRYWcr6Q.roa
File: 0iZfFzG8zQcbIj4oUYolRYWcr6Q.roa (raw, json)
Hash identifier: TRs816FHSgafSehZlcBSAOl0JI7Ecr8cWWJS1nrwNuY=
Subject key identifier: D2:26:5F:17:31:BC:CD:07:1B:22:3E:28:51:8A:25:45:85:9C:AF:A4
Certificate issuer: /CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Certificate serial: 019F2368D1A79A88DF9A4EE6CB5B56083C87
Authority key identifier: 36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/0iZfFzG8zQcbIj4oUYolRYWcr6Q.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:2ccc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d1:a7:9a:88:df:9a:4e:e6:cb:5b:56:08:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2265f1731bccd071b223e28518a2545859cafa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:33:30:cc:af:d6:44:eb:7b:d8:e8:6b:71:
34:a6:46:60:c3:37:cb:42:2d:c4:a0:f7:64:23:53:
39:96:30:5f:56:d2:20:e2:17:f7:2d:3b:0e:48:6f:
b3:f8:3e:8e:5d:b5:8c:3b:8a:23:ca:93:b0:6d:9a:
63:ad:d3:95:cf:54:e0:a2:3d:95:b7:85:74:c0:87:
18:c3:80:95:54:42:8d:82:f9:47:9d:65:d8:f4:3e:
9c:6a:47:bf:7a:fb:61:5b:77:bd:10:d0:a7:29:5e:
a3:f7:7f:62:2a:2e:ad:41:95:e2:58:f7:0c:de:52:
0f:13:1c:19:69:67:81:36:fb:26:73:9c:70:57:e6:
cf:da:49:27:11:a2:ad:7d:55:b5:78:8a:52:33:b9:
a2:7e:c2:e8:8e:39:d2:fb:00:8e:7c:ca:64:83:2c:
b1:0c:0e:7f:53:80:ca:c5:79:f8:32:a8:37:27:7c:
48:c4:32:4e:7e:ad:e9:e1:76:c8:fc:73:a2:2e:2c:
71:81:d7:e8:55:24:63:40:49:04:24:20:dd:6a:d3:
9d:df:72:59:53:37:89:a3:ed:67:bd:b2:7c:d0:a1:
91:4d:5a:27:02:1c:a2:21:af:6f:5d:c6:0b:99:25:
ef:5b:6f:2e:68:3f:71:ef:77:1f:c0:a6:a6:8d:cf:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:5F:17:31:BC:CD:07:1B:22:3E:28:51:8A:25:45:85:9C:AF:A4
X509v3 Authority Key Identifier:
keyid:36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/0iZfFzG8zQcbIj4oUYolRYWcr6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
0e:d2:ad:4a:f6:6e:bd:02:ea:70:55:e6:19:79:bc:8d:58:62:
9b:34:13:74:63:2b:b2:7a:38:e0:c7:2e:2f:29:54:f2:c3:6d:
3d:26:a1:97:ed:a4:7c:3d:8f:75:d1:1c:f5:6d:9b:d9:1e:f0:
2d:ba:07:c7:95:04:cb:12:ff:47:c2:94:bb:de:d5:81:2e:1d:
05:47:cb:94:87:96:3d:76:c4:aa:17:92:3d:08:ee:d5:fd:a2:
55:cb:04:b6:52:d3:fb:ad:4c:1b:c6:2b:af:6f:6d:f5:3c:ee:
9b:d0:31:78:47:91:2b:b1:4c:ef:f7:9a:ad:fe:56:41:e8:7d:
b1:a1:f5:66:21:22:27:76:5c:28:4c:e8:15:c1:15:b4:35:54:
d3:8a:5d:02:6a:f2:39:e0:d2:30:3d:e9:94:cb:6f:40:9d:02:
07:65:12:3c:b9:bf:21:61:7d:e0:a2:6c:d7:5c:09:9b:56:8a:
20:df:f3:53:2c:b5:a8:2e:eb:c8:7d:d4:45:c2:c8:22:26:32:
dc:4a:58:a5:3a:f5:6e:fa:5f:f8:1f:88:b0:ec:b0:3d:3b:22:
8f:15:9d:f7:82:6c:57:82:77:1d:fc:eb:15:73:52:54:bb:d0:
b6:64:5f:b9:69:8e:71:c0:ad:8d:16:75:72:31:ce:4e:a0:20:
9e:af:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:19 2026 by rpki-client