Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/0lt8g8lLpiqYJecZvN6tifhx9DY.roa
File: 0lt8g8lLpiqYJecZvN6tifhx9DY.roa (raw, json)
Hash identifier: 9LiZUeNZozYlcyeaLVshvgJIuuIZXmqCyyFPKg7cXT4=
Subject key identifier: D2:5B:7C:83:C9:4B:A6:2A:98:25:E7:19:BC:DE:AD:89:F8:71:F4:36
Certificate issuer: /CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Certificate serial: 019F2368D012712A73B2092CD587AA95B15B
Authority key identifier: 36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/0lt8g8lLpiqYJecZvN6tifhx9DY.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:2ccc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d0:12:71:2a:73:b2:09:2c:d5:87:aa:95:b1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d25b7c83c94ba62a9825e719bcdead89f871f436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:ee:1c:60:90:f5:b6:22:8d:94:4a:6e:c8:
bf:52:f2:da:62:72:26:76:b5:89:98:f8:5d:1a:b3:
cf:05:e3:0b:42:8d:46:01:6d:c7:30:59:0a:e9:d2:
11:78:a5:e3:88:af:5f:80:1c:26:78:35:07:9e:db:
26:cc:bd:30:57:17:8f:3d:0d:0a:0e:a9:1f:22:38:
8d:df:8f:c0:25:32:aa:71:06:59:26:fe:60:22:ed:
92:6d:f5:37:51:cb:34:12:08:88:70:d9:0c:a3:60:
c9:bb:f4:93:fe:e7:78:af:d7:04:ff:91:36:93:10:
9e:6f:90:d4:a1:83:7c:b7:39:b9:af:7f:8f:64:2e:
84:1e:df:bf:a6:73:28:2d:f9:be:f9:f5:ce:60:95:
3e:13:b7:54:fd:79:63:0f:f5:93:6f:fd:a9:f1:6b:
34:4c:11:10:29:3e:ae:55:7e:8c:36:ef:90:2c:08:
b6:f3:22:c9:2b:55:fb:5b:d9:28:b1:86:a1:a2:57:
92:c2:ef:aa:8b:a1:e1:b6:9d:49:15:ed:04:41:0c:
85:a6:2a:69:aa:bb:db:d6:5f:79:c5:88:f7:23:8b:
c6:bb:e7:88:e7:26:f8:7d:2d:9f:d5:3b:8e:47:a8:
99:5e:e8:ad:79:8c:ef:02:c0:15:86:c6:5d:6d:f2:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:7C:83:C9:4B:A6:2A:98:25:E7:19:BC:DE:AD:89:F8:71:F4:36
X509v3 Authority Key Identifier:
keyid:36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/0lt8g8lLpiqYJecZvN6tifhx9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
57:e6:0b:ae:87:bf:51:c2:a2:cb:e4:61:b8:36:63:78:b1:c9:
76:e7:c4:56:34:94:70:09:1d:cb:b1:6a:33:4f:b5:03:74:27:
a1:a1:8b:16:96:37:96:47:99:48:af:2a:aa:cb:2a:22:07:0f:
4f:4c:8d:16:5e:0b:90:8d:fe:5d:52:f5:4f:5e:04:31:dc:a4:
d7:55:5f:03:76:04:64:21:65:cf:d2:29:1e:bf:5f:b5:ec:1d:
5b:0a:3e:68:70:57:88:10:25:29:59:78:c3:71:52:7f:b1:87:
da:e1:86:41:3f:c3:9f:6e:13:b3:73:13:36:5c:bd:b8:50:04:
6a:68:a3:7b:f5:2c:03:59:8f:50:b2:35:81:bd:4c:72:30:96:
a1:33:88:46:93:e7:f5:3f:97:6c:34:70:b2:dd:91:2b:19:62:
73:02:6e:11:e7:d3:c8:2f:95:96:99:c4:5b:1a:be:f1:5a:17:
a0:5c:5e:78:1c:76:cd:c4:a9:9e:d9:1a:36:c3:91:3b:0d:d1:
08:9c:f6:6e:b1:6d:8a:35:63:91:1e:99:af:32:f2:e5:22:12:
21:6c:21:04:6c:ba:47:d3:0d:e1:f5:34:3f:43:85:e5:97:3c:
bc:4c:3e:52:26:25:b9:7a:e0:40:0f:1c:cd:c9:01:c7:9d:03:
61:d0:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client