Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/NfNAqOER9wuwQxKBNjji8NI0Rzg.roa
File: NfNAqOER9wuwQxKBNjji8NI0Rzg.roa (raw, json)
Hash identifier: 2u3dViZZEapET44foaIhQWMMbpM15mq1lfjKgtwOpEg=
Subject key identifier: 35:F3:40:A8:E1:11:F7:0B:B0:43:12:81:36:38:E2:F0:D2:34:47:38
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01993409FBC4F91CE0A6BBD7D7D0E59518AE
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/NfNAqOER9wuwQxKBNjji8NI0Rzg.roa
Signing time: Wed 10 Sep 2025 14:31:33 +0000
ROA not before: Wed 10 Sep 2025 14:31:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211061
IP address blocks: 2a11:2801:4824::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:09:fb:c4:f9:1c:e0:a6:bb:d7:d7:d0:e5:95:18:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Sep 10 14:31:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35f340a8e111f70bb04312813638e2f0d2344738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:5e:d1:fb:a7:56:66:6a:91:da:76:09:9e:
74:91:ef:bc:8a:0c:e8:80:46:9f:22:19:6f:64:37:
65:5a:e4:7b:25:ac:0c:52:08:44:4e:ac:1a:dc:73:
8c:27:e8:2b:85:05:10:96:f3:c3:77:3d:37:ca:69:
4c:ea:8e:e8:26:a0:f7:65:b9:2b:84:0e:2f:ae:14:
e2:58:ae:5f:f0:b8:56:98:eb:18:1c:f8:5e:84:79:
a8:a7:43:e9:8e:8b:1a:12:6f:f0:e2:b9:1b:f3:2c:
dc:21:00:13:8d:b8:5a:f1:70:a6:29:71:07:25:66:
c3:24:49:38:39:6b:f6:de:e9:49:b6:7d:56:7f:66:
3b:87:e5:30:cd:99:5e:63:23:6e:a9:fc:7b:9f:a3:
95:ce:a3:2c:8f:5f:37:87:43:a2:d8:6f:8e:dc:e0:
24:fb:14:01:86:64:71:12:8a:cb:84:e4:78:85:b1:
f2:5a:97:6f:6f:35:f8:08:7f:53:8e:49:6c:1e:94:
71:ae:91:9e:2d:04:23:36:ab:98:ad:40:35:45:9b:
f7:e5:c1:17:73:a6:c6:4c:3c:1f:a4:fa:e1:77:e4:
d9:e5:8f:10:45:7b:77:68:22:84:36:ab:7b:66:ad:
7a:f1:dc:89:99:df:19:04:58:b7:7a:f6:a5:cd:d4:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:40:A8:E1:11:F7:0B:B0:43:12:81:36:38:E2:F0:D2:34:47:38
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/NfNAqOER9wuwQxKBNjji8NI0Rzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2801:4824::/48
Signature Algorithm: sha256WithRSAEncryption
63:e2:00:58:b3:34:d6:27:f3:82:67:46:06:42:c4:8f:29:e9:
fb:e5:24:46:90:78:cb:00:3e:80:d9:e8:2d:8c:f0:a4:32:c1:
ba:1f:a0:63:51:9f:7f:99:6f:7e:ed:91:70:ff:e9:89:5e:9a:
d2:a2:40:c8:a0:73:de:3b:55:da:ba:42:3c:65:e3:58:b5:e9:
f3:38:f1:85:68:f5:7e:1a:60:cd:ba:c8:66:48:7c:49:96:b1:
95:87:fe:66:3f:38:0c:74:1d:e5:18:0e:53:d8:9e:18:e1:b6:
00:3b:d2:fe:62:4a:47:eb:a8:43:75:64:f9:59:01:21:3a:aa:
a3:c1:3f:7d:c7:0a:b3:31:ab:fa:13:ba:58:4b:75:2e:9c:e2:
fc:8b:ce:c5:13:68:c7:2b:b7:8b:29:03:75:25:d5:5f:33:44:
c1:97:5c:fa:0e:1b:65:99:4b:a8:50:f5:36:c8:5a:26:ea:55:
46:af:b6:eb:e6:10:44:92:05:63:16:65:bb:c9:92:7f:d2:cd:
b5:07:cc:27:4c:86:bf:6b:74:b1:f7:e6:76:8e:ab:1b:a4:7b:
68:11:fa:69:8a:b2:25:77:27:e0:f0:dc:6c:fd:ab:b7:dd:d2:
d2:48:f5:f3:a9:ec:42:b9:66:cb:03:d9:eb:22:bf:62:f6:71:
d3:17:26:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZk0CfvE+RzgprvX19DllRiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjUwOTEwMTQzMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWYzNDBhOGUxMTFmNzBiYjA0MzEyODEzNjM4ZTJmMGQyMzQ0NzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHNe0funVmZqkdp2CZ50ke+8igzo
gEafIhlvZDdlWuR7JawMUghETqwa3HOMJ+grhQUQlvPDdz03ymlM6o7oJqD3Zbkr
hA4vrhTiWK5f8LhWmOsYHPhehHmop0PpjosaEm/w4rkb8yzcIQATjbha8XCmKXEH
JWbDJEk4OWv23ulJtn1Wf2Y7h+UwzZleYyNuqfx7n6OVzqMsj183h0Oi2G+O3OAk
+xQBhmRxEorLhOR4hbHyWpdvbzX4CH9TjklsHpRxrpGeLQQjNquYrUA1RZv35cEX
c6bGTDwfpPrhd+TZ5Y8QRXt3aCKENqt7Zq168dyJmd8ZBFi3evalzdT8EQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDXzQKjhEfcLsEMSgTY44vDSNEc4MB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvTmZOQXFPRVI5d3V3UXhLQk5qamk4TkkwUnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEoAUgk
MA0GCSqGSIb3DQEBCwUAA4IBAQBj4gBYszTWJ/OCZ0YGQsSPKen75SRGkHjLAD6A
2egtjPCkMsG6H6BjUZ9/mW9+7ZFw/+mJXprSokDIoHPeO1XaukI8ZeNYtenzOPGF
aPV+GmDNushmSHxJlrGVh/5mPzgMdB3lGA5T2J4Y4bYAO9L+YkpH66hDdWT5WQEh
OqqjwT99xwqzMav6E7pYS3UunOL8i87FE2jHK7eLKQN1JdVfM0TBl1z6DhtlmUuo
UPU2yFom6lVGr7br5hBEkgVjFmW7yZJ/0s21B8wnTIa/a3Sx9+Z2jqsbpHtoEfpp
irIldyfg8Nxs/au33dLSSPXzqexCuWbLA9nrIr9i9nHTFyZL
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:39:09 2025 by rpki-client