Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NiOzNrXCMTPRCCvW2phL3u0g2_0.roa
File: NiOzNrXCMTPRCCvW2phL3u0g2_0.roa (raw, json)
Hash identifier: ABvDRGPVLmwMTsIflXvGVil1r1VrNasrIohKciUIXvE=
Subject key identifier: 36:23:B3:36:B5:C2:31:33:D1:08:2B:D6:DA:98:4B:DE:ED:20:DB:FD
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A189F2255F90D68F2D035FFFD70FF8777E
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NiOzNrXCMTPRCCvW2phL3u0g2_0.roa
Signing time: Thu 29 Oct 2026 23:15:10 +0000
ROA not before: Thu 29 Oct 2026 23:15:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 2a09:3f02:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:f2:25:5f:90:d6:8f:2d:03:5f:ff:d7:0f:f8:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 29 23:15:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3623b336b5c23133d1082bd6da984bdeed20dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:b9:fe:d7:df:a7:46:94:c3:9b:e9:5d:6e:
0f:7f:62:d6:59:98:32:b8:d5:99:1b:a2:51:77:9a:
dd:e4:74:98:8c:f3:04:f5:f6:76:7a:df:5c:1f:45:
4a:a7:c5:54:ba:ce:3a:88:c8:86:62:f2:e2:9f:e8:
e2:56:48:85:27:c5:c5:7d:c9:87:c2:fc:e1:b1:78:
49:c5:60:3c:69:86:80:6d:ba:cc:6a:f9:f2:ac:a5:
66:24:3d:d7:31:e2:d5:0f:23:96:32:d5:72:a6:73:
28:88:0c:80:ff:28:f6:8f:03:22:d3:3e:ba:83:4e:
14:81:0b:69:c9:ec:1d:0f:19:5d:a9:86:0f:a4:0a:
81:ca:66:7f:46:32:97:6d:e3:d3:3d:04:8f:dd:a0:
ca:60:97:c9:28:cb:55:f4:14:ee:10:33:38:11:8b:
06:5f:db:52:a8:4c:4e:82:38:1f:d8:1e:7e:28:95:
79:26:69:eb:dc:5f:d6:ac:ac:d2:d5:e1:82:33:d6:
2d:d0:16:54:85:e8:12:b6:82:c5:de:9c:52:20:7c:
eb:19:d1:6f:35:35:a6:a5:56:3e:26:af:d1:4a:27:
fe:cb:e4:ac:d2:61:28:14:56:aa:28:a8:da:03:61:
43:b6:63:c0:50:5b:78:2a:a3:1a:66:fa:e5:f6:75:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:B3:36:B5:C2:31:33:D1:08:2B:D6:DA:98:4B:DE:ED:20:DB:FD
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NiOzNrXCMTPRCCvW2phL3u0g2_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f02:b000::/36
Signature Algorithm: sha256WithRSAEncryption
1d:72:6c:cb:b9:ff:39:3a:1d:7c:a7:8c:b1:13:48:85:13:e4:
c6:2b:8e:06:96:5e:fb:f4:b7:42:fd:91:b8:3e:f6:28:d7:c9:
a5:4d:f4:6c:57:00:c0:85:42:75:56:48:c8:34:0a:9a:14:5e:
99:e8:e1:04:fb:71:be:1c:bf:b4:c0:35:c1:da:1a:c6:7e:10:
e8:46:c0:31:b3:e5:b7:77:46:9c:1d:df:fc:ea:e6:39:c0:79:
a4:48:f4:cd:bf:e3:74:f6:4c:a4:0a:17:03:7b:0d:91:14:63:
88:70:0d:3c:96:b4:7b:a2:5e:56:47:83:1c:56:93:99:01:3e:
a7:ac:05:a4:2c:22:de:71:d5:2d:09:9c:17:42:d8:94:d4:4c:
4b:6e:eb:fb:c7:7b:2a:a0:fa:70:fe:10:f8:50:fb:f1:c5:e1:
ae:e2:0f:7b:cc:0e:b8:fd:cc:54:a1:9b:be:d3:bb:6d:83:59:
7f:73:3e:56:77:a7:82:3f:c0:58:47:48:2b:46:5d:9f:c0:44:
14:b1:1c:51:95:9f:db:45:ea:63:79:be:d2:85:88:7f:f1:5c:
38:97:d0:ec:44:d3:26:64:01:77:18:a1:38:db:e4:0e:b1:13:
f4:43:60:db:7b:f5:de:66:29:90:e5:3c:b8:9a:50:38:40:a9:
ce:e7:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:54:18 2026 by rpki-client