Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/42e93a-4e5c-4272-bb3e-79bf90af7d70/1/nEHqIL4ZKQb-EERSLmL0B2Zdm7k.roa
File: nEHqIL4ZKQb-EERSLmL0B2Zdm7k.roa (raw, json)
Hash identifier: ijukr6wzpJ3+yQqOUtp5PbHPrzsm9ahz+RTerVtO6CI=
Subject key identifier: 9C:41:EA:20:BE:19:29:06:FE:10:44:52:2E:62:F4:07:66:5D:9B:B9
Certificate issuer: /CN=eafbd3e8e89509d63c2fa5d3f74f0307b66deaf9
Certificate serial: 01A08F87981BB3919D2D64E7DC97F2537594
Authority key identifier: EA:FB:D3:E8:E8:95:09:D6:3C:2F:A5:D3:F7:4F:03:07:B6:6D:EA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vvT6OiVCdY8L6XT908DB7Zt6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/42e93a-4e5c-4272-bb3e-79bf90af7d70/1/nEHqIL4ZKQb-EERSLmL0B2Zdm7k.roa
Signing time: Fri 11 Sep 2026 08:13:42 +0000
ROA not before: Fri 11 Sep 2026 08:13:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 2001:67c:258c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/42e93a-4e5c-4272-bb3e-79bf90af7d70/1/6vvT6OiVCdY8L6XT908DB7Zt6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/42e93a-4e5c-4272-bb3e-79bf90af7d70/1/6vvT6OiVCdY8L6XT908DB7Zt6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vvT6OiVCdY8L6XT908DB7Zt6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:87:98:1b:b3:91:9d:2d:64:e7:dc:97:f2:53:75:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eafbd3e8e89509d63c2fa5d3f74f0307b66deaf9
Validity
Not Before: Sep 11 08:13:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c41ea20be192906fe1044522e62f407665d9bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:5a:20:4e:ce:1b:c3:e4:25:b6:8c:93:62:
0e:ea:60:96:86:eb:9c:7f:be:bf:a5:a4:31:c7:ca:
1e:ed:b0:fd:76:74:7e:7c:82:73:e9:33:21:8e:77:
b4:ec:80:8c:d6:54:98:02:ba:50:99:a4:c3:60:8a:
12:09:37:1c:c7:f0:bd:04:fb:cf:48:c8:dd:52:14:
99:fb:6b:e5:20:74:16:2b:3c:cf:2a:e3:8b:a7:de:
f7:43:af:73:34:5c:66:6f:96:c4:8d:d4:ec:20:32:
50:aa:09:ae:89:df:b9:f3:0e:af:07:00:78:f4:03:
b8:94:db:a6:41:6f:2b:f1:9b:80:f2:78:30:e7:90:
8c:55:95:e9:b4:af:1d:e2:27:c9:f9:62:f3:a5:93:
bb:51:38:69:d7:f4:9c:89:e2:05:43:fb:8b:a7:fd:
57:cf:18:d8:85:cd:13:0f:8e:42:ea:c0:ff:56:fb:
1c:01:37:db:65:a5:0c:84:f2:f0:2a:57:f4:ce:33:
c0:73:6d:d2:bb:19:a1:c1:8d:f9:62:0b:00:a4:56:
bf:00:55:f6:86:7d:01:be:5a:37:07:3f:4b:54:6a:
8f:23:2e:e5:c8:d0:6a:17:71:4a:71:ae:5b:c4:ec:
98:62:34:06:1b:04:90:4d:a4:ab:11:82:b8:3d:ad:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:EA:20:BE:19:29:06:FE:10:44:52:2E:62:F4:07:66:5D:9B:B9
X509v3 Authority Key Identifier:
keyid:EA:FB:D3:E8:E8:95:09:D6:3C:2F:A5:D3:F7:4F:03:07:B6:6D:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vvT6OiVCdY8L6XT908DB7Zt6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/42e93a-4e5c-4272-bb3e-79bf90af7d70/1/nEHqIL4ZKQb-EERSLmL0B2Zdm7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/42e93a-4e5c-4272-bb3e-79bf90af7d70/1/6vvT6OiVCdY8L6XT908DB7Zt6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:258c::/48
Signature Algorithm: sha256WithRSAEncryption
4b:b7:03:d6:4d:89:cd:83:87:bd:c8:d3:5d:8f:08:e9:26:6c:
66:ab:ac:1f:1a:55:77:22:11:b3:a8:9d:7e:03:1f:e9:ef:70:
fb:d5:81:d2:5d:d7:55:d4:d5:ed:61:ce:ae:69:ef:94:f8:22:
b2:ac:7e:6b:86:9a:bd:1f:44:cb:dd:ed:d5:2a:22:66:fe:e6:
bb:74:51:f3:bd:5c:db:dd:98:a4:0c:bb:0b:3f:bb:df:73:14:
9f:74:42:04:b5:04:2a:da:2c:9f:91:7a:f4:69:e2:db:8e:a1:
00:52:0e:67:ac:49:f7:1d:89:09:fe:4e:a6:43:f1:d8:92:99:
06:54:ec:23:c1:4c:3a:57:e9:d4:19:73:8b:bd:c7:07:53:f9:
5d:8f:3b:b5:8f:f9:09:bb:3c:1a:bc:41:3b:dd:64:9b:5f:b0:
38:75:b0:74:e4:ce:02:94:1c:fa:31:0d:2d:ee:0e:92:76:5d:
64:bf:24:af:0b:ac:0b:c7:26:d0:d1:88:ce:6b:11:4d:34:99:
0e:19:8c:16:46:b7:5a:36:6d:15:4a:a8:1f:56:ad:0e:5f:db:
bc:ed:3a:a3:1c:5a:20:ce:42:e3:e0:25:16:27:0b:c3:a1:64:
75:aa:41:60:88:61:ec:47:31:c7:6f:c3:f1:fc:d9:2b:30:c0:
ef:17:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:03 2026 by rpki-client