Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/nopMUUJTS0An2jLnhKvhz6wEdPs.roa
File: nopMUUJTS0An2jLnhKvhz6wEdPs.roa (raw, json)
Hash identifier: 9seqKOVg1xtJT41JqrZrelanQQe9aZs4h0y4Rv603e4=
Subject key identifier: 9E:8A:4C:51:42:53:4B:40:27:DA:32:E7:84:AB:E1:CF:AC:04:74:FB
Certificate issuer: /CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Certificate serial: 01A05D07E0EC61542989BDDAEB0E3F6C4998
Authority key identifier: B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/nopMUUJTS0An2jLnhKvhz6wEdPs.roa
Signing time: Tue 01 Sep 2026 12:53:12 +0000
ROA not before: Tue 01 Sep 2026 12:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197658
IP address blocks: 2a0a:11c5::/40 maxlen: 48
2a0a:11c5:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:07:e0:ec:61:54:29:89:bd:da:eb:0e:3f:6c:49:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Validity
Not Before: Sep 1 12:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e8a4c5142534b4027da32e784abe1cfac0474fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:4b:d7:77:d4:57:d7:44:72:d5:9a:23:f7:
60:5f:f9:51:df:2c:2b:1a:ab:19:44:1a:d3:66:47:
76:2b:1e:90:31:b1:f4:25:34:21:18:f6:01:83:12:
46:d9:06:f1:16:67:5f:9a:81:11:ff:2c:a7:e4:76:
7c:0a:e6:e0:a7:ef:6e:2d:5f:ed:b0:86:78:72:f1:
7a:5f:02:d4:ee:97:38:4a:27:86:01:41:77:30:27:
b3:c7:d3:13:e9:91:23:c9:fb:bc:15:ee:c9:b8:fa:
08:45:c9:6a:74:27:31:e8:21:27:4c:bc:bf:77:2a:
20:2d:96:1b:c9:5a:3f:40:96:09:ff:58:9f:28:dd:
55:e9:01:09:ca:b8:f6:32:8f:11:de:e4:42:b2:73:
4f:eb:8d:2f:f8:b8:24:10:3b:ca:c3:c8:70:a2:67:
f5:b0:33:02:e3:c3:da:c2:1a:44:ca:19:c8:e7:4c:
29:21:da:cf:9b:69:4e:f8:a0:92:be:41:5e:d3:68:
a0:8c:ac:32:ec:69:ab:b1:d3:fd:4d:e8:f5:c9:39:
ad:2d:4f:98:ea:20:39:2f:f1:13:f5:bc:76:f3:4f:
00:7a:51:37:40:e8:7f:77:c6:e9:73:26:79:f8:ea:
bd:57:93:87:cd:d9:17:9f:cc:d6:27:70:9a:1a:06:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:4C:51:42:53:4B:40:27:DA:32:E7:84:AB:E1:CF:AC:04:74:FB
X509v3 Authority Key Identifier:
keyid:B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/nopMUUJTS0An2jLnhKvhz6wEdPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:11c5::/40
Signature Algorithm: sha256WithRSAEncryption
94:90:33:b1:c0:ed:98:51:45:7b:28:6c:8d:49:6c:96:59:fd:
c8:7a:ef:10:64:2c:29:34:1e:91:85:92:d9:c2:53:26:73:2b:
dc:0d:4b:29:aa:65:a4:3d:f0:47:5b:5e:66:a8:60:a2:7c:ac:
06:1c:46:75:c7:57:83:28:5f:f7:f0:80:3c:c4:5a:44:1e:86:
21:c7:ec:03:63:23:d3:d5:10:5b:5e:fc:e0:55:69:18:38:69:
17:82:77:33:29:19:18:da:09:79:dd:e8:64:f0:36:f9:7d:86:
a8:07:dd:76:b9:5d:79:ba:cf:e2:1f:2d:6d:a7:ad:bf:62:05:
e7:45:44:7b:5e:12:b6:69:dc:e8:33:a7:83:37:21:07:79:2b:
ed:63:5c:9f:8c:fd:f1:d3:10:37:a1:4d:28:1a:ab:a2:36:91:
07:67:7c:56:7d:b9:a1:9b:a7:bf:0a:6e:aa:70:7d:6a:68:11:
c0:9b:40:f2:96:e1:d9:76:48:cd:33:13:22:99:3c:5b:ac:77:
29:1d:46:1f:4d:4d:10:87:d5:ea:1d:51:71:cb:ce:91:c0:6f:
a5:26:91:19:c0:9a:eb:b4:97:b2:8b:66:7f:3f:49:09:32:c6:
b7:75:1a:a3:81:26:b3:49:f5:c8:2f:e0:06:79:b2:b5:94:60:
e2:97:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:17 2026 by rpki-client