Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NXrEHTzW-_SwWrKhbZVHLooRKzk.roa
File: NXrEHTzW-_SwWrKhbZVHLooRKzk.roa (raw, json)
Hash identifier: Y5nn317qpdzUe7isZmaHCc6IOLDNTP37T5LV8UJFCZ0=
Subject key identifier: 35:7A:C4:1D:3C:D6:FB:F4:B0:5A:B2:A1:6D:95:47:2E:8A:11:2B:39
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E658640C4E2CAA1702123B31A341BB0A7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NXrEHTzW-_SwWrKhbZVHLooRKzk.roa
Signing time: Tue 26 May 2026 18:22:37 +0000
ROA not before: Tue 26 May 2026 18:22:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211851
IP address blocks: 2a06:9801:74e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:65:86:40:c4:e2:ca:a1:70:21:23:b3:1a:34:1b:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 26 18:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=357ac41d3cd6fbf4b05ab2a16d95472e8a112b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:fd:ec:a0:28:3b:17:d9:60:ab:1a:ce:d4:
e1:6e:6d:6b:57:11:06:fc:07:af:3c:2f:62:57:e3:
a2:fc:48:de:34:a3:2c:c4:6b:93:f2:08:aa:7c:40:
13:69:13:46:26:a7:37:18:5e:79:5b:c1:78:1f:67:
75:32:16:21:d2:13:f9:6c:83:e9:81:e6:ee:69:c5:
72:f0:8a:1a:d8:a6:7d:e3:ef:bd:c7:ee:02:52:59:
fd:c0:fe:db:5a:83:9a:8d:97:bd:f5:21:ff:7d:7c:
92:1f:65:01:bb:28:d2:71:be:95:1a:8c:92:08:87:
28:48:fc:1b:b0:93:18:c3:72:a0:fc:c3:8b:f4:2b:
5f:a0:7b:b3:43:f2:e2:85:43:55:42:f0:cf:51:19:
0f:6a:c3:c6:37:96:96:24:cc:02:4f:93:36:c8:5c:
da:af:87:ed:f6:ff:2f:5a:b2:74:a2:d6:35:ac:33:
fb:ae:2b:0f:10:ac:87:ac:d1:4c:78:c5:ed:88:00:
d2:bc:6e:db:3e:45:f2:1d:56:f3:24:5e:ec:68:6a:
84:d8:03:6f:c0:bd:a7:62:7e:12:37:33:8b:f5:c5:
a5:30:be:1a:b0:a2:f8:3b:56:7a:c2:20:6b:1f:5e:
9a:c3:c2:02:fa:99:83:52:e8:ae:1b:96:bc:59:66:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:C4:1D:3C:D6:FB:F4:B0:5A:B2:A1:6D:95:47:2E:8A:11:2B:39
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NXrEHTzW-_SwWrKhbZVHLooRKzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:74e::/48
Signature Algorithm: sha256WithRSAEncryption
b1:c0:2c:fd:17:2f:9c:8a:0d:f0:ae:39:77:a0:0c:19:ad:7e:
96:70:fe:f2:03:ce:01:36:20:7d:13:43:77:3a:f7:17:de:a2:
ae:a2:1f:2b:f2:9e:8a:b9:8b:12:d1:9b:52:d1:de:89:1a:50:
91:84:4a:d7:d5:09:34:59:88:18:e9:32:1f:19:d5:06:61:df:
65:e2:91:5f:bf:f6:a0:0c:8f:ff:9c:0b:e8:33:6d:bd:41:12:
bb:8c:73:7b:e6:11:2b:ab:d5:6d:0b:e1:b6:2a:42:88:56:bf:
92:85:fa:06:54:75:3e:ef:45:aa:cd:f5:24:15:4e:4d:d4:d8:
51:ef:c1:73:9b:e4:58:17:e6:bd:bc:22:7d:36:75:fd:71:ea:
f9:98:d4:11:0f:f0:15:90:ca:9e:c1:18:d8:d6:ea:58:c7:f9:
e4:73:88:0c:34:27:59:b1:a9:ce:db:ea:83:62:37:0f:a9:f0:
98:cb:d9:65:f8:dd:ad:f7:20:b3:32:a3:1c:39:f5:ed:42:7d:
e1:dc:91:7c:4f:30:db:bc:f1:0b:79:89:e4:a7:dc:8c:c7:75:
74:28:f1:93:a1:b2:76:45:1c:b3:c7:ee:32:22:ef:76:aa:be:
d7:ba:9b:a7:99:7f:23:fc:ff:b7:b3:a2:29:51:11:6c:31:45:
f2:40:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:45 2026 by rpki-client