Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NyP9edEMacfUJPV02-D0dIZ4F9U.roa
File: NyP9edEMacfUJPV02-D0dIZ4F9U.roa (raw, json)
Hash identifier: 9S7nHL/Ia9RCuBvkbsvr58UwCKiuyvRk8k9lbbny2Z8=
Subject key identifier: 37:23:FD:79:D1:0C:69:C7:D4:24:F5:74:DB:E0:F4:74:86:78:17:D5
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0BFA2BADFD6A3B18F2469DD90432FCE68
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NyP9edEMacfUJPV02-D0dIZ4F9U.roa
Signing time: Sun 20 Sep 2026 16:25:07 +0000
ROA not before: Sun 20 Sep 2026 16:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218628
IP address blocks: 2a06:9801:1565::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a2:ba:df:d6:a3:b1:8f:24:69:dd:90:43:2f:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 20 16:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3723fd79d10c69c7d424f574dbe0f474867817d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:8d:8a:b1:62:c8:75:38:76:18:09:77:14:
77:33:f3:09:16:e1:91:c2:fe:05:bb:80:e4:4b:96:
70:45:c5:f6:01:fe:b6:bf:f1:08:86:79:a0:4d:a9:
2a:df:0a:56:53:98:7f:c3:88:8b:29:d3:5b:d5:6f:
49:65:59:86:a9:9e:5d:dc:79:66:e0:bb:e4:3a:4c:
b2:3a:f9:4a:47:b2:50:52:aa:91:38:70:cc:a2:27:
91:98:55:69:9a:d5:f1:29:a3:91:79:ba:7d:77:80:
92:cf:80:9b:22:fd:d3:f4:06:f0:a8:2f:2e:d9:41:
67:aa:56:ae:e9:c3:65:60:0a:75:c8:4c:e5:e3:cd:
6f:f4:73:48:0f:a7:03:c1:3b:95:bc:a0:76:cc:6d:
b0:eb:1d:06:30:4f:8c:7a:99:87:5c:a0:e1:b2:9b:
08:c3:9c:8c:7d:a6:5e:bc:4d:40:6c:a8:fd:5c:86:
90:da:75:d7:f6:19:8c:ef:2d:23:36:63:1b:f6:54:
b7:bc:8c:17:ed:3b:79:9e:fb:de:16:ee:0f:87:e2:
89:16:78:98:b0:c8:27:8d:b9:e5:78:6d:13:3a:78:
ef:8e:49:31:a1:b5:b3:71:66:af:07:0e:4c:db:41:
0c:ad:72:48:0a:41:41:49:66:8a:32:88:89:ab:8f:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:FD:79:D1:0C:69:C7:D4:24:F5:74:DB:E0:F4:74:86:78:17:D5
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NyP9edEMacfUJPV02-D0dIZ4F9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1565::/48
Signature Algorithm: sha256WithRSAEncryption
4b:bd:72:bb:17:70:c1:27:37:57:ad:67:0e:13:95:f0:3b:42:
ca:db:a9:db:83:b9:30:dc:61:58:40:6f:9f:12:0b:af:57:fa:
6d:7f:21:5a:69:fe:c0:7c:d7:f8:24:1c:ce:85:f9:a5:cd:c9:
6f:f8:29:6f:93:4a:ef:aa:04:b4:8a:96:69:a2:8e:58:94:99:
c0:a2:4f:f4:6c:4f:04:e3:c6:de:93:a5:91:8f:48:95:5d:00:
a5:17:54:c0:16:4d:d6:76:14:78:34:1f:fe:4e:1a:0a:05:52:
2c:cc:f5:a3:a0:6f:ea:64:64:98:f4:dc:4a:ab:52:84:46:84:
ae:76:fd:49:e4:8e:7d:17:4c:ae:42:dd:69:88:54:c2:8f:5a:
4b:3c:c4:70:67:b9:f1:43:d6:60:20:1e:aa:88:29:5d:f6:ac:
ea:90:20:68:44:40:3a:28:79:03:aa:81:9c:ca:0f:5d:aa:90:
7e:09:86:46:bc:78:e3:2a:d8:e8:b2:9f:d0:44:a6:c8:2e:ca:
7d:5e:ed:46:2e:eb:65:34:74:52:07:82:bf:fb:78:e5:a4:26:
d4:27:a5:91:0c:45:8c:b9:78:91:1a:6e:a3:89:46:c6:ec:38:
41:09:01:b7:ea:d5:31:f5:7a:8f:5e:a6:31:04:cb:d4:99:94:
9e:24:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:20 2026 by rpki-client