Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/NAW1_cKeiVf2Ht2OFDHqZcdwBFo.roa
File: NAW1_cKeiVf2Ht2OFDHqZcdwBFo.roa (raw, json)
Hash identifier: lOXDjnI4H7k/uRGO0GQznSDrcP2IS6+/d8MPZ+z5oLM=
Subject key identifier: 34:05:B5:FD:C2:9E:89:57:F6:1E:DD:8E:14:31:EA:65:C7:70:04:5A
Certificate issuer: /CN=eed7f6b165a38cff346de3e352118dc99ed822c7
Certificate serial: 019CB8D1419CBE2EF2B26F1E1E94BFEC0E9E
Authority key identifier: EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/NAW1_cKeiVf2Ht2OFDHqZcdwBFo.roa
Signing time: Wed 04 Mar 2026 12:27:27 +0000
ROA not before: Wed 04 Mar 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210957
IP address blocks: 130.78.240.0/24 maxlen: 24
2001:67c:2d08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:d1:41:9c:be:2e:f2:b2:6f:1e:1e:94:bf:ec:0e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed7f6b165a38cff346de3e352118dc99ed822c7
Validity
Not Before: Mar 4 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3405b5fdc29e8957f61edd8e1431ea65c770045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:a5:ed:13:c2:96:6c:df:20:6a:0c:e7:7f:
ce:dc:35:a5:4e:7e:10:b7:c0:66:0c:78:40:67:1e:
bd:ca:a5:71:63:35:e7:6c:85:4b:93:64:95:79:26:
b5:a5:01:80:a0:9d:99:28:f9:c6:33:de:de:0f:84:
98:a2:5b:4d:24:30:4f:45:01:4b:03:55:6b:3c:e1:
30:04:d4:06:ae:2b:bf:36:ca:ef:e8:59:7b:c2:97:
56:84:21:a3:4e:70:ee:f4:15:1e:54:0f:5f:85:0b:
a0:8b:d3:38:58:62:a7:eb:3a:b6:47:c7:0e:64:b3:
4a:a4:28:51:06:76:dc:a9:2e:2d:7b:ee:14:6f:3a:
14:6e:69:7c:24:d1:2a:25:50:90:6b:82:0e:72:a7:
5b:78:75:1c:49:28:37:be:d0:04:1d:f0:6f:c5:5d:
f2:a4:51:8b:d1:5a:2e:9d:f5:6a:e3:1b:c5:83:9d:
10:80:9d:90:79:3e:0d:ce:ac:63:5b:e6:7c:ed:5a:
77:61:a1:83:ca:6e:a6:83:75:f8:5e:ec:44:35:c4:
9a:ca:0f:2c:d9:1a:06:71:f5:ad:a3:2f:b8:03:4a:
ef:aa:b8:f8:85:41:c1:44:93:f7:7f:13:9a:fe:01:
4f:15:4b:64:0c:9f:cb:f5:fd:44:05:f1:27:65:b6:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:B5:FD:C2:9E:89:57:F6:1E:DD:8E:14:31:EA:65:C7:70:04:5A
X509v3 Authority Key Identifier:
keyid:EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/NAW1_cKeiVf2Ht2OFDHqZcdwBFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.240.0/24
IPv6:
2001:67c:2d08::/48
Signature Algorithm: sha256WithRSAEncryption
35:38:ca:1f:e9:13:ba:8c:3e:13:12:5e:b8:66:26:cf:ce:fd:
ef:ce:0e:b8:d3:88:78:c7:61:dd:68:0c:4b:03:62:c7:99:66:
b9:8d:91:46:53:d9:5b:c4:07:14:d7:d1:17:03:d0:5e:b4:bb:
59:6a:fb:db:94:7a:83:03:4c:dc:cd:b8:41:4d:82:1a:9e:b3:
a2:db:01:58:b1:2c:3a:3f:10:58:78:e6:65:15:35:f9:d7:d8:
a3:07:23:3f:cc:23:b2:85:4d:fc:51:22:11:af:f8:4d:45:f4:
56:55:b3:e6:98:ef:d0:5f:d9:96:f6:a8:54:54:7c:05:43:eb:
03:7f:d9:84:ed:ff:5f:88:f0:2f:96:5d:f3:39:c4:9a:19:0f:
35:cc:94:93:c8:93:cd:24:a8:cd:c6:91:fb:e7:18:d6:e9:4d:
1b:0f:05:ae:37:73:4e:23:5d:36:79:05:8a:3f:4a:63:1b:df:
2c:1c:31:ee:75:09:07:33:d8:c4:92:24:0a:ae:21:84:8a:2a:
19:54:d2:8d:d4:37:79:b7:75:bf:02:8e:cd:f6:db:5a:e7:a9:
df:fb:4f:18:b1:b6:1d:e0:3b:38:00:ea:ac:1c:b9:ce:e2:04:
08:01:55:1e:07:fc:49:fb:a7:a4:4e:2f:a0:19:2e:8e:74:9d:
a2:f0:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:14:41 2026 by rpki-client