Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/nRHqfN44XF3lS55Gt1jyBq3kp-4.roa
File: nRHqfN44XF3lS55Gt1jyBq3kp-4.roa (raw, json)
Hash identifier: iaKGAZNh36oPalkWoMkcZBZmyfwe4/UvDOAokPbC+iM=
Subject key identifier: 9D:11:EA:7C:DE:38:5C:5D:E5:4B:9E:46:B7:58:F2:06:AD:E4:A7:EE
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A117F667A435D071F8CBED457FE8EAD4EF
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/nRHqfN44XF3lS55Gt1jyBq3kp-4.roa
Signing time: Wed 07 Oct 2026 20:03:06 +0000
ROA not before: Wed 07 Oct 2026 20:03:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a10:fa80:18::/48 maxlen: 48
2a10:fa81:1a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f6:67:a4:35:d0:71:f8:cb:ed:45:7f:e8:ea:d4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 7 20:03:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d11ea7cde385c5de54b9e46b758f206ade4a7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:b8:bb:4c:9d:4c:3e:ff:bc:d8:65:e4:f0:
8a:5e:00:97:cd:d2:eb:98:9b:9a:39:27:2e:18:5b:
b0:1c:a5:f1:f7:54:bb:31:df:66:0b:ba:c0:17:ad:
ef:7e:d6:78:f4:60:37:95:0a:16:e9:a9:16:53:db:
3e:39:5e:be:60:a1:f0:bd:b6:37:c9:3f:9e:91:96:
6b:c5:8b:48:92:a4:44:0a:15:64:ce:a0:39:bf:eb:
18:72:3c:70:73:f3:47:be:a4:61:b5:0e:cd:48:29:
37:88:30:bd:e6:35:7f:30:63:f0:9b:89:26:b7:02:
22:58:2d:6e:37:87:68:55:c9:87:3f:40:d5:9b:99:
66:b1:ec:8b:e8:99:ee:e5:a0:ed:f0:ba:f5:a8:7f:
24:54:a6:00:12:1d:b8:48:9a:c7:a7:d6:0c:90:b9:
00:47:a7:da:6c:2c:eb:0b:07:cf:3f:c5:bf:88:f1:
a2:e7:39:c8:eb:44:82:60:94:bb:76:76:eb:74:55:
60:c7:ab:51:7c:79:76:98:3b:ea:73:35:de:6f:38:
81:d6:74:e6:c1:5b:02:cb:e6:41:ce:61:c7:7f:11:
b9:c6:fd:08:97:37:9f:5e:d0:0c:41:79:17:10:a3:
fd:39:5b:f5:83:42:66:c3:95:04:b6:2e:d2:85:7e:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:EA:7C:DE:38:5C:5D:E5:4B:9E:46:B7:58:F2:06:AD:E4:A7:EE
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/nRHqfN44XF3lS55Gt1jyBq3kp-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:18::/48
2a10:fa81:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
35:87:72:ba:8b:40:bb:09:84:b9:8c:4c:7e:18:00:6b:05:d7:
0c:c0:82:97:29:b5:0f:c5:dc:f2:69:f7:55:43:84:77:5e:96:
bc:ff:cd:52:eb:0c:9c:98:e3:a8:d7:a6:b7:5e:a6:db:4d:a7:
75:aa:f1:83:8a:f6:c4:26:fc:c9:e4:2c:21:46:9e:a5:d2:ca:
9a:82:72:7e:9f:9e:bc:f6:af:ef:e2:62:8f:7f:92:2d:0b:9b:
63:1d:be:df:a8:a8:86:9f:9c:70:b8:03:2d:b4:10:78:19:be:
45:96:25:d2:10:7d:98:7b:48:64:5f:0a:f9:d0:59:1c:d6:11:
d7:a4:97:75:90:93:e9:df:a1:a7:27:47:ca:60:1c:44:ea:42:
45:be:fe:2a:fb:95:97:fd:82:5a:a5:c9:f5:7c:72:28:53:03:
86:82:24:4e:45:38:20:a1:f0:36:85:78:55:c9:b1:c5:f3:c6:
fd:99:70:68:f4:a0:d6:f2:dd:5e:c1:84:9b:0b:26:03:9b:64:
ff:36:7f:63:ee:be:36:97:9f:bc:0e:a6:68:9d:b0:db:ba:cb:
50:82:ba:43:73:6d:1e:6f:fc:65:78:38:15:11:17:11:e8:0d:
93:18:28:71:6f:2e:ef:38:bc:8c:26:7e:99:f7:5e:2e:33:7a:
f7:bd:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:53:09 2026 by rpki-client