Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/nc20ldyX-tfHoIgBa9jwmBJxm2I.roa
File: nc20ldyX-tfHoIgBa9jwmBJxm2I.roa (raw, json)
Hash identifier: 0+zoeaDTZVkxXr7id3YOpEurailSQr5cOQu2kLQix04=
Subject key identifier: 9D:CD:B4:95:DC:97:FA:D7:C7:A0:88:01:6B:D8:F0:98:12:71:9B:62
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019FA951BE468E345ED3C2355BEA466F1333
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/nc20ldyX-tfHoIgBa9jwmBJxm2I.roa
Signing time: Tue 28 Jul 2026 15:22:14 +0000
ROA not before: Tue 28 Jul 2026 15:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219133
IP address blocks: 2a10:fa81:1100::/40 maxlen: 40
2a10:fa81:1100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:51:be:46:8e:34:5e:d3:c2:35:5b:ea:46:6f:13:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 28 15:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dcdb495dc97fad7c7a088016bd8f09812719b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:9a:57:c8:8f:ab:00:f8:0d:4e:d8:46:f1:
87:ab:67:bd:d6:b0:63:cd:2a:25:59:42:d9:77:b6:
98:f0:c0:38:46:a2:15:90:50:21:4b:be:35:a1:62:
fc:52:95:83:9e:b8:4f:b5:e6:85:57:9a:b9:f6:f5:
fa:5a:37:94:58:0e:fd:c4:21:89:2b:62:95:ac:35:
84:c6:be:c1:48:24:e6:ab:d0:90:48:f2:58:71:3d:
b4:99:e6:6f:8f:14:5e:d3:17:91:67:0d:1f:80:8e:
6b:13:dc:6c:b7:b0:1c:b4:e4:89:07:f2:62:7b:3b:
50:9b:84:bc:71:ac:04:94:03:d3:14:6c:35:45:bf:
e7:82:85:dc:bb:1b:1c:9f:a6:50:22:7f:51:db:a3:
af:ce:dd:ef:5a:84:0b:29:df:31:ed:35:28:2a:c5:
3f:00:e9:21:e8:90:3d:e2:18:2b:9b:b8:c9:75:c0:
00:4f:8a:33:a6:ba:f7:a7:0d:29:3d:a7:f9:ac:5e:
38:09:0f:2d:5f:c2:d6:aa:21:e5:f4:8c:2d:66:6d:
a5:03:73:74:1c:fd:45:3e:94:74:de:f7:cc:f4:71:
20:fd:92:b6:d9:aa:36:9e:47:fd:34:65:41:41:0b:
29:7a:7c:da:1a:4f:bd:81:ba:aa:a2:b2:f2:10:d8:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CD:B4:95:DC:97:FA:D7:C7:A0:88:01:6B:D8:F0:98:12:71:9B:62
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/nc20ldyX-tfHoIgBa9jwmBJxm2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1100::/40
Signature Algorithm: sha256WithRSAEncryption
3f:07:d5:32:41:09:74:99:f8:74:00:f3:45:b9:42:01:f0:51:
86:a7:8c:8d:2d:70:51:4b:12:59:05:3c:8b:5d:a8:b7:41:c3:
d5:2f:9c:bd:1b:d7:b6:33:41:09:55:2d:05:8b:d8:6b:47:fa:
4b:77:df:78:fd:97:4a:72:c7:82:84:bf:19:7e:48:52:ac:f1:
e9:73:ea:4f:f1:9a:d1:a0:cb:ec:89:9b:a1:46:19:7b:91:bc:
dc:39:1b:3c:24:c1:24:f2:17:1f:f7:52:a7:75:63:e5:05:a7:
9f:4a:6d:d3:74:dd:17:57:44:da:4f:49:d1:db:3e:5b:07:7f:
3b:b4:ea:97:68:8d:e6:e9:bd:74:20:5d:fb:77:e0:2b:ed:c1:
18:fc:0c:7f:cb:7e:7e:ab:b8:1e:78:1f:18:13:12:2a:6e:29:
5d:5c:28:1d:43:6a:93:57:7f:e3:82:03:99:af:0f:2f:d1:24:
97:67:b2:68:37:a0:ff:6e:fb:d0:a0:ad:d2:0f:73:98:4d:ce:
31:8a:91:65:b6:7b:2d:5d:6c:ea:62:ad:83:0e:76:50:dd:71:
54:05:26:3c:e6:a8:7c:a9:7c:d8:ee:7f:fc:14:e7:26:cd:8d:
51:e0:01:30:66:c2:ea:b7:be:15:0d:37:ac:ce:51:e0:da:6b:
42:7b:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:36 2026 by rpki-client