Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa
File: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (raw, json)
Hash identifier: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=
Subject key identifier: 35:0E:5F:C7:C5:63:EF:34:F0:81:C1:F7:AA:3D:0A:DC:C8:52:5F:84
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A06B9B137FD9515DE401FB11FAD64E9FC3
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa
Signing time: Fri 04 Sep 2026 08:48:40 +0000
ROA not before: Fri 04 Sep 2026 08:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44097
IP address blocks: 2a00:4780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:9b:13:7f:d9:51:5d:e4:01:fb:11:fa:d6:4e:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 4 08:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=350e5fc7c563ef34f081c1f7aa3d0adcc8525f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:c0:65:ae:67:c4:36:4f:d6:8c:43:db:da:
ee:11:16:8b:81:4d:87:93:f3:4e:98:78:59:4e:2e:
aa:64:5d:87:8c:fc:23:d4:4a:52:3a:c5:0f:01:99:
33:f3:f9:9e:5c:37:7a:d5:1e:dc:d3:63:39:51:c8:
ff:da:91:e4:ac:0b:cd:4a:c6:33:04:ab:3d:ba:37:
32:95:46:74:da:10:b8:ba:5f:d0:25:69:be:fa:40:
1a:99:bc:20:86:5c:de:c6:de:f5:48:38:80:1c:ad:
3a:4d:47:43:68:33:51:6d:5c:9c:0b:e6:71:99:7f:
3a:8e:80:16:0e:fd:56:55:ab:b4:75:db:c5:b9:c0:
6c:32:7f:05:ef:3f:e4:2c:f8:a2:53:e6:ca:f3:4d:
79:00:27:93:f5:c2:18:75:33:89:94:e0:74:c3:fb:
84:e5:06:30:be:48:d1:fb:88:54:44:61:53:72:3e:
c6:36:a6:aa:7e:f2:f5:ef:bc:2d:83:40:be:37:ca:
3c:75:e9:86:00:0e:4f:54:26:0d:33:ef:4d:ab:d8:
45:ae:c8:5f:a7:02:3c:4f:91:06:93:d2:14:6f:29:
f0:31:7d:0f:5b:87:a4:be:53:69:0d:23:b1:cb:0e:
ee:44:8d:29:70:a2:5e:da:bd:7c:4c:f2:cd:ef:3d:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:5F:C7:C5:63:EF:34:F0:81:C1:F7:AA:3D:0A:DC:C8:52:5F:84
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4780::/48
Signature Algorithm: sha256WithRSAEncryption
a0:11:97:b9:00:12:fe:8f:16:39:24:f9:aa:10:38:5e:bf:6b:
aa:8c:22:62:3a:ce:f5:f3:92:7c:be:bc:6f:05:dd:0d:e9:d6:
fd:89:34:e8:7b:25:60:b3:d4:1f:67:1e:7f:ed:80:2e:4a:b8:
30:8f:fd:6b:d9:16:cb:90:16:70:92:84:ff:60:f5:eb:4f:dd:
96:e1:cc:87:86:1c:ce:06:e1:e7:df:75:c1:a7:82:11:d5:4d:
af:c1:1d:24:2a:73:2c:3d:a3:e8:53:46:c9:cb:09:81:a9:be:
0c:50:40:14:a5:4f:5b:6e:12:b9:4c:f4:8c:89:d0:70:74:f1:
04:ce:c9:e9:b1:ea:57:95:ba:7e:42:1c:38:04:74:d6:1c:ca:
91:03:39:4e:49:bd:7c:55:40:46:d4:d6:f5:3c:43:66:92:b5:
a7:04:98:d4:d7:ec:b3:e5:67:c8:ea:25:3b:d8:8b:ee:2d:23:
b5:90:45:76:a4:e6:1d:32:17:ab:e2:c5:27:c6:f7:d2:8c:49:
61:0f:0e:30:fb:5b:be:79:00:78:a8:5a:45:22:98:64:b7:c7:
dc:67:6d:e2:bb:74:a8:57:ab:39:aa:47:3f:97:42:da:b6:3b:
62:54:67:45:00:38:8d:a6:63:e5:2e:da:f8:56:12:61:c5:d4:
a9:dd:c7:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBrmxN/2VFd5AH7EfrWTp/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjYwOTA0MDg0ODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTBlNWZjN2M1NjNlZjM0ZjA4MWMxZjdhYTNkMGFkY2M4NTI1Zjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXvAZa5nxDZP1oxD29ruERaLgU2H
k/NOmHhZTi6qZF2HjPwj1EpSOsUPAZkz8/meXDd61R7c02M5Ucj/2pHkrAvNSsYz
BKs9ujcylUZ02hC4ul/QJWm++kAambwghlzext71SDiAHK06TUdDaDNRbVycC+Zx
mX86joAWDv1WVau0ddvFucBsMn8F7z/kLPiiU+bK8015ACeT9cIYdTOJlOB0w/uE
5QYwvkjR+4hURGFTcj7GNqaqfvL177wtg0C+N8o8demGAA5PVCYNM+9Nq9hFrshf
pwI8T5EGk9IUbynwMX0PW4ekvlNpDSOxyw7uRI0pcKJe2r18TPLN7z05NQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDUOX8fFY+808IHB96o9CtzIUl+EMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlE1Zng4Vmo3elR3Z2NIM3FqMEszTWhTWDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBHgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCgEZe5ABL+jxY5JPmqEDhev2uqjCJiOs7185J8
vrxvBd0N6db9iTToeyVgs9QfZx5/7YAuSrgwj/1r2RbLkBZwkoT/YPXrT92W4cyH
hhzOBuHn33XBp4IR1U2vwR0kKnMsPaPoU0bJywmBqb4MUEAUpU9bbhK5TPSMidBw
dPEEzsnpsepXlbp+Qhw4BHTWHMqRAzlOSb18VUBG1Nb1PENmkrWnBJjU1+yz5WfI
6iU72IvuLSO1kEV2pOYdMher4sUnxvfSjElhDw4w+1u+eQB4qFpFIphkt8fcZ23i
u3SoV6s5qkc/l0LatjtiVGdFADiNpmPlLtr4VhJhxdSp3cda
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:29:26 2026 by rpki-client