Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/NqoPs-D12-884odkfg7xB3i3Be4.roa
File: NqoPs-D12-884odkfg7xB3i3Be4.roa (raw, json)
Hash identifier: DsuKILouEzDU3Bip7myO5HxEJ4IKowBV+lI11XXZp/I=
Subject key identifier: 36:AA:0F:B3:E0:F5:DB:EF:3C:E2:87:64:7E:0E:F1:07:78:B7:05:EE
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01A0B371AF8E00D57C3EC86E5E5E91F78194
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/NqoPs-D12-884odkfg7xB3i3Be4.roa
Signing time: Fri 18 Sep 2026 07:36:07 +0000
ROA not before: Fri 18 Sep 2026 07:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218679
IP address blocks: 2a0d:eb04:c::/48 maxlen: 48
2a0d:eb04:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:71:af:8e:00:d5:7c:3e:c8:6e:5e:5e:91:f7:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Sep 18 07:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36aa0fb3e0f5dbef3ce287647e0ef10778b705ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:24:b5:25:0e:22:54:a8:cb:94:19:1f:fa:
90:0b:7d:c6:a4:e8:aa:7c:75:5b:aa:2d:c3:ef:f6:
1d:02:bc:b1:3b:c0:65:50:7b:37:15:64:b5:66:53:
b7:1a:59:9f:04:16:01:1f:9a:ba:f2:53:e5:9d:e0:
f6:8b:18:55:ce:c8:3c:0d:23:05:c9:4e:89:28:5d:
a8:6a:0c:3a:e7:eb:6a:37:d9:c1:77:f0:34:9a:c4:
ef:15:88:de:0e:f9:84:7a:61:07:44:5d:28:15:24:
a1:b8:ae:f9:d8:07:97:f0:ab:cb:58:55:18:bc:94:
1b:5e:f3:77:0c:e9:8f:4f:0f:22:9e:51:97:a3:9a:
1f:0c:d9:2e:d4:42:7a:f8:3a:0e:a6:29:57:d6:9b:
a1:19:ac:43:71:2b:3b:83:8d:f1:4f:a2:b8:90:38:
63:81:8b:16:51:fd:00:82:01:61:ac:e0:d4:e5:94:
b9:21:e3:0b:00:99:c2:28:1c:69:2f:9b:ac:eb:98:
03:3a:b1:c5:35:87:1c:2d:85:b6:6d:78:a4:ae:c7:
3c:87:54:52:39:43:b7:f8:88:b9:b4:4b:e8:3f:1a:
ec:59:b0:02:77:78:f8:8f:2f:27:02:2e:21:2e:30:
c4:48:8d:23:a1:e5:28:2d:83:36:e8:85:10:33:9c:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:0F:B3:E0:F5:DB:EF:3C:E2:87:64:7E:0E:F1:07:78:B7:05:EE
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/NqoPs-D12-884odkfg7xB3i3Be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:eb04:c::/47
Signature Algorithm: sha256WithRSAEncryption
0d:98:ef:40:b1:88:fb:0b:b5:f6:4e:b8:81:2b:5f:54:33:9b:
31:5a:72:a8:8b:49:a5:b4:e2:70:7c:db:1c:54:e1:c4:c7:cc:
13:62:9d:90:af:fb:4b:c7:65:23:9a:0b:71:48:06:1e:8c:2c:
63:ac:6d:a1:d1:2b:22:be:07:19:65:fe:71:e9:ea:96:74:8e:
82:32:38:94:78:f2:dc:d5:16:1d:a8:1f:0f:be:e0:ff:7a:a3:
b3:b3:8d:2d:78:15:77:35:fa:45:95:91:b4:85:aa:b5:8b:c3:
e3:b1:98:1c:70:68:7b:1e:e7:09:c2:b7:8b:a6:05:2b:2c:7a:
30:9f:c0:52:28:da:c9:63:47:26:64:ad:ee:9c:db:39:02:46:
5f:93:be:b1:d3:ac:7d:90:ee:8c:75:85:2e:19:cc:22:93:c3:
4e:14:b4:7a:fc:7d:1f:a7:95:76:cf:7f:91:17:7e:39:0d:0c:
43:6a:04:e7:36:4d:e7:1e:3a:68:76:2d:f9:72:ca:18:12:ff:
80:11:6d:5f:ca:91:91:f8:b1:8f:3b:c3:fb:74:02:5e:be:d1:
81:01:9a:eb:69:fb:a1:24:13:19:2b:60:11:2a:ba:32:64:b6:
a9:51:1e:12:11:4d:bd:5f:2b:85:50:d9:ac:81:fb:b0:4d:a8:
4a:c9:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:18 2026 by rpki-client