Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa
File: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (raw, json)
Hash identifier: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=
Subject key identifier: 36:9C:48:19:C3:CD:49:1E:CC:EC:F8:39:0F:10:70:E2:8A:BA:A8:57
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019B7EA6E6368CD3BFCA1ED643CDBEE5608E
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa
Signing time: Fri 02 Jan 2026 12:20:25 +0000
ROA not before: Fri 02 Jan 2026 12:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200924
IP address blocks: 2001:678:5dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:e6:36:8c:d3:bf:ca:1e:d6:43:cd:be:e5:60:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Jan 2 12:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=369c4819c3cd491eccecf8390f1070e28abaa857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:c2:8c:ed:da:1b:01:7d:1c:62:2a:43:21:
07:0d:60:70:04:e3:9d:7c:06:9a:f9:e6:75:fd:9c:
2e:3f:56:85:a0:17:ee:d8:00:2d:73:9c:36:52:1f:
cb:f1:39:87:d3:74:31:78:2d:46:04:18:d1:a7:1b:
28:2d:93:ec:76:fb:f5:15:36:3e:b9:2e:80:18:3a:
e8:49:63:91:fa:c1:40:2b:5b:aa:2c:c2:49:12:03:
5a:e7:4f:2d:b8:ef:f6:b7:4d:22:4e:a1:20:e6:73:
e4:dc:bc:59:ce:72:1b:5a:55:d0:e0:e5:1c:55:b5:
7a:d0:66:25:1b:9e:f6:90:df:d4:3c:02:c8:ac:0d:
e1:68:97:94:f6:c3:d0:f4:f0:88:50:b8:4d:af:8d:
e0:dc:8b:07:7d:5e:c2:fb:bd:6f:73:16:cc:17:80:
3c:47:24:b8:da:64:fb:62:95:c0:5f:d0:0a:9d:ec:
e5:3e:aa:48:6a:f1:df:cf:21:79:98:20:aa:7e:71:
77:cb:6a:19:5a:2d:90:b7:ed:57:ee:80:32:5a:90:
88:0b:f8:94:ff:a7:b0:56:6c:c3:57:03:50:cd:60:
77:0d:3c:09:18:5b:50:0d:f5:46:2b:a8:90:4d:5a:
c8:62:ec:ee:da:04:ec:0f:10:62:c2:f9:bc:d9:b3:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:48:19:C3:CD:49:1E:CC:EC:F8:39:0F:10:70:E2:8A:BA:A8:57
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5dc::/48
Signature Algorithm: sha256WithRSAEncryption
72:f4:25:be:84:0d:fa:a5:f1:97:03:85:3a:de:eb:c9:59:e8:
01:1e:3f:e3:07:45:91:0c:7a:b7:ed:12:89:e7:e2:61:c1:0a:
54:68:93:ab:4d:09:af:8a:86:d2:d6:0a:a4:02:2c:bd:d7:c1:
e2:f3:44:dc:d7:3a:17:66:83:c5:80:fd:bc:ae:ac:be:df:73:
54:a6:97:98:ed:e3:65:9b:5f:be:32:0c:0b:e7:4d:3b:8e:06:
16:8d:4d:4b:7f:81:63:7c:37:31:4c:3e:64:14:87:f9:63:30:
19:27:71:66:f2:a0:23:fe:07:d9:31:7c:40:51:92:68:17:59:
7e:fa:f9:40:b7:4d:2d:2d:c4:8e:ab:77:96:3d:cc:7e:31:b8:
23:41:70:af:5a:4b:e3:c7:be:15:38:e7:5f:5d:29:07:6d:7d:
07:ca:32:03:48:26:12:47:ab:47:f3:30:ef:d5:c5:a5:49:e7:
df:7a:b6:c6:47:4d:ad:5b:3c:5a:55:d0:3f:1f:6c:dc:0a:ae:
5f:04:8f:66:de:39:3a:cb:ab:61:30:41:a2:40:a2:f8:82:cf:
b7:4f:ff:40:4a:f7:fc:22:a3:40:9b:97:96:d5:22:8f:b2:68:
c7:c1:84:d0:dd:51:3c:41:58:39:f8:85:52:55:0e:78:0b:43:
95:11:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:01:14 2026 by rpki-client