Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/naHckrSlqfOXoEYuqHvDFPuIvmo.roa
File: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (raw, json)
Hash identifier: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=
Subject key identifier: 9D:A1:DC:92:B4:A5:A9:F3:97:A0:46:2E:A8:7B:C3:14:FB:88:BE:6A
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019C8ABD9818A954D9F4BFD84FCE5E64F84F
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/naHckrSlqfOXoEYuqHvDFPuIvmo.roa
Signing time: Mon 23 Feb 2026 13:43:26 +0000
ROA not before: Mon 23 Feb 2026 13:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213586
IP address blocks: 2001:67c:2670::/48 maxlen: 48
2001:67c:27b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:bd:98:18:a9:54:d9:f4:bf:d8:4f:ce:5e:64:f8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Feb 23 13:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9da1dc92b4a5a9f397a0462ea87bc314fb88be6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:de:07:ed:f6:c1:42:4d:fd:ab:6b:b4:b2:
70:5a:eb:69:ef:96:89:27:a5:5a:4d:1d:3f:fe:fe:
19:4b:ff:c1:bd:25:a2:36:29:dc:c0:4c:8d:fe:52:
21:5a:2f:80:ed:ba:b6:ae:2a:6f:08:9b:34:09:1c:
82:25:bf:0b:f0:5c:60:57:fa:e4:c4:66:1c:4a:93:
b0:fc:d7:87:83:50:b6:a7:9b:69:43:18:b5:6f:30:
ca:29:a0:6d:8a:3c:0e:cb:5a:22:ae:aa:b4:da:47:
19:21:27:5f:00:78:44:88:81:82:24:08:b4:31:76:
49:d9:af:bb:0d:46:0c:24:6c:fb:75:91:15:2f:c9:
83:49:0f:c8:02:98:27:39:85:97:6e:47:a2:98:f8:
c7:0f:4b:2f:a1:25:51:90:90:b1:51:86:dc:f4:38:
fb:3a:a5:5a:c9:f9:54:3f:4f:08:86:6f:8b:ce:93:
2c:42:6d:f3:05:16:38:7b:ce:2c:4d:f1:b5:08:57:
b8:bf:84:48:7f:8a:67:c2:2c:0d:f3:4a:b6:31:98:
47:05:e8:cf:dc:da:e1:b7:33:f2:4d:b9:e1:79:e5:
a9:75:8c:21:96:b7:14:72:44:3f:e0:ba:24:f4:b9:
9c:0b:da:fb:ee:6b:ba:65:16:d9:ba:ca:ca:6b:4f:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:DC:92:B4:A5:A9:F3:97:A0:46:2E:A8:7B:C3:14:FB:88:BE:6A
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/naHckrSlqfOXoEYuqHvDFPuIvmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2670::/48
2001:67c:27b0::/48
Signature Algorithm: sha256WithRSAEncryption
61:16:54:82:b8:58:f2:3a:51:49:e6:8b:44:40:35:3a:e7:1c:
a1:dd:d7:80:62:99:2e:07:4f:49:53:ec:01:4c:60:34:88:ca:
e4:63:6c:2f:71:27:90:ea:dc:99:7a:07:ff:33:4f:31:37:5c:
dd:34:59:d8:eb:d6:44:ba:dd:cd:1c:e5:a0:7e:8e:49:8c:db:
1c:cd:2d:1c:66:4d:74:94:9d:fa:84:bb:12:9a:3b:ff:fd:42:
9b:58:e4:ee:b6:f2:4c:81:4e:82:7e:e6:9c:14:5e:ce:4e:93:
5d:d9:67:bb:ff:24:7e:e1:43:ad:f8:e2:37:4a:16:d2:ce:30:
99:5b:4b:b0:aa:be:ae:07:77:18:9c:9f:de:00:9a:df:89:31:
b7:9d:94:d5:50:90:b8:c8:2b:81:d0:a5:e0:18:ff:3e:8e:76:
d6:24:a3:76:67:fa:92:8a:ad:26:f8:28:2a:11:36:a4:bd:b8:
90:ef:0b:19:03:a6:6e:7d:e5:7c:19:d2:26:d1:eb:37:6d:a9:
72:1d:63:c0:ed:63:9f:3f:ed:b3:3f:89:ac:94:e4:34:cf:cf:
35:46:03:d8:a7:ad:35:e1:17:b7:fd:7a:a4:b0:f8:be:74:1d:
e7:b5:d5:e6:24:33:4a:fe:04:94:6d:9b:d6:11:81:37:0c:de:
6c:56:a2:cb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZyKvZgYqVTZ9L/YT85eZPhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBkZDI0NmY0MmI3YjM2NjgwNGNlOGQ4MDg0YWQzOTNk
MjFjNjMwHhcNMjYwMjIzMTM0MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGExZGM5MmI0YTVhOWYzOTdhMDQ2MmVhODdiYzMxNGZiODhiZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNTeB+32wUJN/atrtLJwWutp75aJ
J6VaTR0//v4ZS//BvSWiNincwEyN/lIhWi+A7bq2ripvCJs0CRyCJb8L8FxgV/rk
xGYcSpOw/NeHg1C2p5tpQxi1bzDKKaBtijwOy1oirqq02kcZISdfAHhEiIGCJAi0
MXZJ2a+7DUYMJGz7dZEVL8mDSQ/IApgnOYWXbkeimPjHD0svoSVRkJCxUYbc9Dj7
OqVayflUP08Ihm+LzpMsQm3zBRY4e84sTfG1CFe4v4RIf4pnwiwN80q2MZhHBejP
3NrhtzPyTbnheeWpdYwhlrcUckQ/4Lok9LmcC9r77mu6ZRbZusrKa09pPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ2h3JK0panzl6BGLqh7wxT7iL5qMB8GA1UdIwQY
MBaAFNsw3SRvQrezZoBM6NgIStOT0hxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZThjNWEtZWZkNy00MDM3LThmMGYt
N2IwY2UzMjZiZGVhLzEvbmFIY2tyU2xxZk9Yb0VZdXFIdkRGUHVJdm1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ZThjNWEtZWZkNy00MDM3LThmMGYtN2IwY2UzMjZiZGVh
LzEvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfCZw
AwcAIAEGfCewMA0GCSqGSIb3DQEBCwUAA4IBAQBhFlSCuFjyOlFJ5otEQDU65xyh
3deAYpkuB09JU+wBTGA0iMrkY2wvcSeQ6tyZegf/M08xN1zdNFnY69ZEut3NHOWg
fo5JjNsczS0cZk10lJ36hLsSmjv//UKbWOTutvJMgU6CfuacFF7OTpNd2We7/yR+
4UOt+OI3ShbSzjCZW0uwqr6uB3cYnJ/eAJrfiTG3nZTVUJC4yCuB0KXgGP8+jnbW
JKN2Z/qSiq0m+CgqETakvbiQ7wsZA6ZufeV8GdIm0es3balyHWPA7WOfP+2zP4ms
lOQ0z881RgPYp6014Re3/XqksPi+dB3ntdXmJDNK/gSUbZvWEYE3DN5sVqLL
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:40:16 2026 by rpki-client