Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/NI385oVhm3QWY8htYFFjFZ1jYzc.roa
File: NI385oVhm3QWY8htYFFjFZ1jYzc.roa (raw, json)
Hash identifier: sk6wuFdZcfLmM6VcAQviz4agp5zQex1ujsQrgI5Apto=
Subject key identifier: 34:8D:FC:E6:85:61:9B:74:16:63:C8:6D:60:51:63:15:9D:63:63:37
Certificate issuer: /CN=a92b26c38b762c9e5499efdff3acd598628beacf
Certificate serial: 019F23690590D5B087B3CE41719B243CCE1A
Authority key identifier: A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/NI385oVhm3QWY8htYFFjFZ1jYzc.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 2001:67c:2350::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:05:90:d5:b0:87:b3:ce:41:71:9b:24:3c:ce:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b26c38b762c9e5499efdff3acd598628beacf
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=348dfce685619b741663c86d605163159d636337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:32:f6:96:41:84:1a:d8:6a:3e:94:93:07:
65:a8:8a:67:2f:9e:73:16:12:8d:de:ad:79:61:0a:
f1:8d:8b:36:01:72:08:22:ce:2e:b6:e4:cb:13:e3:
6d:cb:ec:ee:72:94:72:58:84:ef:be:f9:32:12:11:
e9:7d:07:f3:2e:64:e8:68:8e:56:0e:90:a8:9d:48:
83:ff:85:79:29:97:46:61:d5:41:78:3e:14:db:f4:
e2:0c:d2:fc:c3:d2:6a:6b:1e:28:b6:1c:eb:2c:e3:
34:e8:25:d8:ae:db:80:68:c0:39:2b:ba:f9:a5:58:
73:15:13:3c:c8:f1:a9:12:f1:ab:fe:59:87:e6:16:
f4:05:fe:8c:2d:29:ef:8e:fc:c0:ab:aa:d0:3d:c5:
7f:16:f3:a4:3c:0c:63:d6:fd:a5:96:18:45:db:2d:
1a:6d:73:a3:d1:f3:b9:fc:6b:4e:0f:3d:cb:cf:88:
e5:80:20:9a:45:f6:0d:90:98:9a:7d:73:af:4e:40:
d2:f0:08:66:7f:95:7e:04:c4:16:b1:5a:e8:25:3b:
eb:80:c1:ce:60:5f:f6:77:4d:86:45:26:fe:bd:0e:
ed:37:40:41:04:fe:2b:be:2a:13:46:4f:84:41:59:
f6:d9:26:82:9a:dc:b6:89:26:ac:e1:26:aa:1d:5b:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:FC:E6:85:61:9B:74:16:63:C8:6D:60:51:63:15:9D:63:63:37
X509v3 Authority Key Identifier:
keyid:A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/NI385oVhm3QWY8htYFFjFZ1jYzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2350::/48
Signature Algorithm: sha256WithRSAEncryption
39:1a:eb:83:ab:10:88:74:7f:36:87:09:00:29:3d:37:ce:4a:
db:99:4d:c8:f9:06:b9:99:23:f5:3b:78:74:e4:09:ad:19:32:
37:c5:0f:bb:c0:20:1d:f5:47:d8:a2:45:be:9f:82:64:5f:a8:
2f:23:f7:1c:82:61:5f:86:ff:5a:7b:68:9e:18:d4:03:a8:7e:
84:84:05:52:5d:98:ed:3d:45:62:f8:83:32:c4:8e:78:eb:4e:
b0:0b:40:b1:51:9a:ab:be:8f:ca:05:5f:41:11:06:a7:88:75:
79:a5:9f:5d:a4:45:04:8d:4d:21:0e:75:bc:41:82:e3:10:0d:
ef:a8:8a:f9:ee:ba:0d:fa:47:85:44:f2:e4:dd:8d:0d:74:2e:
35:e9:ad:29:7a:fb:d4:0d:61:11:21:74:b6:21:5a:93:7c:36:
40:2d:23:22:e3:63:54:04:5a:75:2c:b0:ab:29:b5:23:d6:9f:
50:cb:3a:af:53:55:ae:c5:e4:2c:47:46:5e:87:1c:26:cb:62:
a8:6d:d2:52:a4:f6:e5:9b:4d:81:0f:fc:7a:31:2e:4d:2b:60:
5e:26:fa:8c:2a:76:e4:e7:af:54:83:cd:4e:d6:d2:0a:3f:70:
e2:ca:c1:ea:c4:87:af:0f:e3:ea:d1:f5:66:d9:38:0d:97:51:
09:38:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:33 2026 by rpki-client