Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/ngLMmxH0mPtVIvwYWTm6j10aGug.roa
File: ngLMmxH0mPtVIvwYWTm6j10aGug.roa (raw, json)
Hash identifier: 5O9pM5+qJGLp748CK2y1c41DjZSF+u/cMKka4rHjVh8=
Subject key identifier: 9E:02:CC:9B:11:F4:98:FB:55:22:FC:18:59:39:BA:8F:5D:1A:1A:E8
Certificate issuer: /CN=e0d947b3ee6c929c8e34bfd1fa0dc87c6910369d
Certificate serial: 01A07DBCCD201BCD0DF007656F203D4328AE
Authority key identifier: E0:D9:47:B3:EE:6C:92:9C:8E:34:BF:D1:FA:0D:C8:7C:69:10:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NlHs-5skpyONL_R-g3IfGkQNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/ngLMmxH0mPtVIvwYWTm6j10aGug.roa
Signing time: Mon 07 Sep 2026 21:18:40 +0000
ROA not before: Mon 07 Sep 2026 21:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218752
IP address blocks: 2a13:3580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NlHs-5skpyONL_R-g3IfGkQNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:bc:cd:20:1b:cd:0d:f0:07:65:6f:20:3d:43:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d947b3ee6c929c8e34bfd1fa0dc87c6910369d
Validity
Not Before: Sep 7 21:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e02cc9b11f498fb5522fc185939ba8f5d1a1ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:6f:87:be:4e:da:b2:94:8d:f0:55:50:64:
52:a4:d0:b2:c1:bd:85:68:d9:6f:0e:ab:da:18:76:
10:75:02:85:7e:86:51:01:36:79:05:b4:c1:63:72:
cd:a1:09:58:a5:01:d4:b4:2e:97:6c:0a:96:db:5d:
35:f8:3c:41:46:48:ef:b9:ef:85:e9:c2:a8:75:4d:
a9:d2:25:57:0a:ac:cb:af:8e:21:ce:ba:89:96:d8:
f2:9e:4f:ec:f8:53:f9:f2:d2:55:f5:35:17:2a:cc:
c5:24:44:06:24:16:e2:7e:ab:ae:5e:0e:52:26:41:
93:a4:c0:c1:21:7e:2c:f8:82:68:f4:d7:16:b8:22:
26:03:38:57:88:c4:cd:60:76:67:59:75:1f:7a:d0:
3f:8d:3b:62:0c:08:99:6f:29:ae:f5:b1:38:0b:7d:
8f:0c:3b:78:fe:9a:d4:f9:24:bb:86:9a:7c:e8:5b:
51:25:3e:a0:b5:d0:be:c3:e8:04:f4:3d:3a:d3:2a:
5d:15:48:6e:5b:8d:55:86:90:67:b7:c1:af:82:fa:
ee:5d:32:6e:3b:57:bb:5d:26:59:b5:ac:96:79:f6:
75:99:bd:e0:ba:e7:ef:66:9d:87:a8:36:bc:8c:dd:
f0:7d:b8:8c:7e:e5:63:fa:94:7a:a2:6b:8b:b3:68:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:02:CC:9B:11:F4:98:FB:55:22:FC:18:59:39:BA:8F:5D:1A:1A:E8
X509v3 Authority Key Identifier:
keyid:E0:D9:47:B3:EE:6C:92:9C:8E:34:BF:D1:FA:0D:C8:7C:69:10:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NlHs-5skpyONL_R-g3IfGkQNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/ngLMmxH0mPtVIvwYWTm6j10aGug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3580::/48
Signature Algorithm: sha256WithRSAEncryption
40:bb:08:d7:0a:e1:b6:3f:63:2f:8c:a5:4f:0c:71:ec:f8:d7:
d3:41:d2:98:4b:51:97:d2:6f:e8:70:c5:1a:b2:ed:0d:06:ae:
97:11:73:ca:bd:cd:fd:81:40:75:eb:97:1c:8c:c4:14:a7:88:
07:86:ac:c9:95:07:68:52:1d:06:80:cb:69:a0:e6:d6:79:a2:
05:ed:be:16:e5:61:04:75:f8:69:0f:dd:9f:fa:12:b5:44:68:
41:87:a0:fe:6d:3f:4b:41:6b:0c:77:5f:a8:6c:b7:2c:32:07:
d3:b1:ca:45:b3:2f:fc:92:ee:ac:42:24:f9:da:62:94:6f:6b:
71:09:24:f1:4f:50:2e:3a:5f:1f:50:7b:3e:0f:c1:60:84:1d:
dc:8b:ad:a8:e9:98:d7:69:05:81:e5:d8:1d:e5:64:23:30:67:
7a:f3:5c:d5:59:49:d3:27:7d:39:82:6f:f4:ae:e6:d2:a5:95:
9f:ae:9b:cd:dc:dc:2d:6e:05:b1:94:b0:54:11:62:1f:b7:2d:
0d:b7:88:39:9a:ea:b4:20:b6:84:9e:6c:ed:65:ca:a7:47:33:
87:5f:41:df:8f:88:66:94:ad:5b:b4:6b:81:72:b4:76:58:d4:
db:57:45:9e:e6:af:43:fa:a3:df:40:c5:80:36:21:e1:bf:1d:
6b:0c:d6:8e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaB9vM0gG80N8AdlbyA9QyiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDk0N2IzZWU2YzkyOWM4ZTM0YmZkMWZhMGRjODdjNjkx
MDM2OWQwHhcNMjYwOTA3MjExODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTAyY2M5YjExZjQ5OGZiNTUyMmZjMTg1OTM5YmE4ZjVkMWExYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaVvh75O2rKUjfBVUGRSpNCywb2F
aNlvDqvaGHYQdQKFfoZRATZ5BbTBY3LNoQlYpQHUtC6XbAqW2101+DxBRkjvue+F
6cKodU2p0iVXCqzLr44hzrqJltjynk/s+FP58tJV9TUXKszFJEQGJBbifquuXg5S
JkGTpMDBIX4s+IJo9NcWuCImAzhXiMTNYHZnWXUfetA/jTtiDAiZbymu9bE4C32P
DDt4/prU+SS7hpp86FtRJT6gtdC+w+gE9D060ypdFUhuW41VhpBnt8GvgvruXTJu
O1e7XSZZtayWefZ1mb3guufvZp2HqDa8jN3wfbiMfuVj+pR6omuLs2jtCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ4CzJsR9Jj7VSL8GFk5uo9dGhroMB8GA1UdIwQY
MBaAFODZR7PubJKcjjS/0foNyHxpEDadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5sSHMtNXNrcHlPTkxfUi1nM0lmR2tRTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NzIxYmYtZmVhMS00NjJhLWI4MjQt
NjI0MTlmN2RjOGVkLzEvbmdMTW14SDBtUHRWSXZ3WVdUbTZqMTBhR3VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81NzIxYmYtZmVhMS00NjJhLWI4MjQtNjI0MTlmN2RjOGVk
LzEvNE5sSHMtNXNrcHlPTkxfUi1nM0lmR2tRTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhM1gAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBAuwjXCuG2P2MvjKVPDHHs+NfTQdKYS1GX0m/o
cMUasu0NBq6XEXPKvc39gUB165ccjMQUp4gHhqzJlQdoUh0GgMtpoObWeaIF7b4W
5WEEdfhpD92f+hK1RGhBh6D+bT9LQWsMd1+obLcsMgfTscpFsy/8ku6sQiT52mKU
b2txCSTxT1AuOl8fUHs+D8FghB3ci62o6ZjXaQWB5dgd5WQjMGd681zVWUnTJ305
gm/0rubSpZWfrpvN3NwtbgWxlLBUEWIfty0Nt4g5muq0ILaEnmztZcqnRzOHX0Hf
j4hmlK1btGuBcrR2WNTbV0We5q9D+qPfQMWANiHhvx1rDNaO
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:21:24 2026 by rpki-client