Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/Nt0mcB8A0d__UowWBxdSbWsaTd4.roa
File: Nt0mcB8A0d__UowWBxdSbWsaTd4.roa (raw, json)
Hash identifier: QVTiG0+ASuYbCz7n6L1CCp82a69UF3h6/hvCYlBXr9A=
Subject key identifier: 36:DD:26:70:1F:00:D1:DF:FF:52:8C:16:07:17:52:6D:6B:1A:4D:DE
Certificate issuer: /CN=d28157adab5688ace3562e2efde59beb5ae108ab
Certificate serial: 019F2368783BBFD93361575C6D7B0AF45B7B
Authority key identifier: D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/Nt0mcB8A0d__UowWBxdSbWsaTd4.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199156
IP address blocks: 2001:678:1248::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:78:3b:bf:d9:33:61:57:5c:6d:7b:0a:f4:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28157adab5688ace3562e2efde59beb5ae108ab
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36dd26701f00d1dfff528c160717526d6b1a4dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:8e:c1:c3:3f:63:b7:93:8b:21:5b:0e:77:
44:17:4c:22:3a:74:8d:f9:74:4f:c1:38:13:0d:2e:
1c:a3:dc:51:64:b3:61:b9:66:7c:26:f5:28:63:10:
13:b4:bc:a0:cf:3c:18:83:84:c9:94:8b:65:a4:b9:
2d:a2:48:61:f0:89:82:26:bc:42:70:28:e5:fb:7d:
5b:85:bd:e5:bc:ec:4c:7d:dd:84:e9:10:c7:c5:f6:
10:3a:69:74:fb:62:a9:9e:5b:5e:d7:32:b5:13:2c:
9a:a4:c0:b4:3d:95:d9:44:56:9d:fd:f1:88:4c:37:
82:ea:87:16:7d:84:09:8e:62:91:25:b4:d2:63:bb:
b0:38:3d:45:fd:e8:84:d0:48:2a:72:be:7e:4d:b2:
c8:82:65:a3:b0:b6:ca:f0:2b:df:61:36:16:9b:ca:
98:40:1a:02:b4:25:51:d6:bc:45:0d:98:d3:07:37:
b0:b8:c2:c2:1f:d9:75:57:c5:ba:e3:9f:09:d0:da:
a5:b9:f4:53:37:e9:60:67:e4:a4:08:97:f5:80:96:
c3:f0:28:48:6e:ea:9b:d7:09:3f:e4:25:14:6c:f9:
38:90:6f:30:2d:90:c2:e1:28:b8:76:a9:f7:62:c4:
7d:cd:b3:a2:81:3b:fd:2e:f4:87:36:f7:8d:bc:63:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DD:26:70:1F:00:D1:DF:FF:52:8C:16:07:17:52:6D:6B:1A:4D:DE
X509v3 Authority Key Identifier:
keyid:D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/Nt0mcB8A0d__UowWBxdSbWsaTd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1248::/48
Signature Algorithm: sha256WithRSAEncryption
8b:48:64:aa:30:26:10:39:f4:60:ad:01:fe:fb:a6:84:1a:05:
e1:96:3a:73:9e:d5:29:5c:39:fc:9a:94:87:34:22:08:eb:1a:
25:f2:0b:53:5f:2a:10:65:3e:7f:bf:85:cf:1f:ca:d3:65:25:
f6:fa:23:a6:d2:c0:3b:d3:ce:6e:a3:17:0f:bd:f0:2b:fc:28:
0f:4d:33:f2:1d:57:59:b7:97:80:22:57:97:a3:e0:1d:b8:27:
e1:46:0e:ed:87:44:b2:23:f9:41:d9:f5:8b:0b:8e:91:ce:73:
d5:71:b9:ee:80:b4:b9:a3:10:ec:b7:51:81:07:14:c6:11:3e:
2c:6d:bc:54:ff:3c:f5:a3:04:9f:05:23:5e:ba:61:9f:7e:56:
80:7d:4f:e4:94:8c:43:4a:50:c5:2d:83:e7:20:3e:56:79:2e:
ed:9f:e3:b1:c1:b5:60:b9:03:f2:d4:76:a0:5e:9a:e9:79:ca:
ac:12:c4:73:da:ec:3c:5d:56:d8:a5:dd:0b:1d:a3:16:b8:40:
db:65:5c:f0:a2:db:e1:42:12:11:fb:39:91:4d:4d:ed:da:42:
3a:68:8d:aa:aa:19:c3:66:63:a5:0c:45:11:0e:3c:a4:86:31:
7c:0f:63:3b:48:fe:5e:73:09:4f:04:be:40:4d:0b:a1:34:71:
b7:10:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:36 2026 by rpki-client