Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/nvHFdQhGjIF8_XxD4R0HZRiX5B8.roa
File: nvHFdQhGjIF8_XxD4R0HZRiX5B8.roa (raw, json)
Hash identifier: EmlYWZcAlYHSpapohyP1+VGERIt8M4KObJ/WmSOPzJY=
Subject key identifier: 9E:F1:C5:75:08:46:8C:81:7C:FD:7C:43:E1:1D:07:65:18:97:E4:1F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A061DC45D4475DBAB053617A44C011956D
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/nvHFdQhGjIF8_XxD4R0HZRiX5B8.roa
Signing time: Wed 02 Sep 2026 11:23:40 +0000
ROA not before: Wed 02 Sep 2026 11:23:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218778
IP address blocks: 2a03:5840:162::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:dc:45:d4:47:5d:ba:b0:53:61:7a:44:c0:11:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 2 11:23:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ef1c57508468c817cfd7c43e11d07651897e41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:6f:26:86:45:db:72:06:ba:12:14:87:a7:
5b:df:ff:d4:f0:0c:a5:5d:a0:3f:29:7a:38:98:33:
f0:4a:7e:34:68:3f:95:bd:e0:0a:1e:5b:7d:31:9d:
e6:1a:89:3a:3a:5a:f6:6d:7a:b4:c9:77:0f:f2:97:
9c:8e:08:12:07:89:7e:d9:b7:23:e5:01:48:5b:3d:
2c:fd:6c:7a:a2:13:79:e1:94:ff:ab:98:bd:af:74:
e4:52:b7:23:03:9d:e2:e3:50:3c:5d:96:7f:fd:bc:
6c:d9:46:50:a0:06:a7:3a:ba:24:09:9b:fd:94:6e:
e9:ff:5f:3b:58:78:3a:db:13:77:91:c5:cc:8c:9e:
6e:fb:2d:ca:53:b6:af:75:fa:ef:03:32:d4:f6:d0:
f0:db:b6:bf:63:0a:38:04:9d:9e:7e:e3:7d:10:a8:
ec:45:ee:d0:f4:30:2b:b4:76:49:f0:bf:fc:de:e9:
45:14:5a:a2:08:7e:3c:be:6f:46:6f:55:08:3e:b4:
18:c2:78:ae:03:7c:f9:25:0e:35:71:49:5a:b8:61:
c3:6a:ea:00:f8:32:85:2c:79:30:50:b3:ea:74:b3:
06:a6:05:e7:4a:ef:20:3f:d4:72:84:c8:39:21:ec:
e2:ad:3a:54:44:3e:b3:ad:d0:fd:75:79:d1:27:6d:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:C5:75:08:46:8C:81:7C:FD:7C:43:E1:1D:07:65:18:97:E4:1F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/nvHFdQhGjIF8_XxD4R0HZRiX5B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:162::/48
Signature Algorithm: sha256WithRSAEncryption
a8:29:78:66:f4:52:33:a2:4c:d4:38:71:ff:09:c0:20:b5:7c:
15:2e:ef:12:69:f9:90:1c:42:a4:2a:2c:47:a1:fc:7e:68:b4:
1c:8e:b9:52:14:1a:e6:58:0f:3d:7b:cb:5a:5f:d8:2b:c2:24:
a9:f0:06:e9:fa:fa:fb:f1:b0:2c:70:1f:39:33:34:5d:62:86:
c1:8e:e9:7d:57:bd:31:1e:50:67:a8:6b:50:2d:cd:14:34:d9:
71:80:64:bc:ec:d7:44:06:29:4c:70:2b:6f:ff:d5:23:7a:99:
66:08:17:13:e3:be:3d:15:3d:5a:96:04:9d:de:43:3c:2b:be:
bc:6d:0b:7a:d3:4f:68:21:44:db:25:05:21:d6:e6:3c:2e:f4:
87:c9:ea:1c:b6:e8:f4:a5:0c:8b:22:d9:2e:f4:56:84:0a:9b:
7c:f7:41:5f:85:2c:7e:21:25:e9:5b:1a:2e:ec:3e:1d:e2:bf:
b8:49:48:09:f8:f3:27:07:95:b5:1e:d9:a2:37:79:45:73:57:
f4:bd:54:36:cc:e7:db:c2:00:63:21:40:d4:47:f5:6c:d4:7b:
da:42:1a:fc:26:33:7e:8c:61:be:43:d3:30:fd:de:af:c5:61:
44:05:38:2a:75:86:44:fb:40:8b:fc:d4:52:20:17:69:d0:0e:
db:39:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:27:51 2026 by rpki-client