Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b00361-dd56-456b-9e29-c410a38f26b0/1/NvFtLPKG7BAfCZX1huDXX3aff-8.roa
File: NvFtLPKG7BAfCZX1huDXX3aff-8.roa (raw, json)
Hash identifier: lgMA4TB3m4pBtQzeu3nzrpD74pRc4gUN0hMMap9cWzg=
Subject key identifier: 36:F1:6D:2C:F2:86:EC:10:1F:09:95:F5:86:E0:D7:5F:76:9F:7F:EF
Certificate issuer: /CN=e520bda3f4c881eb878084c7f575a7af43a819b0
Certificate serial: 01A10DBC2559BFF9E29CA2D2D06EEF1DB000
Authority key identifier: E5:20:BD:A3:F4:C8:81:EB:87:80:84:C7:F5:75:A7:AF:43:A8:19:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SC9o_TIgeuHgITH9XWnr0OoGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b00361-dd56-456b-9e29-c410a38f26b0/1/NvFtLPKG7BAfCZX1huDXX3aff-8.roa
Signing time: Mon 05 Oct 2026 20:23:16 +0000
ROA not before: Mon 05 Oct 2026 20:23:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200153
IP address blocks: 2001:678:11cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b00361-dd56-456b-9e29-c410a38f26b0/1/5SC9o_TIgeuHgITH9XWnr0OoGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b00361-dd56-456b-9e29-c410a38f26b0/1/5SC9o_TIgeuHgITH9XWnr0OoGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SC9o_TIgeuHgITH9XWnr0OoGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:bc:25:59:bf:f9:e2:9c:a2:d2:d0:6e:ef:1d:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520bda3f4c881eb878084c7f575a7af43a819b0
Validity
Not Before: Oct 5 20:23:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f16d2cf286ec101f0995f586e0d75f769f7fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:a7:78:9f:fc:cb:1b:b2:70:5a:8c:0e:4c:
e3:1e:14:5f:f7:dc:48:5d:9e:a0:19:a0:8d:b3:a5:
a9:70:dd:a5:78:12:aa:55:db:90:e6:d4:25:e6:ea:
4f:93:5a:9b:c5:8f:80:99:99:ad:e8:ed:9c:44:11:
0d:c1:bd:0e:82:c6:45:ae:12:ca:47:58:35:4d:5d:
4c:39:a7:bd:7f:94:f8:af:73:67:f0:92:62:fa:f2:
b6:8d:8a:4b:b1:bc:ec:7f:62:13:ac:e3:f9:a3:18:
72:2a:1a:7e:3d:31:94:65:a7:19:12:35:bf:b2:45:
91:74:cd:58:26:fa:4c:7c:15:b1:2c:ea:e0:f5:34:
92:9e:fa:8d:eb:31:e0:35:49:4f:4e:69:42:80:64:
84:b2:03:57:fa:a6:cc:15:2a:31:03:94:ad:80:c1:
f3:8d:a4:b5:fe:ea:bc:e4:ce:39:15:cb:71:cb:f4:
7a:97:40:c0:41:19:ad:bc:b1:3d:38:8d:a6:f5:e5:
eb:ca:50:b5:8a:22:db:6b:13:d3:2f:ad:39:f6:62:
39:ab:67:f4:ec:00:e2:e3:b4:cb:e9:19:4d:3c:6e:
60:8f:78:b8:20:7b:b1:87:02:47:04:f8:9d:21:2b:
3a:ba:9f:8c:c9:be:b0:b6:08:63:7a:c1:c9:5b:d6:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:6D:2C:F2:86:EC:10:1F:09:95:F5:86:E0:D7:5F:76:9F:7F:EF
X509v3 Authority Key Identifier:
keyid:E5:20:BD:A3:F4:C8:81:EB:87:80:84:C7:F5:75:A7:AF:43:A8:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SC9o_TIgeuHgITH9XWnr0OoGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b00361-dd56-456b-9e29-c410a38f26b0/1/NvFtLPKG7BAfCZX1huDXX3aff-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b00361-dd56-456b-9e29-c410a38f26b0/1/5SC9o_TIgeuHgITH9XWnr0OoGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11cc::/48
Signature Algorithm: sha256WithRSAEncryption
21:2e:7b:c1:28:ce:76:82:f4:df:7e:83:41:87:59:95:15:ac:
8e:77:7a:42:0f:bb:fd:6f:a0:a7:1f:86:29:4c:2a:32:39:1b:
41:d5:7c:80:6b:6a:11:96:cc:d5:e3:f6:5d:3c:fb:ca:00:c3:
bd:10:44:27:9c:fa:6c:bc:60:88:07:4d:fe:86:e2:9f:9c:0d:
b0:15:3f:f0:5e:83:6d:39:d1:d7:a7:8c:fe:d2:10:17:7c:47:
3e:ed:59:b3:a7:7d:bc:cd:6d:b8:1c:6c:78:aa:76:4d:11:bf:
25:30:49:63:0e:f0:4f:8c:69:14:56:5a:47:17:81:8f:d1:cb:
e0:17:65:73:9e:b1:e0:7a:44:01:0d:b5:2f:2e:94:73:b4:86:
4f:69:e3:0d:e9:b6:98:d0:68:9e:18:f8:03:b8:30:5b:44:be:
86:53:fd:c7:29:23:83:11:29:a4:c8:91:32:1e:da:61:c8:5b:
9c:1e:b6:91:25:b3:95:37:92:f2:a8:9d:97:ca:ee:16:2c:f4:
2f:03:1f:d2:d8:1c:bc:2b:33:d9:6a:04:c3:83:e1:2d:2f:7f:
47:65:2a:a7:aa:e7:b2:dd:ba:6f:74:bc:ae:fb:b9:a2:8b:87:
30:0b:e8:f5:57:75:ed:db:9a:10:51:d1:88:81:41:c3:95:4a:
d0:94:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:44 2026 by rpki-client