Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/nwLLLJnWeUevVC1axaBKhwaHn44.roa
File: nwLLLJnWeUevVC1axaBKhwaHn44.roa (raw, json)
Hash identifier: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=
Subject key identifier: 9F:02:CB:2C:99:D6:79:47:AF:54:2D:5A:C5:A0:4A:87:06:87:9F:8E
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F8CBE67FBAC0CDEE00A1A436A77E
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/nwLLLJnWeUevVC1axaBKhwaHn44.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57010
IP address blocks: 2a04:ac00:4::/48 maxlen: 48
2a04:ac00:5::/48 maxlen: 48
2a04:ac00:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:cb:e6:7f:ba:c0:cd:ee:00:a1:a4:36:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f02cb2c99d67947af542d5ac5a04a8706879f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:9e:58:25:c7:4f:be:8d:29:83:47:9e:2e:
77:e6:03:13:32:fa:8e:7c:98:62:72:d8:de:1d:76:
bf:e4:89:65:f4:5e:7f:3a:f8:66:bd:52:ce:2c:62:
58:39:b1:de:57:81:e5:52:7e:36:ad:61:98:6f:21:
6e:8b:47:d3:af:bb:8c:79:17:8f:1e:db:3c:c3:e1:
9a:b2:5b:80:fb:9b:26:2e:9c:ee:79:97:74:ff:5f:
ba:0c:05:aa:56:da:fe:6b:a0:01:e2:c8:1c:5c:59:
6b:20:32:a3:e2:8a:77:02:b7:35:de:5b:55:4b:ad:
02:a4:75:d2:7f:85:6d:cc:70:82:47:e4:5e:52:e6:
21:b4:16:86:ff:e5:7a:56:8f:32:9f:e1:02:2f:66:
ae:05:7a:e4:1e:9c:90:44:40:15:2f:56:f6:bc:a1:
16:df:b2:2f:21:1b:3e:20:5f:ad:1c:bc:f4:2c:15:
a7:b7:7f:e9:26:d4:4f:00:be:be:15:51:89:74:19:
24:fb:6a:07:92:26:27:ab:dd:0f:47:8f:91:75:4c:
20:2c:dc:62:af:5a:ef:8a:68:e8:85:0b:a7:85:7e:
7b:2a:fa:7b:ab:b3:3a:58:0b:60:bd:83:1e:04:56:
8c:75:e3:d5:ef:53:1d:1c:43:19:24:1a:e4:c5:96:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:CB:2C:99:D6:79:47:AF:54:2D:5A:C5:A0:4A:87:06:87:9F:8E
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/nwLLLJnWeUevVC1axaBKhwaHn44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:4::/47
2a04:ac00:8::/48
Signature Algorithm: sha256WithRSAEncryption
10:3b:88:92:fe:d0:86:fc:45:b9:cd:48:de:4e:3c:02:7e:ad:
df:6c:b9:95:09:ad:67:91:b6:95:c5:d8:10:c3:90:e3:e7:18:
62:7d:c8:32:19:93:e0:3b:e1:e1:fd:81:99:38:03:2b:a9:32:
af:8e:30:91:14:3f:9b:42:60:1a:61:e4:2b:5a:c9:08:3e:ae:
19:50:a7:77:5b:6f:e2:14:f7:2e:e8:2c:40:7f:2b:21:82:4c:
43:92:a6:55:56:7f:2d:14:fb:a6:6b:e2:fa:0f:cf:59:8b:12:
57:6f:5c:93:82:a2:78:db:31:a1:2d:71:49:3b:43:f1:c9:d4:
7c:a5:70:b6:36:cf:85:e5:f3:f1:fc:eb:ce:86:7a:4f:4b:8b:
10:e6:21:65:36:1e:84:7e:68:8c:00:65:0e:a2:71:bf:dc:6b:
c8:6c:b5:75:91:e0:11:9b:cd:a8:cc:82:19:e7:a5:9b:e9:19:
9c:30:6c:01:c2:48:28:9c:1a:fc:b3:33:5d:50:c8:d0:2a:26:
46:bc:85:af:a6:53:b8:83:0a:56:59:e9:08:e1:7c:7b:b2:b5:
ed:5b:9d:f0:94:4a:e0:9b:a8:d2:3e:31:1a:f9:54:48:07:75:
5b:18:d1:b7:6a:c3:7c:e0:8d:fb:7d:c4:7d:f4:5b:97:fb:27:
0c:45:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:08 2026 by rpki-client