Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/NxeipGArWGFx3nJyWYjijHLHvhk.roa
File: NxeipGArWGFx3nJyWYjijHLHvhk.roa (raw, json)
Hash identifier: P+/eedlf2B9eBVhLec/DrdXv5N9eI8xxxwGjkmTVQUg=
Subject key identifier: 37:17:A2:A4:60:2B:58:61:71:DE:72:72:59:88:E2:8C:72:C7:BE:19
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019F6ABB9754104F0A8B39FD8BB2954384D3
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/NxeipGArWGFx3nJyWYjijHLHvhk.roa
Signing time: Thu 16 Jul 2026 11:41:46 +0000
ROA not before: Thu 16 Jul 2026 11:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3573
IP address blocks: 2a02:ee80:404a::/47 maxlen: 47
2a02:ee80:404a::/48 maxlen: 48
2a02:ee80:404b::/48 maxlen: 48
2a02:ee80:4066::/47 maxlen: 47
2a02:ee80:4066::/48 maxlen: 48
2a02:ee80:4067::/48 maxlen: 48
2a02:ee80:415c::/47 maxlen: 47
2a02:ee80:4170::/47 maxlen: 47
2a02:ee80:4170::/48 maxlen: 48
2a02:ee80:4171::/48 maxlen: 48
2a02:ee80:41a8::/47 maxlen: 47
2a02:ee80:42d4::/47 maxlen: 47
2a02:ee80:4354::/47 maxlen: 47
2a02:ee80:4354::/48 maxlen: 48
2a02:ee80:4355::/48 maxlen: 48
2a02:ee80:437e::/47 maxlen: 47
2a02:ee80:437e::/48 maxlen: 48
2a02:ee80:437f::/48 maxlen: 48
2a02:ee80:4394::/47 maxlen: 47
2a02:ee80:4394::/48 maxlen: 48
2a02:ee80:4395::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:bb:97:54:10:4f:0a:8b:39:fd:8b:b2:95:43:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jul 16 11:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3717a2a4602b586171de72725988e28c72c7be19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:b8:ea:58:f3:09:bf:b0:36:46:37:42:80:
0b:43:fd:6e:e8:7e:e5:e4:62:6f:0d:f9:0f:cd:38:
2a:55:dd:0a:57:c3:1a:98:d3:0e:ca:91:38:9f:b8:
93:0e:2e:22:30:79:44:71:9c:c3:a7:75:93:45:c8:
33:0f:d2:6d:74:a2:69:53:7d:f9:a2:74:53:19:3b:
e4:2c:a8:c9:ad:7f:35:70:b6:00:82:0f:8c:7c:2c:
e7:ec:07:7c:1b:1f:60:7f:47:25:5f:af:76:4e:ac:
37:02:58:27:55:dd:87:d8:55:a6:68:dc:1a:2a:56:
86:e1:b1:88:fd:76:0b:64:84:e3:a8:8f:b2:c4:d0:
c8:3b:98:ca:5b:e9:e1:5f:8c:45:c4:37:0d:d5:af:
2c:e1:0f:ec:64:bd:74:34:2d:23:89:fc:e4:ed:c8:
02:a5:4e:18:2a:d9:8c:d1:9b:86:15:09:84:e1:86:
59:8d:0a:28:94:e5:2a:ca:b5:65:e9:4f:e6:78:d2:
43:cf:e1:27:3b:a2:2d:43:dd:f2:96:4e:49:b3:6a:
6f:43:28:e5:87:08:f4:bb:f0:49:e4:73:82:e7:f4:
09:de:d5:af:69:b1:fa:bd:21:ce:44:de:4d:e1:63:
a6:d2:20:a1:3d:17:d5:d4:0b:34:26:16:af:b4:5f:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:A2:A4:60:2B:58:61:71:DE:72:72:59:88:E2:8C:72:C7:BE:19
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/NxeipGArWGFx3nJyWYjijHLHvhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:404a::/47
2a02:ee80:4066::/47
2a02:ee80:415c::/47
2a02:ee80:4170::/47
2a02:ee80:41a8::/47
2a02:ee80:42d4::/47
2a02:ee80:4354::/47
2a02:ee80:437e::/47
2a02:ee80:4394::/47
Signature Algorithm: sha256WithRSAEncryption
ad:2e:cb:7a:59:da:ba:03:42:18:98:e5:49:5c:d4:ae:ef:ed:
b6:92:09:cb:1f:e4:11:d7:c8:c0:0b:31:48:0c:f5:07:42:e3:
b1:20:82:1c:ed:33:8d:67:c7:8a:52:76:7e:ac:d8:41:62:66:
59:ed:ad:39:b4:35:8a:0e:97:85:cf:74:1c:c3:48:5b:dc:81:
7e:19:c9:f6:1c:51:0a:ff:51:23:01:2a:e8:f2:f1:10:3e:6f:
4a:5b:25:1b:fc:a7:76:bf:ee:75:70:a5:72:ec:7f:54:2d:b7:
da:19:ba:82:e5:ca:b4:6c:2c:da:1c:c2:b7:ad:4f:af:79:ec:
15:3d:ae:5c:69:82:e6:47:6c:cb:e7:20:8a:f3:f1:c3:21:8e:
94:01:92:f0:a9:53:e9:3f:bb:12:6a:60:c5:97:b9:78:a5:91:
c1:34:ed:34:72:b7:38:68:05:ee:45:a4:4a:7d:e5:76:5e:61:
01:64:71:5e:bf:56:e2:19:52:b3:d5:bf:d8:8b:91:6e:58:8d:
32:bd:10:f5:90:2d:30:04:9d:86:8c:f0:9e:ec:c8:7b:2d:6a:
f0:cb:a8:24:e7:b0:d3:0d:a6:e0:89:a6:08:de:cf:9a:b9:64:
c0:7f:30:0e:4c:00:d2:31:0e:00:6f:13:1a:ea:b8:fa:34:3a:
9c:c4:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:27:02 2026 by rpki-client