Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/1-nukkIR6QW9cgqOuKheFLpvicPM.roa
File: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (raw, json)
Hash identifier: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=
Subject key identifier: FA:7B:A4:90:84:7A:41:6F:5C:82:A3:AE:2A:17:85:2E:9B:E2:70:F3
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019CBECDD6FD2FE4A1D18DDF0974560BDE26
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/1-nukkIR6QW9cgqOuKheFLpvicPM.roa
Signing time: Thu 05 Mar 2026 16:21:26 +0000
ROA not before: Thu 05 Mar 2026 16:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200326
IP address blocks: 2a03:bb80:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:cd:d6:fd:2f:e4:a1:d1:8d:df:09:74:56:0b:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Mar 5 16:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa7ba490847a416f5c82a3ae2a17852e9be270f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:2e:18:c2:63:6b:87:41:70:12:44:af:0e:
07:0b:7b:bd:d5:17:17:b0:bf:99:7d:91:34:dd:53:
77:34:0f:92:e8:5d:da:c2:57:2c:46:aa:f3:bc:3a:
ed:5f:63:c7:04:b8:59:7d:c4:43:25:01:4f:b8:64:
90:4f:a5:ba:cb:6f:3d:18:76:d3:67:56:d0:7a:ba:
6f:13:4d:5a:c2:5c:f6:0b:21:17:b5:ca:52:21:85:
34:02:c9:c5:ac:fc:ca:be:1d:a1:58:a6:e8:ce:e6:
b4:1d:71:f2:10:1d:c3:8e:93:ed:44:b3:61:67:6b:
b7:e6:30:3d:4e:00:f7:80:27:db:a4:5b:a0:32:d0:
53:3e:b9:4b:32:45:cb:11:b4:8f:de:c6:9f:e4:79:
79:f7:f0:bb:34:de:2b:ca:50:8e:a2:79:d8:9e:74:
4e:70:2c:3b:02:79:59:56:5f:76:02:48:9a:94:18:
8b:c9:1f:60:d6:a7:03:d7:cf:9f:56:20:9a:6c:4f:
20:0a:0e:e0:c7:d0:27:38:0f:97:f9:f7:05:fd:86:
8c:dd:36:2e:ea:34:e5:23:58:3c:7f:be:44:27:cb:
96:1c:9d:6d:9f:5e:25:52:76:69:0e:94:07:c9:bd:
b7:cf:66:09:2a:27:58:8f:85:e5:0c:e5:08:5d:b2:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:A4:90:84:7A:41:6F:5C:82:A3:AE:2A:17:85:2E:9B:E2:70:F3
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/1-nukkIR6QW9cgqOuKheFLpvicPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:bb80:10::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c2:7a:66:a8:c4:fa:45:aa:94:67:47:95:2e:2b:1d:18:17:
4b:07:1d:6c:81:45:cd:e3:77:ad:04:20:85:d8:c8:b2:81:e3:
3d:2a:f8:6f:2c:6b:21:9e:c8:83:bb:b3:bb:e6:db:43:8d:49:
52:d4:22:f9:f4:89:b5:7d:0b:24:3a:28:8f:0a:7c:18:02:60:
71:56:9b:be:e3:09:bb:69:52:73:61:76:8b:ac:91:39:cf:c6:
da:f9:c0:35:c3:91:c6:e1:a9:8b:ae:f8:34:6a:fc:73:e0:a5:
52:e7:48:57:5e:db:59:3d:d4:87:91:06:44:45:bb:ca:eb:16:
39:24:b4:71:47:5b:be:81:df:e0:9c:19:e2:fa:bd:74:86:06:
66:6c:13:b0:f4:83:6d:08:d9:92:08:01:99:80:a1:95:11:e8:
bb:8b:0a:a7:f7:60:83:a4:0a:d1:c6:93:36:fb:7a:7d:77:fc:
78:b3:03:42:f4:a8:a1:e1:0d:d9:5b:ca:e3:d9:a1:dc:ed:9f:
c7:1d:ac:51:26:21:33:e4:fe:eb:ea:8b:c5:e1:a1:50:09:c6:
7f:45:58:6a:34:e4:a7:e2:a1:90:2d:be:9e:c7:d7:e2:de:ca:
41:05:be:2c:af:ce:84:7e:d5:b9:52:6c:1d:cb:03:36:46:60:
5f:12:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:00:16 2026 by rpki-client