Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ntTgazHk87WgVcD3OVyTfwb-NbQ.roa
File: ntTgazHk87WgVcD3OVyTfwb-NbQ.roa (raw, json)
Hash identifier: RWe2fPGNhIwbuWLjQ839+du4pT1FAaT++GfJj1qQWmc=
Subject key identifier: 9E:D4:E0:6B:31:E4:F3:B5:A0:55:C0:F7:39:5C:93:7F:06:FE:35:B4
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1786EBCEB53FFBDCF0076992CF6FAC202
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ntTgazHk87WgVcD3OVyTfwb-NbQ.roa
Signing time: Mon 26 Oct 2026 13:38:05 +0000
ROA not before: Mon 26 Oct 2026 13:38:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 170.168.1.0/24 maxlen: 24
170.168.15.0/24 maxlen: 24
170.168.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:6e:bc:eb:53:ff:bd:cf:00:76:99:2c:f6:fa:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 26 13:38:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ed4e06b31e4f3b5a055c0f7395c937f06fe35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:b4:9e:09:51:98:48:72:2b:e6:85:9c:a8:
01:da:af:dc:de:9e:6f:56:7a:a0:87:d1:fe:f0:58:
a8:9d:d8:e2:40:8d:8c:a1:9b:12:3f:d7:24:f2:6f:
d2:bf:aa:00:fb:74:99:99:6a:29:f1:91:1a:a1:a9:
30:0b:d6:ec:0e:c8:85:5e:53:22:b4:fd:b2:84:dd:
e7:00:6e:67:bd:5e:d0:d0:df:60:d1:a6:66:36:2c:
83:38:95:43:1a:c5:bd:8e:07:79:45:f7:45:dc:90:
58:37:31:e3:67:e7:18:d8:34:98:bc:d3:91:df:59:
8d:5c:24:c4:8a:66:3b:b5:d1:c8:27:d5:b0:45:11:
01:42:7b:be:6c:16:f3:f0:d1:12:28:c9:80:24:9e:
ed:d2:d7:e1:05:0c:b3:af:e6:9a:c9:8c:c8:8a:10:
49:53:19:76:ff:9f:92:c6:65:a8:e6:bf:d9:db:20:
3e:de:ec:61:d5:b0:5e:bc:e2:a5:b7:5a:19:e3:95:
43:fa:29:0b:59:2b:87:ce:b9:50:51:3e:09:15:97:
7e:cd:5e:1b:f9:b2:83:0e:55:90:05:14:d5:11:3e:
11:09:14:07:e1:aa:02:4f:b9:ac:87:ee:e5:a1:68:
98:65:01:f6:dd:b7:e2:31:19:45:f1:00:24:12:d7:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:E0:6B:31:E4:F3:B5:A0:55:C0:F7:39:5C:93:7F:06:FE:35:B4
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ntTgazHk87WgVcD3OVyTfwb-NbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.1.0/24
170.168.15.0/24
170.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:71:ac:aa:22:98:c2:2d:8a:1b:5b:98:c1:b3:a7:3b:da:e4:
6f:70:f2:7c:2b:e3:88:d5:b1:34:0b:7f:d6:38:bf:33:51:0a:
52:a5:82:71:e5:92:11:6b:fb:41:a9:05:a3:4b:19:36:38:bb:
af:4b:7c:48:f9:40:10:66:e5:16:ee:7b:f9:35:d7:5b:32:90:
bb:0f:6c:b1:ad:83:24:20:21:b6:d3:f5:c2:61:ff:26:a9:a1:
2f:41:56:73:4c:9e:e5:68:a2:b0:cf:b3:f2:ee:74:d2:9a:03:
48:74:54:19:18:ea:54:86:10:11:9e:c2:06:23:49:32:c3:39:
ee:71:fe:bc:87:bf:62:52:44:b9:a8:32:14:c6:1b:d4:1e:fe:
7b:ad:3a:f4:57:f3:e9:a0:e8:fc:ba:e6:bc:25:94:c5:9c:f6:
af:5b:48:f0:44:7f:b4:81:09:1e:3c:43:51:23:d2:9b:31:82:
a9:45:3b:0a:15:98:cd:e2:91:30:be:8f:0b:69:98:e4:79:9d:
61:fc:bb:1c:a7:73:12:37:40:4e:70:3b:4a:8e:c1:b8:51:d7:
1b:54:a0:70:26:09:21:cb:5d:b7:2c:73:2a:46:11:f5:dc:65:
23:7a:ad:bb:6a:65:3a:7a:1e:44:56:c9:ad:8c:62:4a:78:0e:
8d:12:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:05:45 2026 by rpki-client