Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/nof6-YFOlvcy6crc1EDhuTYq4nM.roa
File: nof6-YFOlvcy6crc1EDhuTYq4nM.roa (raw, json)
Hash identifier: PJYYmX56qjDoYCtuzgA2ImzrNPBarV9rtZ4xgfjuyss=
Subject key identifier: 9E:87:FA:F9:81:4E:96:F7:32:E9:CA:DC:D4:40:E1:B9:36:2A:E2:73
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A10B824D4ACE66FFE9D60CA0A59627622D
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/nof6-YFOlvcy6crc1EDhuTYq4nM.roa
Signing time: Mon 05 Oct 2026 10:00:51 +0000
ROA not before: Mon 05 Oct 2026 10:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 94.231.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:82:4d:4a:ce:66:ff:e9:d6:0c:a0:a5:96:27:62:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 5 10:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e87faf9814e96f732e9cadcd440e1b9362ae273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:95:52:48:8d:4e:00:80:62:7b:6f:e0:e1:
b1:54:c0:76:32:96:2a:9e:d3:1b:b1:82:be:c1:3d:
b9:dc:68:02:e6:15:92:26:04:53:81:a5:e2:87:83:
6c:be:4c:94:86:d9:47:61:40:55:f8:3f:28:9d:71:
b3:d6:66:5d:29:fc:0d:c1:41:4a:a5:19:61:75:1f:
78:4a:80:55:f9:22:e0:de:1e:ab:4f:48:6e:5a:58:
95:fd:b0:78:c1:77:25:a2:3b:86:cd:f5:41:5d:65:
d0:a4:f7:2e:69:01:6c:4f:c6:7a:18:b3:05:2f:27:
e5:8e:9c:a0:f8:65:67:a0:0b:00:f0:5c:ab:40:42:
aa:65:11:9d:34:b8:66:e5:04:28:9a:ab:34:1a:34:
ff:69:5f:3c:29:2d:e0:5a:43:9c:86:19:63:23:cf:
9c:b5:16:08:00:8d:b3:2b:10:d3:30:01:e5:55:be:
58:32:6e:ea:f6:8d:8a:b3:95:8d:27:02:60:a0:f5:
ff:c4:4d:b7:e4:bf:0a:37:aa:e0:b3:46:43:04:3b:
31:7c:21:4b:98:43:a4:8f:e7:be:43:ab:57:69:53:
54:7d:2d:38:19:d5:76:b9:65:b0:d5:9b:2e:24:1a:
3a:6e:2f:5b:e0:0b:94:49:25:ea:0d:68:56:34:0e:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:FA:F9:81:4E:96:F7:32:E9:CA:DC:D4:40:E1:B9:36:2A:E2:73
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/nof6-YFOlvcy6crc1EDhuTYq4nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.238.0/23
Signature Algorithm: sha256WithRSAEncryption
00:33:1d:30:c0:d6:c3:d3:5f:53:57:3d:5c:1d:5c:f8:b3:d1:
d3:d5:61:a0:bb:cc:ee:84:e8:11:4f:bb:bd:87:6e:69:99:76:
3b:9c:27:cf:90:aa:cd:6f:58:43:2d:12:06:08:22:85:98:72:
80:01:b3:a1:f4:e7:ba:fa:3e:a1:b2:2e:12:68:14:80:2d:73:
ca:45:58:41:e2:44:2d:a8:0c:34:4b:5d:38:69:ba:11:c6:e7:
bf:75:f2:2a:06:e3:93:b4:75:92:80:9a:a5:6b:6a:00:a1:47:
53:0e:41:47:5c:e7:2d:74:4f:0a:da:ce:f4:d1:d6:c1:b1:0b:
f6:6f:21:7f:3a:96:94:34:ab:10:e0:63:af:4b:fe:f6:74:c6:
e9:24:26:14:6a:66:53:89:73:87:31:ec:e2:ab:2a:5b:c9:98:
d4:97:25:dd:0b:b0:19:1f:d5:09:32:81:42:b6:74:42:e6:78:
e2:f4:d0:f9:76:d7:97:54:df:12:7b:a7:48:69:97:94:66:c1:
cd:8e:85:42:10:39:0a:8d:d0:c9:a7:21:59:5f:76:de:49:37:
9b:59:17:0a:84:3f:64:7b:ac:18:98:0a:c8:9f:44:4b:43:dd:
e1:6b:b1:ba:e5:4b:68:19:15:78:f5:ca:93:de:e3:c5:c8:44:
60:59:c4:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaELgk1Kzmb/6dYMoKWWJ2ItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjYxMDA1MTAwMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTg3ZmFmOTgxNGU5NmY3MzJlOWNhZGNkNDQwZTFiOTM2MmFlMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC+VUkiNTgCAYntv4OGxVMB2MpYq
ntMbsYK+wT253GgC5hWSJgRTgaXih4NsvkyUhtlHYUBV+D8onXGz1mZdKfwNwUFK
pRlhdR94SoBV+SLg3h6rT0huWliV/bB4wXclojuGzfVBXWXQpPcuaQFsT8Z6GLMF
Lyfljpyg+GVnoAsA8FyrQEKqZRGdNLhm5QQomqs0GjT/aV88KS3gWkOchhljI8+c
tRYIAI2zKxDTMAHlVb5YMm7q9o2Ks5WNJwJgoPX/xE235L8KN6rgs0ZDBDsxfCFL
mEOkj+e+Q6tXaVNUfS04GdV2uWWw1ZsuJBo6bi9b4AuUSSXqDWhWNA6yeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6H+vmBTpb3MunK3NRA4bk2KuJzMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvbm9mNi1ZRk9sdmN5NmNyYzFFRGh1VFlxNG5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXufuMA0G
CSqGSIb3DQEBCwUAA4IBAQAAMx0wwNbD019TVz1cHVz4s9HT1WGgu8zuhOgRT7u9
h25pmXY7nCfPkKrNb1hDLRIGCCKFmHKAAbOh9Oe6+j6hsi4SaBSALXPKRVhB4kQt
qAw0S104aboRxue/dfIqBuOTtHWSgJqla2oAoUdTDkFHXOctdE8K2s700dbBsQv2
byF/OpaUNKsQ4GOvS/72dMbpJCYUamZTiXOHMeziqypbyZjUlyXdC7AZH9UJMoFC
tnRC5nji9ND5dteXVN8Se6dIaZeUZsHNjoVCEDkKjdDJpyFZX3beSTebWRcKhD9k
e6wYmArIn0RLQ93ha7G65UtoGRV49cqT3uPFyERgWcSQ
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:29 2026 by rpki-client