Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NVTQ4r2VYXERhU8_801_AoRTVh0.roa
File: NVTQ4r2VYXERhU8_801_AoRTVh0.roa (raw, json)
Hash identifier: 0d4FjLa1oAddxXiWqSsT4dUbRP/gq8JJip5KaL2Qp8s=
Subject key identifier: 35:54:D0:E2:BD:95:61:71:11:85:4F:3F:F3:4D:7F:02:84:53:56:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0A9AFF29BF80F45E5357940AA6CEE4DDE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NVTQ4r2VYXERhU8_801_AoRTVh0.roa
Signing time: Wed 16 Sep 2026 10:07:55 +0000
ROA not before: Wed 16 Sep 2026 10:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
93.123.114.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:af:f2:9b:f8:0f:45:e5:35:79:40:aa:6c:ee:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 16 10:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3554d0e2bd95617111854f3ff34d7f028453561d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:a8:ba:b9:27:ca:f2:e1:48:02:15:7c:5a:
e7:ca:71:37:80:b1:70:c8:91:1b:b4:03:85:0b:a6:
c7:9d:7c:a9:5e:f9:14:48:b3:c6:d4:92:a4:e3:32:
1c:85:d0:6c:ff:e5:15:7b:d9:94:9f:6b:19:26:59:
2a:df:24:5a:b6:bc:c5:06:a9:31:7b:90:6b:c9:04:
fd:ac:d4:20:2e:69:f1:85:b3:64:e4:a0:c4:6e:e5:
a6:11:f3:b2:0a:82:9d:a7:41:3a:35:78:82:fb:70:
63:2a:9d:f0:0b:ae:32:49:5a:03:5f:74:17:89:79:
a4:5a:f2:c2:da:9b:df:cd:09:cf:38:3b:75:34:08:
ce:6f:d0:06:d8:00:b9:60:2e:0b:dd:50:8e:e5:d2:
ac:97:73:53:66:99:54:3e:18:7e:db:6c:45:4c:8b:
1e:f4:e4:b1:fd:4e:be:76:39:59:aa:59:84:f1:86:
80:69:a0:e3:67:ea:87:c9:a1:fd:8e:bd:4a:e3:20:
02:ae:0b:1c:c8:31:5c:c2:3c:47:0a:87:6c:48:27:
4a:89:dd:91:19:a1:04:4f:5e:9e:9c:2c:00:ad:1e:
c8:87:f7:9d:57:ef:2b:29:24:dc:e1:f8:9e:10:4f:
9b:a3:c6:be:ce:67:4b:5c:63:22:03:4b:30:ab:38:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:54:D0:E2:BD:95:61:71:11:85:4F:3F:F3:4D:7F:02:84:53:56:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NVTQ4r2VYXERhU8_801_AoRTVh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
87.121.58.0/24
93.123.114.0/24
94.156.79.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9b:ec:be:12:1e:16:0f:31:38:ff:12:4d:5f:3c:5c:90:c5:
3b:01:33:18:e8:0a:1e:c5:22:5e:c0:27:02:42:64:92:44:0b:
46:28:64:47:5f:fa:1b:f7:47:c9:3f:19:d8:a1:45:6f:76:0d:
f9:44:b4:1a:2c:15:61:b3:9e:39:25:11:df:f1:bc:f0:40:18:
a6:95:d3:15:79:73:26:70:a8:af:be:30:e9:58:1f:07:f2:8f:
44:0f:48:aa:39:e8:df:6a:e3:bb:fa:e2:f6:57:68:1d:70:97:
10:79:36:ce:b1:4b:50:28:87:b5:67:39:cb:5c:59:11:a6:c5:
b9:3e:a6:61:bf:17:75:80:c7:eb:2d:51:85:97:d9:f1:04:f0:
5e:f6:fc:6a:9d:1a:21:ac:46:26:68:4f:5e:de:d3:cd:f2:8f:
75:c4:1c:89:f5:ea:23:c9:ba:80:6c:52:c7:42:92:b9:f9:54:
4a:2d:7b:8e:9b:22:9a:7e:de:1f:ee:e1:ab:4c:fc:c6:c7:b1:
22:93:30:f8:e1:93:3b:ef:2e:8c:03:ae:57:d3:73:4e:ff:35:
5a:67:1c:3d:b4:e5:19:aa:34:74:2a:61:43:6b:f2:ce:fd:e0:
12:0d:f0:84:ce:d3:1f:fd:27:e0:c2:29:1a:eb:3d:5b:36:e8:
fb:c5:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:29:05 2026 by rpki-client