Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa
File: NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa (raw, json)
Hash identifier: aViSA/HDXPYiP0oiBue47ud2Jb/yeLRTWtG0amjMQnw=
Subject key identifier: 35:C4:45:D5:EA:23:CA:E7:38:27:64:1E:E0:F8:93:AF:50:9A:5D:39
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A01ECA46BCA4DB39B5F6B248098986CBD1
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa
Signing time: Thu 20 Aug 2026 10:49:27 +0000
ROA not before: Thu 20 Aug 2026 10:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 206.15.52.0/24 maxlen: 24
206.15.54.0/24 maxlen: 24
206.15.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:ca:46:bc:a4:db:39:b5:f6:b2:48:09:89:86:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 20 10:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35c445d5ea23cae73827641ee0f893af509a5d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:44:93:b7:bc:50:4c:3b:13:40:5e:9c:bc:
46:75:91:af:34:bc:ee:cb:b7:98:10:8c:bc:85:b2:
83:da:d3:e3:b4:6a:da:0d:fe:e1:92:a1:77:bd:78:
69:60:62:f8:8d:40:12:1d:8b:64:11:b9:f4:75:3c:
62:d6:4c:93:3a:b1:b2:d5:1a:94:49:5a:4d:e6:8b:
65:44:15:46:12:ab:04:52:48:6a:1c:77:a2:49:82:
b4:75:d3:ea:ef:76:79:c2:a1:cf:d7:f0:49:6c:d3:
3d:2d:de:f5:c8:27:72:ee:ae:46:03:8c:bf:44:4a:
53:e9:01:24:e2:ea:ec:72:67:10:19:85:7f:81:63:
3c:0e:9f:b8:00:a2:82:2d:14:67:8c:da:bb:6c:87:
00:67:e8:39:ce:5f:88:ca:52:ba:9b:c0:fb:12:54:
d7:fd:4d:b5:9c:5d:26:6c:cf:44:34:60:d2:67:3a:
56:aa:d4:2b:f8:1d:b3:73:da:54:14:9d:fe:0b:0b:
93:96:a3:96:6d:42:af:74:a6:fb:8a:af:43:69:02:
76:73:c2:f8:ed:27:c1:15:0a:31:e6:95:81:14:ea:
d9:52:cb:76:96:64:f1:3c:c0:0b:b8:88:1e:1b:12:
17:8c:da:58:fa:b7:d8:35:e5:6b:98:4d:2d:7d:94:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:45:D5:EA:23:CA:E7:38:27:64:1E:E0:F8:93:AF:50:9A:5D:39
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.52.0/24
206.15.54.0/24
206.15.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c2:60:0d:61:e6:4b:f5:39:5b:08:7e:3e:1e:9c:2a:4a:2f:
82:13:ab:0e:24:03:c4:bd:2b:a2:72:ef:0e:4b:db:25:03:2c:
d7:e3:0f:e2:eb:f4:50:53:28:bb:0f:79:8e:4a:65:78:7a:49:
f8:d5:c6:86:ac:b2:fb:e3:b9:b5:80:1d:1f:b3:dd:d0:b2:a6:
13:f7:bb:e6:a0:1f:61:21:5b:77:80:9d:fb:3a:73:3d:e4:19:
08:50:78:0a:e8:a4:7f:73:fe:4b:6c:70:ff:e9:a2:98:15:d7:
13:d0:62:76:46:c7:54:70:ac:2b:4b:f6:a9:6b:49:21:7f:fa:
2c:02:7f:80:58:fc:a6:bd:d8:4f:a2:d6:9b:84:f0:ea:0e:2b:
eb:41:7f:da:ea:7c:c5:c3:52:c2:a2:2f:2b:2b:93:7f:c2:70:
2a:2d:c3:ab:24:a2:30:8f:d7:6d:85:d6:bc:a1:36:3e:0d:a9:
3f:a8:cb:8c:2e:e7:9f:0c:33:7e:af:5d:3d:58:b3:4c:3e:f3:
fa:cf:d6:c0:6c:d8:cf:f6:85:21:81:d1:65:28:d6:e8:44:9b:
43:15:2e:a8:7e:7d:bb:32:fc:11:21:ff:d1:7c:69:4a:ad:11:
d7:d4:f9:a5:3e:91:33:bf:6f:ac:b6:16:7b:bb:7a:77:eb:15:
06:c0:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:24 2026 by rpki-client