Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nTT18DkOzLqZP8LuG28iBZd4DfQ.roa
File: nTT18DkOzLqZP8LuG28iBZd4DfQ.roa (raw, json)
Hash identifier: t0aaLSu6t6G27Hmh8BnYG9yQWZZQq/whr6d+ZKyzYT4=
Subject key identifier: 9D:34:F5:F0:39:0E:CC:BA:99:3F:C2:EE:1B:6F:22:05:97:78:0D:F4
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A120D1AF202E1E12302475FC673FA80D66
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nTT18DkOzLqZP8LuG28iBZd4DfQ.roa
Signing time: Fri 09 Oct 2026 13:19:35 +0000
ROA not before: Fri 09 Oct 2026 13:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 206.15.50.0/24 maxlen: 24
206.15.51.0/24 maxlen: 24
206.15.52.0/24 maxlen: 24
206.15.53.0/24 maxlen: 24
206.15.54.0/24 maxlen: 24
206.15.55.0/24 maxlen: 24
206.15.56.0/24 maxlen: 24
206.15.57.0/24 maxlen: 24
206.15.58.0/24 maxlen: 24
206.15.59.0/24 maxlen: 24
206.15.60.0/24 maxlen: 24
206.15.61.0/24 maxlen: 24
206.15.62.0/24 maxlen: 24
206.15.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:d1:af:20:2e:1e:12:30:24:75:fc:67:3f:a8:0d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 9 13:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d34f5f0390eccba993fc2ee1b6f220597780df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:6d:0b:98:e8:01:81:96:7a:ab:f0:49:45:
7a:5a:f6:df:37:a5:e8:30:20:c8:d8:18:ed:51:42:
ba:00:3a:30:36:f5:25:1d:bb:39:a4:1c:7d:28:03:
d0:98:5d:fb:b8:7e:4a:41:7b:0d:4f:04:a3:3d:f8:
39:34:5b:8c:94:48:8a:6b:f0:62:2e:7a:29:9f:24:
53:6f:6d:38:6f:61:41:15:db:eb:d4:96:2e:33:51:
29:88:54:5e:09:6c:0f:2f:a8:e6:7f:87:0c:96:7c:
75:a5:60:81:d2:a8:d7:f1:17:67:f0:c3:46:5b:67:
be:31:45:30:a0:05:a1:23:08:fe:e7:1c:20:32:46:
c8:d8:5f:e7:57:57:e3:8f:41:b1:66:a5:dd:a6:d6:
6e:ce:6d:55:be:58:3e:31:5a:56:f2:2c:4f:f7:a3:
b5:0d:fd:a7:7d:00:1a:03:49:72:f6:c6:6a:63:24:
8b:97:db:75:31:ab:e8:0b:4b:fe:23:96:2d:49:c4:
1f:c9:6a:90:54:14:88:4b:a6:92:7c:82:08:9e:a6:
cd:60:56:70:8c:f7:1d:e1:ef:3c:82:ac:95:e2:28:
e5:87:3c:2e:62:ea:a2:d5:f8:49:43:2d:26:c1:91:
60:53:f2:5b:21:9a:0d:10:a8:26:61:65:43:03:f6:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:F5:F0:39:0E:CC:BA:99:3F:C2:EE:1B:6F:22:05:97:78:0D:F4
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nTT18DkOzLqZP8LuG28iBZd4DfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.50.0-206.15.63.255
Signature Algorithm: sha256WithRSAEncryption
33:6d:ae:e4:6e:45:b3:08:36:ab:b3:7f:2c:a5:5e:38:36:56:
3c:7f:10:bc:c2:60:ea:f4:ab:78:3a:43:28:8e:09:2b:99:72:
ee:2f:49:99:52:35:39:fc:3f:37:65:8e:b3:ac:61:94:4e:d1:
b4:e0:a5:e6:b9:86:15:fd:bd:6e:61:78:ec:a1:0a:96:b6:50:
ba:7c:eb:0c:56:45:c6:e5:45:8e:54:f8:2a:b9:10:75:fc:8e:
da:22:85:23:da:d7:d0:b9:92:47:19:bc:96:b5:1b:1a:b9:fd:
98:3f:37:0d:63:38:4a:93:68:d6:15:f1:8f:ca:cf:df:22:9d:
79:79:a8:11:73:08:75:5f:84:29:06:a4:3e:b4:84:0f:c0:ea:
3c:95:c4:aa:c9:13:95:1a:ba:71:29:3f:be:c9:d1:9b:15:df:
8c:6c:7d:05:6d:db:45:57:8f:76:2f:a7:5d:79:23:fc:72:ca:
a3:24:de:c7:90:3e:55:92:df:e8:69:6b:03:f7:16:df:85:07:
a0:55:bf:f1:91:1c:2b:1d:37:aa:de:9f:23:2d:89:e2:fc:24:
7b:64:fa:02:5e:ed:0f:fb:3c:f0:6c:65:f8:7a:b6:ed:90:d8:
90:dc:37:09:3e:1e:2e:f7:48:f0:76:d0:36:37:56:62:14:23:
53:54:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:18 2026 by rpki-client