Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/nV1VVM1ywEoowWBVXFtkDsQx3KU.roa
File: nV1VVM1ywEoowWBVXFtkDsQx3KU.roa (raw, json)
Hash identifier: f9pOQmKZkcV0sZ4BCuIBSnyl7KtosULuBDlP1t0HctQ=
Subject key identifier: 9D:5D:55:54:CD:72:C0:4A:28:C1:60:55:5C:5B:64:0E:C4:31:DC:A5
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01A0F638D1152602E2238E5CDF5134E24ACE
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/nV1VVM1ywEoowWBVXFtkDsQx3KU.roa
Signing time: Thu 01 Oct 2026 06:48:33 +0000
ROA not before: Thu 01 Oct 2026 06:48:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214405
IP address blocks: 2.152.74.0/24 maxlen: 24
212.32.45.0/24 maxlen: 24
2a01:fe00::/48 maxlen: 48
2a01:fe00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:38:d1:15:26:02:e2:23:8e:5c:df:51:34:e2:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Oct 1 06:48:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d5d5554cd72c04a28c160555c5b640ec431dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:ef:f9:71:21:3b:aa:f3:69:25:8d:f8:4c:
8b:91:66:70:41:3e:cc:17:45:1f:a1:5f:60:46:89:
90:b1:4d:d9:4c:ec:3a:e5:02:b1:e8:0d:71:6a:4d:
d9:1b:34:0a:6e:fc:7b:cd:78:f3:2c:e5:c7:fe:cf:
9a:17:bd:08:b5:a6:8b:8c:9e:6a:d2:b1:9f:b4:3b:
2d:d6:e3:b9:27:a5:be:6c:b3:2a:fb:9c:3c:84:d1:
a1:5e:3d:d4:ff:aa:cc:c3:41:4d:b7:f5:2b:02:6f:
26:88:79:77:25:08:59:12:73:94:7c:e4:e4:78:f2:
b0:33:ae:3d:18:43:16:25:e9:bf:02:50:e4:1f:8e:
b5:05:e4:09:80:9a:8b:aa:54:99:b1:09:ca:20:f5:
81:f6:4d:76:e5:90:52:19:89:a2:08:96:ec:1c:e2:
ab:e8:94:19:82:bf:6a:5d:37:c1:9a:63:41:9e:92:
b2:95:9e:b1:42:d3:44:f9:a2:da:00:51:dc:e5:0b:
02:6d:64:81:b6:7e:07:c8:86:1f:17:8b:28:f2:c3:
df:a2:27:8b:b6:87:e8:f8:87:bd:88:a1:b2:42:de:
4a:90:02:07:47:64:3d:da:cb:7d:e4:ab:21:ef:d3:
b9:a5:d9:0e:21:6a:f2:8e:df:95:5c:db:0d:ea:44:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:55:54:CD:72:C0:4A:28:C1:60:55:5C:5B:64:0E:C4:31:DC:A5
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/nV1VVM1ywEoowWBVXFtkDsQx3KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.74.0/24
212.32.45.0/24
IPv6:
2a01:fe00::/47
Signature Algorithm: sha256WithRSAEncryption
41:f2:69:a1:79:47:fc:05:cd:cb:4a:de:96:50:db:36:63:33:
26:f0:02:09:4d:91:56:1f:d7:a5:ef:ab:c7:41:58:7d:13:53:
99:3f:3b:89:91:cb:99:0e:df:4e:28:13:08:85:66:d6:0f:c4:
5f:b4:12:c7:9d:cb:8b:70:06:69:e5:ab:f9:a8:a8:fe:86:62:
96:ab:d4:f1:09:af:c9:22:29:43:5a:b6:6e:a6:5a:2c:d4:d9:
0f:41:a9:63:9f:2f:64:dc:39:0b:9e:28:a4:44:d3:07:1c:25:
85:0a:b0:5d:69:4d:94:22:91:f4:00:f8:f8:34:67:28:5c:84:
cc:54:47:82:d4:70:c3:c3:f7:be:f6:4b:ce:a0:43:24:a7:6e:
a1:1d:c2:4d:7c:d7:28:ec:5a:84:67:1e:a1:a7:46:7c:1f:68:
c9:3b:bb:4c:d4:d3:2e:92:fc:93:ec:4d:db:a6:b2:dc:4c:4e:
d4:95:b5:fe:2d:3b:c0:3f:17:27:fb:52:74:08:1e:ed:22:53:
ca:83:46:47:2b:10:f4:02:b9:18:58:50:14:fc:c6:6a:b3:bc:
d7:91:72:93:b7:2f:98:bb:e6:bf:dd:18:9a:b6:09:7f:46:f3:
88:30:56:fd:f8:60:25:32:e1:8e:7b:eb:ac:29:79:32:ff:f5:
21:6d:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:14:35 2026 by rpki-client