Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/nN1d5gRxaC1NUa0ANS_c2GlfNjo.roa
File: nN1d5gRxaC1NUa0ANS_c2GlfNjo.roa (raw, json)
Hash identifier: zr2jt+oFWWXFMtHZP/JLLBKI9OUsDRICVpqyfAKlfc8=
Subject key identifier: 9C:DD:5D:E6:04:71:68:2D:4D:51:AD:00:35:2F:DC:D8:69:5F:36:3A
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 01A0E7D3379E54C278E74EBCB72D0998FA66
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/nN1d5gRxaC1NUa0ANS_c2GlfNjo.roa
Signing time: Mon 28 Sep 2026 11:42:54 +0000
ROA not before: Mon 28 Sep 2026 11:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209554
IP address blocks: 152.175.1.0/24 maxlen: 24
152.175.2.0/24 maxlen: 24
152.175.4.0/22 maxlen: 24
152.175.8.0/22 maxlen: 24
152.175.12.0/22 maxlen: 24
152.175.16.0/22 maxlen: 24
152.175.20.0/22 maxlen: 24
152.175.33.0/24 maxlen: 24
152.175.34.0/24 maxlen: 24
152.175.65.0/24 maxlen: 24
152.175.66.0/24 maxlen: 24
152.175.97.0/24 maxlen: 24
2a0b:1187::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:d3:37:9e:54:c2:78:e7:4e:bc:b7:2d:09:98:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Sep 28 11:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cdd5de60471682d4d51ad00352fdcd8695f363a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:91:47:1c:f9:6a:50:25:11:16:1c:92:c3:
79:ae:e8:60:b4:e5:b3:bf:c0:81:69:f1:cb:3d:79:
08:12:ae:c3:10:68:54:e2:9b:21:e8:c3:32:43:b4:
5f:e2:73:7a:47:6b:25:95:0a:59:89:a8:42:5a:30:
0f:24:89:25:f4:a0:f3:eb:9e:ed:ad:55:f9:82:3f:
4d:84:8a:8d:23:a2:a3:60:a4:2c:71:ea:76:b3:1d:
e1:94:a6:6b:5e:83:5f:d6:84:4d:e5:cc:d2:da:cd:
a6:0b:60:c8:d9:4c:35:0d:1c:8c:1e:0e:42:ae:ec:
47:1d:97:00:8a:ec:ab:d9:2d:42:5f:a0:51:fd:e8:
c7:11:a8:64:f2:4d:22:71:8c:71:c4:b6:25:24:79:
91:43:3d:77:48:21:16:43:67:b1:d2:e5:fb:7b:25:
02:54:eb:46:20:6b:24:41:66:36:4b:ca:93:39:dc:
8b:80:26:0b:85:b3:79:38:9f:e0:e8:e4:23:44:bb:
8f:7e:b8:6f:05:08:cd:de:12:48:1a:58:d7:c5:cf:
db:1d:4e:c6:0e:94:72:c6:d9:5e:f3:99:92:68:f5:
7e:5f:79:02:7d:44:9b:3e:bf:0d:f2:7a:36:33:19:
a8:89:27:33:d5:c1:25:c6:a7:55:14:1b:22:7a:5e:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:5D:E6:04:71:68:2D:4D:51:AD:00:35:2F:DC:D8:69:5F:36:3A
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/nN1d5gRxaC1NUa0ANS_c2GlfNjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.1.0-152.175.2.255
152.175.4.0-152.175.23.255
152.175.33.0-152.175.34.255
152.175.65.0-152.175.66.255
152.175.97.0/24
IPv6:
2a0b:1187::/32
Signature Algorithm: sha256WithRSAEncryption
37:75:22:f4:86:56:3a:1a:55:ea:81:f2:70:49:b1:4a:b9:d1:
fb:c3:db:55:09:69:88:0c:9e:5a:5c:3f:28:e2:b1:70:f7:e1:
52:04:b0:1a:67:69:93:1a:8b:a8:11:d1:c7:69:13:38:74:54:
77:ec:f9:04:7e:de:83:bb:88:bf:37:bb:0f:83:ae:7d:60:56:
ab:36:2f:88:75:b4:00:cf:38:27:f1:91:98:e1:2e:21:16:e2:
00:98:99:68:e1:38:c0:aa:45:99:91:da:c4:0a:3c:97:b9:6b:
a1:a6:9c:96:fa:c3:59:1e:17:9f:07:5c:44:ae:cd:19:40:b4:
0f:66:0c:ad:20:b0:f0:b8:2a:10:5e:c4:e5:94:c2:b7:cf:f5:
12:76:20:3c:42:31:3d:f9:e3:df:69:d6:c7:e2:d5:6a:9d:42:
01:bf:cf:3f:42:30:c9:5f:7b:e0:ed:0f:15:fb:f6:84:af:78:
9a:cf:1f:da:fe:af:82:91:c7:4a:7a:41:cc:04:3c:0d:5a:40:
3a:5a:be:58:6a:db:36:14:73:28:10:2b:d1:68:22:a7:bb:13:
7c:24:7f:94:5f:49:a8:4e:d8:a1:cd:27:fe:46:70:75:be:9a:
90:79:0e:d9:02:09:84:ea:65:bb:36:99:34:b4:8d:20:aa:7d:
0f:5d:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:44:38 2026 by rpki-client