Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/nBGgopArMxJvSfmIUE11Wl93-ps.roa
File: nBGgopArMxJvSfmIUE11Wl93-ps.roa (raw, json)
Hash identifier: 5WIipJqJLXOOwsFI1wknOH4BL7VaCS3h8HSy0SSHWz4=
Subject key identifier: 9C:11:A0:A2:90:2B:33:12:6F:49:F9:88:50:4D:75:5A:5F:77:FA:9B
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A15CA58707CD87F608B5324B04B8D2365F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/nBGgopArMxJvSfmIUE11Wl93-ps.roa
Signing time: Wed 21 Oct 2026 04:08:34 +0000
ROA not before: Wed 21 Oct 2026 04:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10648
IP address blocks: 5.100.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:a5:87:07:cd:87:f6:08:b5:32:4b:04:b8:d2:36:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 21 04:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c11a0a2902b33126f49f988504d755a5f77fa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:04:4f:83:38:59:e1:15:5e:b4:f3:3d:e1:
34:95:4f:64:eb:21:39:45:91:34:8a:d3:d7:b6:96:
7e:27:60:4c:56:c0:86:e5:c1:62:83:b0:f2:15:de:
dd:7c:2c:5a:d6:60:99:26:a0:24:eb:47:00:29:8f:
01:e5:0d:7b:7e:fe:86:f2:34:0c:47:c3:77:42:29:
ea:47:84:86:51:29:e0:a8:f8:eb:25:46:e4:60:40:
f6:09:16:c8:a0:35:97:f2:93:e0:76:c9:f3:57:f5:
db:15:0e:7a:4f:dd:3f:03:70:65:4e:c8:4f:4e:6a:
b3:42:31:b0:53:b7:be:49:3f:de:81:75:6e:39:dc:
e5:06:67:a0:fa:d4:40:a1:22:28:66:bd:f3:5f:88:
7b:d5:33:1c:98:bf:11:f4:5f:12:76:e7:22:19:19:
0a:6f:6d:f0:df:bf:0f:c2:d7:11:a1:5e:1e:c3:e8:
bd:3c:f7:b8:7f:c1:66:e9:d1:51:fb:dc:86:f3:93:
e9:58:a3:8d:90:6f:13:e8:d4:59:af:ae:a2:6e:e3:
e8:42:03:e2:77:cc:e6:43:f8:ef:89:0a:41:2f:bb:
71:17:97:9d:47:09:4e:cf:80:fd:16:61:7b:fa:53:
88:99:96:2b:b2:1d:ad:22:e5:c4:52:14:39:27:0a:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:A0:A2:90:2B:33:12:6F:49:F9:88:50:4D:75:5A:5F:77:FA:9B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/nBGgopArMxJvSfmIUE11Wl93-ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.231.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a4:9f:30:16:f0:fc:e3:0c:78:85:24:b2:2b:f3:60:da:eb:
7f:7c:ff:ef:72:c8:69:1e:6e:0f:cc:94:00:cc:47:56:f9:06:
b8:c5:a5:9b:a3:ad:4b:10:2f:f7:3c:dd:80:29:93:5e:27:59:
a0:7c:e4:b6:64:3f:f8:b2:8e:85:05:b8:f9:69:a4:40:f4:a5:
ee:31:4b:cf:69:9f:41:6f:6e:74:2d:9d:ae:52:f5:b9:81:a9:
a6:bb:f8:f3:df:e1:ce:12:11:44:6e:0b:1d:01:90:7f:2f:80:
06:a0:46:ed:b4:6a:b9:1a:09:68:10:5c:a8:59:49:7d:f3:9f:
f7:c9:dd:d1:36:46:d8:94:15:cd:b2:f0:1f:4e:d1:9b:0f:4a:
f5:1f:2b:4e:14:1c:bf:41:b6:23:f0:61:8c:0f:42:d4:c5:a0:
df:36:da:9d:59:fb:62:06:ea:43:9b:c1:4a:8d:d1:1a:61:d4:
92:bb:17:af:4a:cd:e8:d0:52:af:02:3c:6f:f9:67:d3:79:35:
3d:4b:71:d1:89:a9:0d:b5:b0:c0:b2:56:5b:40:29:93:ab:5f:
02:2d:31:2f:7c:ae:cf:da:43:84:02:8d:e9:33:a3:c2:f6:59:
f1:5c:f1:a0:11:62:fb:3e:5e:b5:41:bb:87:78:70:99:b3:78:
2c:ea:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:29 2026 by rpki-client