Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/NbPHkOCM0TFQVRvuhLPEqtcqEnM.roa
File: NbPHkOCM0TFQVRvuhLPEqtcqEnM.roa (raw, json)
Hash identifier: D0GgSDhr/jiegxjARGSC0A0PXr5Fb+jGL+ulhjIzU+M=
Subject key identifier: 35:B3:C7:90:E0:8C:D1:31:50:55:1B:EE:84:B3:C4:AA:D7:2A:12:73
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A0FE3AF03B9A24B9E4CE738FFD8B4596C2
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/NbPHkOCM0TFQVRvuhLPEqtcqEnM.roa
Signing time: Fri 02 Oct 2026 20:07:50 +0000
ROA not before: Fri 02 Oct 2026 20:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24321
IP address blocks: 153.76.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:3a:f0:3b:9a:24:b9:e4:ce:73:8f:fd:8b:45:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Oct 2 20:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35b3c790e08cd13150551bee84b3c4aad72a1273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:c0:75:cc:81:66:da:24:8a:2d:b7:a4:ef:
b4:8f:d9:89:ea:12:fb:c2:d6:e8:e0:c5:cd:6e:8c:
6a:3f:b2:c5:f1:55:1b:ef:c1:2c:96:45:38:d9:25:
6c:2d:7f:c9:7c:c8:55:68:0b:af:54:1b:64:48:ab:
22:fb:01:84:0b:ff:1b:18:dd:b5:0d:f2:0e:84:07:
c9:d3:dd:6b:25:e0:a3:8c:9f:c3:16:ec:28:c8:86:
43:e6:76:14:c0:40:b8:58:b5:78:ef:63:70:9b:c6:
0a:47:76:11:48:d6:ef:8c:2f:52:fd:c7:52:b5:56:
75:43:0c:05:79:08:fb:a5:97:79:02:60:c9:97:40:
48:af:b7:b0:b0:0a:5e:cd:99:9a:bb:96:da:f8:a2:
11:49:86:a3:8d:54:9a:b0:83:f8:c3:29:b8:bb:4d:
4d:f1:92:df:30:b5:c3:a4:d5:ca:ad:1d:ca:b9:ca:
33:96:a1:7c:82:7c:80:25:94:2f:e9:cc:7b:15:e7:
c2:31:c1:44:f4:46:e0:e5:4c:94:ce:32:b3:ca:f5:
bb:87:eb:a0:61:ad:ab:1e:05:39:1c:25:b8:5c:c1:
f0:b8:c3:6c:7e:0d:0c:9e:a3:50:41:b2:40:8d:2e:
a4:56:1a:6e:36:e0:9f:d8:f0:3a:8f:f8:00:be:d7:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:C7:90:E0:8C:D1:31:50:55:1B:EE:84:B3:C4:AA:D7:2A:12:73
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/NbPHkOCM0TFQVRvuhLPEqtcqEnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.236.0/22
Signature Algorithm: sha256WithRSAEncryption
43:ac:06:d2:79:63:62:2d:bf:75:ce:f7:f2:6d:6b:ac:9a:19:
ac:98:82:2e:59:91:fc:a5:c0:d2:4e:6e:59:49:88:02:de:6d:
9c:05:cf:87:a3:35:d0:89:86:76:17:1e:10:e1:4b:b1:e8:9b:
15:79:6f:3f:d8:b8:5c:ce:d0:14:31:a0:06:ac:fb:ad:39:9e:
c3:a6:13:a6:48:8b:2c:88:65:0b:ee:87:4f:c8:5e:a8:57:1f:
5f:2d:7b:0e:f7:73:e7:42:d0:50:02:65:97:87:15:87:01:07:
05:20:1e:36:05:d0:14:58:6c:68:98:fc:84:ea:a6:f9:22:09:
76:0f:ea:e3:51:5b:29:88:86:66:04:ec:15:77:66:37:7b:8c:
dc:79:c2:52:e7:d0:e6:ca:5a:79:02:be:a2:72:d7:31:0d:94:
e3:3a:50:6d:0a:03:a4:28:39:b8:b1:a5:a4:76:f8:76:eb:64:
77:87:45:e2:7e:5a:20:f7:a1:91:ac:58:ec:14:df:ca:67:a9:
17:5d:32:56:69:bd:4c:01:ff:49:4c:4d:fc:4d:26:7e:27:ab:
1e:c4:24:3d:5c:4c:1b:9a:8f:d6:53:fc:5b:ca:42:e8:77:3d:
ba:66:53:4a:bd:d6:d8:4a:6e:ec:ee:30:bd:1e:e7:ba:d2:4b:
85:d9:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:00:53 2026 by rpki-client