Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/NNq9wpMKpAxhT8fj3Wua560Ittc.roa
File: NNq9wpMKpAxhT8fj3Wua560Ittc.roa (raw, json)
Hash identifier: i4Kf4Mo9OoJ2SfUMhQUpkJ6uJlhJADbRdpPZKnjg2F4=
Subject key identifier: 34:DA:BD:C2:93:0A:A4:0C:61:4F:C7:E3:DD:6B:9A:E7:AD:08:B6:D7
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A176CC5489FA1B5EAFDD07EB53AE5C1537
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/NNq9wpMKpAxhT8fj3Wua560Ittc.roa
Signing time: Mon 26 Oct 2026 06:01:04 +0000
ROA not before: Mon 26 Oct 2026 06:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 151.106.80.0/20 maxlen: 24
194.163.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:54:89:fa:1b:5e:af:dd:07:eb:53:ae:5c:15:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 26 06:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34dabdc2930aa40c614fc7e3dd6b9ae7ad08b6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:c8:04:f9:89:18:08:33:32:c8:69:aa:7b:
59:46:05:4f:a1:e9:b4:e0:ef:82:07:43:96:70:26:
70:69:c6:fb:83:c3:d8:63:8e:65:24:4a:86:54:09:
87:ce:f4:06:a2:2f:e5:90:8a:43:97:77:68:c0:95:
09:ca:77:a0:16:ef:9d:96:d6:1a:e7:d4:e1:4d:29:
4c:8a:b0:c3:8c:7a:eb:b1:49:94:02:c6:e2:23:1e:
5e:58:e0:21:34:90:6a:f0:09:3a:e9:16:8b:44:51:
06:48:d3:c0:1f:00:38:52:fb:27:86:21:8e:ad:dd:
20:f3:f5:66:f5:89:17:be:b8:7d:d2:0a:c2:1f:f9:
50:dd:0c:0f:c7:f6:32:63:75:75:0a:1c:84:fb:b4:
ac:3b:af:7a:a1:92:12:01:bb:76:ef:4b:f5:03:f4:
0b:b0:3a:50:a1:65:f9:91:e1:e8:51:8f:5b:8f:59:
68:e9:55:89:e6:c1:4f:87:aa:b0:95:8e:18:bf:98:
85:7f:84:78:94:06:ed:8b:2b:85:6d:d8:5b:0a:3a:
26:8f:d8:d6:5a:b3:bd:06:95:96:1f:1d:2f:a7:86:
7f:0b:fc:50:c7:4f:5b:92:d3:99:ad:df:51:ca:63:
87:ee:3c:31:f6:f0:0e:b1:38:bf:7c:3a:6c:75:a0:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:BD:C2:93:0A:A4:0C:61:4F:C7:E3:DD:6B:9A:E7:AD:08:B6:D7
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/NNq9wpMKpAxhT8fj3Wua560Ittc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.106.80.0/20
194.163.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:d2:63:ce:fe:a5:22:01:04:7b:b3:8f:5d:64:34:99:a1:e7:
13:82:e3:23:ce:8e:01:75:06:2a:5f:bf:0b:bd:9b:1c:80:e3:
d1:b2:1d:68:08:44:b2:1b:c9:76:31:93:2c:d4:fa:89:f9:66:
ba:a1:84:10:62:b0:da:8b:73:8c:3c:8a:a6:12:09:d7:de:82:
09:b3:e5:ce:ca:d2:c3:a4:e7:ec:54:76:2c:a4:83:49:b4:2f:
f4:66:da:86:79:42:59:4f:4d:de:41:34:75:1b:ad:db:97:f8:
df:9c:91:20:95:d4:34:a2:41:d7:ef:f0:c4:58:06:28:f6:fb:
f3:40:7e:7f:d6:ab:f0:7d:12:83:87:3b:b1:ae:31:5f:42:13:
b4:b6:00:c9:19:b9:95:c1:98:24:78:be:95:d6:66:25:28:1f:
5c:d0:87:32:24:d4:f1:4d:64:7f:af:9e:44:fe:31:93:8a:cb:
5f:68:a6:ab:c7:62:30:b6:0d:f1:fa:97:b6:a3:d0:ac:5e:50:
e6:28:65:d6:ae:de:3c:98:12:0f:24:b1:aa:2c:cc:b8:cb:5a:
99:f0:89:36:c1:78:1a:fd:a9:25:86:16:80:9d:67:88:fb:51:
7c:48:48:fe:b6:64:27:10:f9:03:ec:83:ce:05:7b:d8:42:d2:
38:14:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:46 2026 by rpki-client