Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa
File: ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa (raw, json)
Hash identifier: yq11gq+saeIJh+XRctBRBjtBTL9vZCS0Lnel9O9f6gc=
Subject key identifier: 9E:D2:EB:C5:F5:72:4F:71:05:FC:77:D8:14:38:12:2D:02:04:AB:96
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019FF60C0981A506B7A6F211EC18A63FB301
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa
Signing time: Wed 12 Aug 2026 12:56:51 +0000
ROA not before: Wed 12 Aug 2026 12:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20621
IP address blocks: 212.40.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:09:81:a5:06:b7:a6:f2:11:ec:18:a6:3f:b3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 12 12:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ed2ebc5f5724f7105fc77d81438122d0204ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:ce:29:18:a3:95:cc:41:b5:45:c6:9c:54:
83:04:8f:b8:96:40:3c:16:93:86:d0:e8:cf:ac:ed:
94:e1:70:49:5e:61:e7:e7:e5:41:b7:76:51:f1:bb:
e3:71:bc:73:cc:0a:62:02:26:12:1b:57:b0:29:97:
f3:5b:58:09:18:e6:20:7a:64:68:77:e0:dd:fe:be:
a8:b2:05:a1:d4:a4:cd:54:a1:90:ab:9b:bb:91:46:
35:ff:56:fd:c4:25:0e:1e:1c:49:c4:4b:93:41:a6:
1a:0d:4d:fd:89:a5:2d:99:f3:c6:f5:29:50:e5:4b:
2c:c4:11:d8:39:2a:cd:d8:0e:f4:8f:82:03:ec:8e:
ef:50:7b:95:c6:86:e1:b7:41:b4:bd:8b:38:7e:ee:
9e:7e:3d:f2:8d:8e:79:55:11:50:01:6f:81:05:a0:
50:be:a8:79:8b:52:4a:3e:08:f6:f9:c0:03:cf:88:
53:99:a0:b1:c3:29:26:fd:e5:56:46:29:75:b9:59:
36:8a:8e:92:bb:d9:6e:a8:70:30:f2:74:13:4d:7b:
53:52:7f:66:38:77:3a:5c:b7:22:bd:5f:6e:23:96:
55:5b:8a:20:8a:58:0d:3b:56:5d:53:c5:82:2c:b4:
25:93:53:75:66:34:f9:93:de:e5:df:e5:84:25:b1:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:EB:C5:F5:72:4F:71:05:FC:77:D8:14:38:12:2D:02:04:AB:96
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.181.0/24
Signature Algorithm: sha256WithRSAEncryption
51:83:bf:d3:65:e2:da:90:ba:c4:2f:10:d4:29:ba:e5:88:a8:
2d:ab:71:a2:16:e5:18:1e:98:c6:d6:1d:4d:78:6a:90:d4:94:
8d:1e:46:b6:64:0c:fb:73:af:d7:2e:29:68:d7:49:4b:97:8c:
6b:6c:ea:63:1e:b1:05:64:e4:e4:dd:63:d0:44:31:4b:25:b9:
f8:61:8a:cf:7b:ec:d8:28:4e:e6:28:b2:3e:af:48:16:f3:cc:
62:83:91:44:2d:ef:66:21:ed:fc:bb:0c:aa:af:8f:74:31:a3:
e9:ff:41:f8:3c:e1:9b:b5:1d:f0:73:27:3f:ef:02:fd:c0:c2:
cd:95:f6:48:01:f7:66:7e:8d:02:73:a0:e6:86:4c:40:cf:80:
ce:dd:ba:47:87:96:8e:83:53:94:8f:e9:fd:3d:d0:0b:75:d5:
8e:4e:4e:b3:9e:46:c4:f9:ab:3f:91:8f:66:2e:3b:e8:f0:e3:
6b:f8:a6:cd:69:52:68:88:90:f3:8c:d8:b4:1a:7e:f3:25:65:
ef:20:e5:80:78:35:25:63:f6:8d:b5:5b:4e:af:8b:73:56:93:
6a:c7:72:ec:44:33:90:a9:d0:fc:7b:b9:af:c7:9d:a0:74:43:
44:c3:aa:cd:f8:2d:5b:ce:0a:1f:19:f6:ac:df:78:0c:31:57:
be:93:8e:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/2DAmBpQa3pvIR7BimP7MBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjYwODEyMTI1NjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWQyZWJjNWY1NzI0ZjcxMDVmYzc3ZDgxNDM4MTIyZDAyMDRhYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1XOKRijlcxBtUXGnFSDBI+4lkA8
FpOG0OjPrO2U4XBJXmHn5+VBt3ZR8bvjcbxzzApiAiYSG1ewKZfzW1gJGOYgemRo
d+Dd/r6osgWh1KTNVKGQq5u7kUY1/1b9xCUOHhxJxEuTQaYaDU39iaUtmfPG9SlQ
5UssxBHYOSrN2A70j4ID7I7vUHuVxobht0G0vYs4fu6efj3yjY55VRFQAW+BBaBQ
vqh5i1JKPgj2+cADz4hTmaCxwykm/eVWRil1uVk2io6Su9luqHAw8nQTTXtTUn9m
OHc6XLcivV9uI5ZVW4ogilgNO1ZdU8WCLLQlk1N1ZjT5k97l3+WEJbE22wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ7S68X1ck9xBfx32BQ4Ei0CBKuWMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvbnRMcnhmVnlUM0VGX0hmWUZEZ1NMUUlFcTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Ci1MA0G
CSqGSIb3DQEBCwUAA4IBAQBRg7/TZeLakLrELxDUKbrliKgtq3GiFuUYHpjG1h1N
eGqQ1JSNHka2ZAz7c6/XLilo10lLl4xrbOpjHrEFZOTk3WPQRDFLJbn4YYrPe+zY
KE7mKLI+r0gW88xig5FELe9mIe38uwyqr490MaPp/0H4POGbtR3wcyc/7wL9wMLN
lfZIAfdmfo0Cc6DmhkxAz4DO3bpHh5aOg1OUj+n9PdALddWOTk6znkbE+as/kY9m
Ljvo8ONr+KbNaVJoiJDzjNi0Gn7zJWXvIOWAeDUlY/aNtVtOr4tzVpNqx3LsRDOQ
qdD8e7mvx52gdENEw6rN+C1bzgofGfas33gMMVe+k45p
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:27:55 2026 by rpki-client