Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nXtJShFkrJL3mU8jesMD1OIJtGs.roa
File: nXtJShFkrJL3mU8jesMD1OIJtGs.roa (raw, json)
Hash identifier: XgF25Nj7q+GNdKzf2Q3k26GPWm8vJwzspfGhYi5MFiE=
Subject key identifier: 9D:7B:49:4A:11:64:AC:92:F7:99:4F:23:7A:C3:03:D4:E2:09:B4:6B
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982418FBBE3B82E91E5C1D0687217F4
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nXtJShFkrJL3mU8jesMD1OIJtGs.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 176.53.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:41:8f:bb:e3:b8:2e:91:e5:c1:d0:68:72:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d7b494a1164ac92f7994f237ac303d4e209b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:24:33:67:47:c4:5d:df:26:0c:4b:25:c5:
bc:50:cf:b7:30:0f:73:a5:bb:3c:30:c4:af:6e:d6:
62:aa:d4:f0:fd:dd:bc:8b:6a:c5:91:10:3b:cf:4e:
e2:a7:fa:91:5b:5f:d5:e5:ff:e7:3b:01:d6:57:92:
dc:a9:a4:7c:0f:68:fb:05:94:68:bc:19:b8:d9:68:
75:4c:86:a1:54:af:1c:a0:fb:0f:aa:a0:7c:ad:7f:
2f:1c:b0:5f:4b:e7:6c:2c:17:46:28:cf:bc:ce:90:
0f:79:00:39:21:c5:d9:ee:07:06:d2:e6:b4:4e:32:
42:f2:84:31:63:d7:63:77:47:87:3b:c5:42:cc:58:
f7:f7:ac:40:67:7e:93:73:45:90:c6:61:5b:f3:62:
a9:3d:94:a3:1b:f1:8e:ce:1a:38:e1:e1:77:1f:3f:
16:fa:db:96:1d:53:12:35:35:e9:79:4c:ab:a2:05:
31:cf:13:86:8c:b5:8e:c0:3c:14:5f:a8:3d:21:ad:
1b:3a:cd:ed:5f:2a:cd:38:ec:ba:d3:f4:60:50:8f:
82:2d:fa:5c:bf:14:c3:cc:f1:96:72:39:57:b9:de:
8a:8a:c0:e2:7d:6d:a6:7f:8e:19:41:e2:71:33:d6:
2b:12:10:77:f3:19:ea:79:0d:4a:9c:e7:b8:b4:7f:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:49:4A:11:64:AC:92:F7:99:4F:23:7A:C3:03:D4:E2:09:B4:6B
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nXtJShFkrJL3mU8jesMD1OIJtGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6c:5c:64:93:04:7e:66:b8:5a:5d:b5:67:0d:6a:50:e2:43:
e4:27:2e:2d:c9:dc:84:8a:e3:83:da:52:a1:73:5d:24:f8:48:
31:bf:8d:d7:0c:35:52:0a:ba:fa:dd:e9:c4:ab:87:cf:d1:89:
6a:83:b5:59:bd:fd:6d:a6:22:67:ad:e3:ec:da:2c:5f:b4:89:
3a:51:36:8a:41:b1:20:6e:6e:07:24:3e:05:9e:f1:09:75:d3:
c2:f2:99:b7:de:00:cf:74:00:a9:41:63:a0:ad:89:ed:5e:23:
ec:7b:a3:29:03:f7:f0:fd:7f:33:94:67:d9:e8:03:ce:b7:42:
14:76:fd:41:ee:f8:ff:61:34:65:e0:b3:85:11:4e:f6:76:bb:
b0:37:d2:e0:c4:36:3a:40:42:1d:7b:1b:fe:9e:64:b2:b7:d3:
66:54:ad:34:bb:77:1f:16:3f:d6:6a:ef:21:9a:13:47:03:f5:
0a:94:cb:f1:84:b4:a7:c8:98:15:74:a8:22:20:08:77:5b:09:
b5:a5:92:e9:65:b8:47:a8:c2:53:63:aa:c9:f5:93:c4:a8:ed:
a4:10:dd:8a:a4:6f:51:6a:21:2c:34:48:89:67:e6:b9:a4:0c:
c6:36:c5:32:a4:28:5e:2e:52:a1:ce:93:20:6d:ea:6d:cb:ee:
18:ed:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:10 2026 by rpki-client