Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/nIQBtqCOW4jgDZ2FJb1xHaqF1ic.roa
File: nIQBtqCOW4jgDZ2FJb1xHaqF1ic.roa (raw, json)
Hash identifier: tTtgs//t2Juiyz/b3YQWkBvs5uSiar0aUFIwCd1CLm4=
Subject key identifier: 9C:84:01:B6:A0:8E:5B:88:E0:0D:9D:85:25:BD:71:1D:AA:85:D6:27
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01A0A52C1F50151263E1136C7A53B9E8F178
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/nIQBtqCOW4jgDZ2FJb1xHaqF1ic.roa
Signing time: Tue 15 Sep 2026 13:05:27 +0000
ROA not before: Tue 15 Sep 2026 13:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.70.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:2c:1f:50:15:12:63:e1:13:6c:7a:53:b9:e8:f1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Sep 15 13:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c8401b6a08e5b88e00d9d8525bd711daa85d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:97:11:0c:b6:5a:8b:69:01:32:46:71:0e:
34:cf:c2:82:e5:04:81:7f:c3:ce:76:d8:eb:e1:1b:
d4:62:31:2c:ae:40:8c:39:d4:0b:24:7d:85:72:5d:
04:d3:37:20:47:e8:8c:e2:cc:4e:34:98:df:cc:93:
ae:03:c3:e0:5c:f5:c1:77:f0:c4:d4:a8:af:f5:23:
c9:8e:0b:34:79:5d:e6:6d:4d:ff:ff:a4:8d:88:02:
2d:7f:74:ad:f7:e3:26:27:f8:6b:8f:8d:86:71:10:
10:1f:9f:5f:23:86:b8:ce:c3:a0:2f:65:69:77:c8:
e8:4a:60:09:be:1b:fe:dc:28:43:4d:04:75:76:db:
0e:6a:7b:53:8f:40:84:90:22:53:b2:e8:57:0c:95:
08:02:ab:26:97:0f:7f:29:fb:9e:b4:71:a3:25:3e:
9a:70:7e:28:ec:c8:b8:8b:66:48:b0:e7:61:6f:c2:
45:9d:97:4f:b2:0d:4b:dc:43:13:05:2a:29:fa:94:
d9:d1:88:e6:3f:10:7d:5b:c7:18:77:ad:0e:9b:71:
7c:1e:4e:d8:12:8a:4a:06:52:69:80:8e:8b:21:5b:
09:23:d6:fb:8b:88:b3:78:08:c3:53:4f:cd:8a:a1:
b7:0f:17:5d:7c:f1:bc:5b:6a:2c:86:3d:04:72:78:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:01:B6:A0:8E:5B:88:E0:0D:9D:85:25:BD:71:1D:AA:85:D6:27
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/nIQBtqCOW4jgDZ2FJb1xHaqF1ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0b:41:91:41:a9:0c:ec:44:d0:c3:30:c0:34:45:86:d5:7b:
9d:e0:6b:91:5d:f7:e2:87:90:4e:a8:1c:08:11:20:e4:75:f6:
2c:0c:1c:26:d5:97:d9:7e:0f:11:cb:f3:c0:83:a6:26:90:2c:
28:ae:f8:5e:e6:00:97:41:32:df:46:77:a5:21:62:9e:05:bd:
ff:b6:4d:8b:74:a5:cb:4c:3a:dc:aa:80:4c:e9:73:dc:a3:f4:
af:8e:b6:e3:e1:1d:0a:da:ce:8e:5a:17:e4:15:bd:ac:8a:64:
e8:fc:18:8b:92:38:2c:fe:1c:52:2e:11:03:84:d7:f9:28:ec:
bd:a6:0b:77:ba:ce:d0:92:b1:bd:34:b1:2f:a0:f7:b2:79:89:
60:9e:93:8f:e3:c6:ec:f4:ca:e9:8c:04:08:9a:72:b2:2b:ed:
ef:72:2a:d0:40:8a:7b:0b:51:f4:5c:dc:81:5a:26:76:c5:5c:
a1:22:73:ac:8f:73:5a:e0:19:8c:38:e8:01:cc:ea:6d:66:61:
c6:77:e7:ec:5e:c2:83:31:5d:a6:a1:03:bc:71:74:b7:65:ee:
98:41:19:79:33:21:df:76:8e:6f:3c:1a:e9:01:af:8d:1c:d6:
d6:bc:ec:fa:25:1d:58:18:bf:95:85:0b:da:14:9b:1f:92:7c:
04:db:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:14 2026 by rpki-client