Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa
File: nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa (raw, json)
Hash identifier: mgnK6g1VitEYDRZxuk2/lwLjkbGOufzmOfyHhd2Awg0=
Subject key identifier: 9D:10:CD:D6:F1:07:CD:A1:19:9C:C2:37:A9:1D:CB:FC:C9:19:CE:3A
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01A0A097566D5C6E7352B929E7B9C0A11D07
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa
Signing time: Mon 14 Sep 2026 15:44:27 +0000
ROA not before: Mon 14 Sep 2026 15:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 95.170.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:97:56:6d:5c:6e:73:52:b9:29:e7:b9:c0:a1:1d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Sep 14 15:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d10cdd6f107cda1199cc237a91dcbfcc919ce3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:2f:39:94:63:4c:84:12:16:f5:ed:f6:15:
e9:c7:d5:62:74:aa:26:2f:5f:6b:6a:12:6f:70:7f:
be:01:13:af:9d:85:ac:a1:78:90:94:4d:8f:80:aa:
3f:6b:75:e0:d2:bf:75:ee:24:4c:71:47:e7:0b:c0:
e4:d7:7a:5e:a2:51:0a:ee:39:f2:e5:51:ee:d0:03:
de:fa:60:1e:5c:0e:e9:30:a3:df:34:00:1b:5e:16:
fc:44:8e:01:c0:fd:c2:2d:a5:67:1a:7a:dd:ca:e1:
27:3d:78:58:b1:0e:55:ce:d1:aa:1b:59:b4:3a:c8:
ff:9c:b4:cd:09:c6:96:59:e4:cb:ec:51:fc:f6:fc:
53:a2:c2:74:61:f6:ec:4c:52:44:25:d2:1d:ff:e6:
17:6b:08:65:bf:2c:a7:55:57:a9:b5:a0:84:1f:38:
22:03:75:1f:2a:eb:6d:10:d6:23:f3:62:b5:26:7a:
b7:b8:8e:e7:7e:fd:eb:f1:5d:e9:75:11:ce:f0:2b:
a8:e4:9b:d1:92:17:b2:bb:c0:cc:8d:22:c1:60:15:
5b:9b:c4:eb:e7:60:2d:91:1a:0f:47:97:e5:26:ba:
da:fe:96:6e:61:38:28:9a:17:9f:de:38:33:e8:61:
3e:08:eb:85:27:f1:fa:96:0f:41:8a:15:a2:33:56:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:CD:D6:F1:07:CD:A1:19:9C:C2:37:A9:1D:CB:FC:C9:19:CE:3A
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.25.0/24
Signature Algorithm: sha256WithRSAEncryption
29:82:e1:8e:e4:69:a0:b4:f4:a2:2e:94:0a:32:22:9e:65:ed:
ec:f7:2b:28:a0:6a:96:f9:dc:37:9f:ac:c2:80:96:80:88:2b:
75:a9:23:46:49:7c:5d:c2:d2:6b:9e:ae:58:15:ce:63:47:43:
ca:ec:a7:a0:f6:20:45:9f:0d:64:dc:20:e4:6d:7f:db:ed:5d:
25:3b:c4:13:60:f8:e2:e0:2a:2b:42:f6:29:49:6c:19:b5:61:
d8:42:ac:7b:f7:2e:ea:f5:f5:bf:31:7b:52:e4:86:09:67:c3:
bd:cb:ed:b5:09:99:03:42:11:fd:13:da:56:d4:ff:42:f2:eb:
c4:5d:62:43:35:d7:56:d0:3c:b5:c2:f0:74:2f:79:54:92:4a:
56:ad:7a:c1:d0:cb:02:f6:7d:3b:78:fa:7c:e3:f1:62:0c:d5:
40:6d:be:ce:04:4a:b8:28:aa:f0:72:11:fe:44:65:1e:bb:16:
04:72:a0:55:13:18:8d:82:83:a7:52:13:a3:cd:1a:48:5d:cf:
2f:25:db:13:d0:42:2c:30:5a:60:40:c5:91:61:38:bd:c3:51:
89:f3:37:83:d0:00:46:55:04:21:1d:5f:ed:4f:90:d0:9c:20:
53:e3:58:75:91:99:7a:11:7c:7a:18:e9:19:2e:04:ea:e5:61:
97:6e:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:11:25 2026 by rpki-client