Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/RNLAho-QCCsGT4LlSBmDznPzISI.roa
File: RNLAho-QCCsGT4LlSBmDznPzISI.roa (raw, json)
Hash identifier: k9qrK3CB3pZBI/+ijf1H63IQuNeWEj/N3CKMuUtiwh0=
Subject key identifier: 44:D2:C0:86:8F:90:08:2B:06:4F:82:E5:48:19:83:CE:73:F3:21:22
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A04390FAAC360325C01573D852E206C4B5
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/RNLAho-QCCsGT4LlSBmDznPzISI.roa
Signing time: Thu 27 Aug 2026 14:12:49 +0000
ROA not before: Thu 27 Aug 2026 14:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62651
IP address blocks: 109.229.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:90:fa:ac:36:03:25:c0:15:73:d8:52:e2:06:c4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 27 14:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44d2c0868f90082b064f82e5481983ce73f32122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:58:32:e9:1e:03:0d:fc:fb:79:8e:c3:c7:
79:6e:e5:ab:cc:c6:84:5a:8a:fe:f0:24:a8:de:9b:
67:d6:db:8b:6e:3d:69:0b:12:38:54:22:5f:cd:41:
57:58:52:f2:ed:68:df:3d:9d:b2:d1:bb:fc:a9:fc:
dd:a9:b0:b1:48:48:ee:2a:a2:c6:01:77:bb:46:e2:
47:bc:d8:0a:d8:04:a7:2c:34:6b:9b:f3:59:53:a7:
e4:d1:9a:1a:d7:9b:7b:e9:91:fc:7a:f3:69:0d:55:
f3:ab:a6:f9:67:da:e6:ec:52:7a:3a:a8:3c:29:24:
6c:ec:14:68:82:e9:2e:3e:09:25:44:58:fc:50:e2:
45:ac:a8:bf:81:5d:d5:e5:dd:bc:3a:d9:c0:b4:2c:
b5:36:83:a6:fe:fd:cc:be:b1:8e:5b:b2:e2:55:0e:
b9:02:d2:32:ab:6f:a9:61:80:0f:26:9c:20:de:c6:
8f:a8:84:1e:07:e7:15:10:24:51:79:72:0e:0d:c5:
45:c6:3d:c8:6c:af:25:77:2b:55:67:49:99:d7:c1:
38:d8:0e:1d:c0:4a:bd:60:16:59:3f:f5:f5:fb:09:
01:bd:da:bd:88:51:32:ed:19:84:5d:63:1c:1c:40:
84:30:e8:3b:aa:65:b3:4d:a9:8d:b9:2c:d5:ee:25:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:C0:86:8F:90:08:2B:06:4F:82:E5:48:19:83:CE:73:F3:21:22
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/RNLAho-QCCsGT4LlSBmDznPzISI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:00:3b:e9:5d:07:0b:d3:9e:13:61:89:04:6d:fe:0a:ab:e7:
2d:7d:3d:f1:2b:5d:6e:73:ce:fb:9c:c2:d4:7f:c6:d3:01:51:
ce:86:80:fd:55:1a:42:c4:b3:45:cc:5a:8e:d0:47:4c:31:16:
23:b6:92:8a:31:59:9e:37:4c:72:11:a5:d0:27:8d:e9:b5:0a:
74:02:c6:7f:1f:12:50:d5:34:75:44:33:c0:b7:80:11:96:a1:
9a:3f:d1:6e:d7:61:fe:47:3a:a0:cd:6a:fa:ab:4b:2b:1c:ee:
3a:c7:60:e9:19:cd:b3:f4:51:3e:83:8f:9b:93:15:ba:3e:19:
d6:de:34:eb:19:50:12:e1:e2:4a:e1:5b:fa:5d:e1:2d:75:ed:
6d:23:0c:32:76:e0:6b:07:1d:51:c7:15:31:13:8b:6e:0b:f2:
97:e2:0f:8c:17:22:e7:f6:6c:c6:96:4a:8b:a4:b3:e1:1d:6f:
12:ec:ad:de:d3:ae:bc:47:f0:ed:f3:c4:e7:e4:61:5e:6a:f1:
8a:92:bd:3f:36:2e:67:42:f6:6e:30:3d:df:9a:37:42:45:56:
69:59:fc:44:cd:fc:6b:44:ea:a4:64:67:f0:2a:cf:50:8a:85:
a7:c1:62:51:b6:17:11:0b:62:db:6c:59:1a:1e:c8:99:3b:06:
f2:40:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:00:37 2026 by rpki-client