Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0NQ9K_npSt66_TZs-gOgc-gokNs.roa
File: 0NQ9K_npSt66_TZs-gOgc-gokNs.roa (raw, json)
Hash identifier: /NYPeD/tsm/LXyf2lDDZyUJe7J+RbAZh7GIO/XOG5mc=
Subject key identifier: D0:D4:3D:2B:F9:E9:4A:DE:BA:FD:36:6C:FA:03:A0:73:E8:28:90:DB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047BEAC3DC1F371789643F2D3DECED024
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0NQ9K_npSt66_TZs-gOgc-gokNs.roa
Signing time: Fri 28 Aug 2026 09:41:13 +0000
ROA not before: Fri 28 Aug 2026 09:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207550
IP address blocks: 92.71.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:be:ac:3d:c1:f3:71:78:96:43:f2:d3:de:ce:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0d43d2bf9e94adebafd366cfa03a073e82890db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:50:76:94:2a:ac:ca:15:9f:d5:a3:2a:f6:
d7:20:ce:c3:bb:f9:3d:17:39:dc:2a:21:4c:44:cb:
e8:8b:a9:80:24:23:f0:19:f6:5f:92:a3:2d:dd:3e:
ac:4b:42:80:90:5f:d6:7f:81:93:7b:03:64:c0:a5:
95:ec:20:22:8a:66:f7:a1:95:ae:2e:2f:9e:4d:0d:
46:2d:8f:e8:98:a4:95:fd:85:9e:88:cf:4c:9a:b3:
1f:8c:45:17:3e:b0:fe:50:7c:d9:81:30:34:96:82:
0a:2c:7a:38:95:b6:5e:25:21:ac:cf:9b:01:a7:00:
84:7d:e6:d2:59:44:88:2f:73:ea:76:ad:1c:00:de:
85:71:67:6c:1e:3f:a0:a7:27:c6:3b:1b:e2:79:07:
a5:a7:06:b3:db:17:72:ef:3c:b0:ae:7f:7c:12:5d:
3c:09:a6:d6:d1:37:c3:74:17:d5:80:44:29:ee:46:
31:9e:1a:3f:2d:09:3e:c7:32:15:08:84:ca:b0:3e:
25:7d:b4:61:00:3d:bd:16:ac:eb:96:8e:3f:8a:7c:
93:c1:fe:bc:6a:d0:ec:7a:73:3a:f5:43:06:3d:7b:
39:34:18:c3:5d:53:f6:dc:11:31:b9:35:4f:a4:e8:
68:e9:0b:3a:e3:08:2e:83:10:5a:0b:d2:ba:9f:47:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D4:3D:2B:F9:E9:4A:DE:BA:FD:36:6C:FA:03:A0:73:E8:28:90:DB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0NQ9K_npSt66_TZs-gOgc-gokNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
Signature Algorithm: sha256WithRSAEncryption
84:17:b1:27:9f:c4:53:91:34:4f:26:16:8d:fc:6c:5c:9f:a9:
8b:42:81:ae:48:8c:48:fa:2c:04:af:e7:40:31:6f:3d:8e:9f:
6b:0b:41:65:9d:4d:ef:0b:b9:e3:f6:96:ca:4f:3c:b4:c8:ca:
73:34:6d:4f:2f:bd:18:4c:6e:68:ea:5c:37:c4:72:b5:2e:1f:
69:de:5e:ef:6e:f7:c8:d4:01:ab:b1:b4:91:c5:6c:45:77:cb:
4b:5e:77:25:00:c3:0e:01:25:ba:64:71:4a:24:62:ac:0e:25:
85:2e:29:77:39:fd:9f:77:8f:b7:43:b7:bc:d5:0f:17:2c:0c:
b5:ac:be:0b:05:99:10:6b:bc:cf:e2:a0:0f:18:4e:9c:cd:8b:
3f:d5:45:ac:e6:99:a8:c9:b7:16:d7:12:0d:ce:40:8a:92:37:
c7:98:11:3a:b8:6d:9d:22:0c:31:4f:3e:46:6b:00:f9:cb:71:
b1:9c:9d:09:d9:b6:7b:a6:d1:1f:d6:37:a6:3b:75:bf:d9:67:
bf:13:1e:1a:b4:21:70:e7:f7:b0:60:72:d8:4a:3e:07:49:82:
11:56:fb:6a:92:38:e2:ef:6f:25:a0:68:a6:7a:8b:15:81:3e:
98:a6:75:e1:8c:ef:2b:df:de:1d:01:16:6b:54:c4:4e:30:58:
e7:45:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:26 2026 by rpki-client