Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nCnsLDlOHwEkNyKW6Jg9S6amRVs.roa
File: nCnsLDlOHwEkNyKW6Jg9S6amRVs.roa (raw, json)
Hash identifier: 8by0sExPtfiYU95Wcrzf9EFGzRZCc4Q+Ive0ZbQ96Ck=
Subject key identifier: 9C:29:EC:2C:39:4E:1F:01:24:37:22:96:E8:98:3D:4B:A6:A6:45:5B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E81BCB04883ECD0111893A897D29E98E4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nCnsLDlOHwEkNyKW6Jg9S6amRVs.roa
Signing time: Mon 01 Jun 2026 05:51:27 +0000
ROA not before: Mon 01 Jun 2026 05:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272696
IP address blocks: 178.253.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:bc:b0:48:83:ec:d0:11:18:93:a8:97:d2:9e:98:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 1 05:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c29ec2c394e1f0124372296e8983d4ba6a6455b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1d:c2:1d:09:72:72:c4:06:5c:72:a5:b4:0f:
e7:60:61:da:b3:70:2a:87:d4:a8:77:ac:ca:49:a7:
7e:e7:ef:19:3f:97:32:fa:97:69:19:cc:77:56:13:
69:aa:9e:e7:fb:ed:b7:35:0d:63:40:22:42:6a:1b:
45:be:1c:d5:8d:c3:18:34:a4:bd:b9:82:bd:c7:0b:
4b:c9:02:58:f0:84:74:cc:69:c5:e8:88:76:9c:34:
01:b1:2c:1c:76:db:67:40:59:30:ea:be:f1:85:d7:
e3:95:a1:d3:ed:2f:c3:a3:43:05:22:28:55:b4:07:
be:94:a9:c8:a6:82:c7:10:65:cd:33:b6:2e:3d:49:
2c:22:f0:cf:da:67:19:a7:cd:f6:03:3d:ce:6c:71:
d6:37:87:fb:42:76:dc:21:60:54:49:27:54:84:fa:
e4:f1:a2:11:70:be:0a:d1:99:90:52:da:10:80:51:
42:26:1c:58:65:38:d7:ab:05:f4:c0:1a:19:45:87:
3c:40:cd:de:89:32:ac:58:72:10:d1:ac:2f:83:45:
88:dc:3e:40:22:8f:a3:1e:06:3d:44:9f:e1:0c:fc:
fa:17:6b:f4:17:5c:32:b1:5b:87:fa:5d:4e:03:a4:
d3:b8:96:95:8b:df:25:fa:c8:15:a8:81:43:8c:f3:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:EC:2C:39:4E:1F:01:24:37:22:96:E8:98:3D:4B:A6:A6:45:5B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nCnsLDlOHwEkNyKW6Jg9S6amRVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:50:1b:65:52:22:e2:73:74:51:6d:42:5b:17:cc:8a:9a:cf:
40:24:7c:fb:aa:9a:63:78:f3:f7:43:48:bc:a1:06:0f:4b:34:
08:2d:f8:51:db:10:a5:35:64:73:b8:da:e8:eb:f3:b7:c0:17:
8c:b8:5c:61:51:fe:d2:e2:eb:19:15:bf:29:69:c3:c4:01:90:
5a:04:cb:8e:67:52:2b:f8:84:ad:79:3b:13:27:1b:5a:d4:6f:
9b:a7:f3:68:2f:46:b4:ce:4c:13:2d:92:62:92:e6:45:6e:17:
97:d3:3a:63:9d:f4:50:67:b7:f2:d8:9e:31:0a:2b:64:14:26:
6a:44:81:92:65:38:d3:16:4f:1c:33:22:ef:e3:2f:7f:6a:80:
3b:b2:c2:d2:9a:34:47:da:9f:d9:0d:44:5e:23:07:67:42:c6:
01:63:c6:4d:29:78:a3:5f:a0:4b:67:af:72:9f:20:24:2f:2e:
9c:27:d1:ab:eb:b5:7e:bf:c5:e5:37:b1:48:66:67:33:61:57:
4a:cd:99:a2:78:7a:7a:c0:8c:70:db:5b:b5:03:ea:b6:df:8b:
af:46:dd:34:4e:ed:a9:be:2e:80:e8:70:58:c1:f0:21:23:9d:
1a:bd:9a:59:8a:99:d7:46:fa:3c:c3:eb:e6:86:b8:e4:33:f9:
3c:39:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:56 2026 by rpki-client