Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/nT0adKrHOXX76zlKbeIetM2fImw.roa
File: nT0adKrHOXX76zlKbeIetM2fImw.roa (raw, json)
Hash identifier: mcJKLegTxunUDPkoN6855luXrU9XjcS8d14LoXoBwZc=
Subject key identifier: 9D:3D:1A:74:AA:C7:39:75:FB:EB:39:4A:6D:E2:1E:B4:CD:9F:22:6C
Certificate issuer: /CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Certificate serial: 019FEA5203824685ECCDD056A9C8ABD04086
Authority key identifier: 9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/nT0adKrHOXX76zlKbeIetM2fImw.roa
Signing time: Mon 10 Aug 2026 06:17:51 +0000
ROA not before: Mon 10 Aug 2026 06:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214072
IP address blocks: 193.93.75.0/24 maxlen: 24
217.70.13.0/24 maxlen: 24
2a14:2cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:52:03:82:46:85:ec:cd:d0:56:a9:c8:ab:d0:40:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Validity
Not Before: Aug 10 06:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d3d1a74aac73975fbeb394a6de21eb4cd9f226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:1d:4d:55:ae:29:cd:e1:37:e2:58:b2:59:
e4:4b:e9:43:f5:a9:e3:29:8f:9b:fa:11:01:d1:b7:
d5:cd:61:82:80:9f:90:9e:69:0e:fb:4a:b7:93:6c:
24:7b:91:31:e9:76:44:25:a1:da:11:ec:f7:68:4a:
73:54:94:56:1b:af:99:21:59:42:c6:bf:4e:d5:12:
76:51:95:35:04:a0:f0:e7:7f:12:21:5c:ba:da:8e:
c9:22:d8:7a:4a:0b:91:50:6a:0e:d3:5d:fa:fd:b9:
12:af:f5:48:6f:f6:7c:b6:6c:2a:f0:67:97:c7:5b:
0a:63:3e:cd:78:69:71:05:b3:7e:2a:6c:8c:9e:4b:
04:86:1a:46:2c:dd:a1:54:dd:81:4e:d0:19:02:32:
5e:31:e0:4c:2a:51:26:6d:53:bd:c5:ee:b1:9c:a8:
a2:1c:6f:24:d2:60:1f:79:b6:f1:ae:66:19:36:48:
50:17:ec:7a:45:5a:6e:de:1e:69:85:1b:96:7e:bd:
95:48:e1:79:5d:62:4b:6e:e6:f3:81:9d:6e:68:d3:
57:5e:eb:e8:6d:f8:fb:4a:4c:95:69:cf:d3:eb:3f:
86:f6:09:d4:06:0f:bb:e1:1a:67:7e:eb:44:c0:65:
61:32:e4:97:b6:84:01:42:36:50:9a:a6:9d:3f:03:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:1A:74:AA:C7:39:75:FB:EB:39:4A:6D:E2:1E:B4:CD:9F:22:6C
X509v3 Authority Key Identifier:
keyid:9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/nT0adKrHOXX76zlKbeIetM2fImw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.75.0/24
217.70.13.0/24
IPv6:
2a14:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:79:a0:6a:e4:ee:72:69:4e:87:4a:60:c3:f7:75:ee:5c:28:
7e:67:5e:64:be:76:2b:6f:78:5e:b2:f2:4c:39:97:c0:f6:00:
d2:f1:52:84:60:fd:03:34:c8:d7:2d:b5:dc:22:bd:84:64:25:
ef:35:16:b4:03:57:cc:d8:e1:ba:05:a0:03:5a:b9:71:11:cf:
df:39:96:6d:83:47:6c:90:c2:2a:21:fc:42:9e:f8:8c:1f:cf:
30:8e:64:dc:bd:a7:73:fb:e6:7e:76:48:8b:ca:a5:53:65:a5:
28:17:ba:80:ec:ff:1a:87:2b:66:90:25:fb:6e:cb:41:24:74:
20:58:37:80:dd:20:93:8b:d1:d1:3c:75:7c:a6:61:86:00:70:
a3:b1:7d:10:44:44:d1:5d:65:4a:56:3f:cf:37:55:02:f2:ee:
ec:14:d6:96:fd:c3:19:d2:f9:a4:d8:ad:ce:ec:71:b5:ce:da:
15:89:0d:3c:fd:ba:00:5c:fe:1a:52:19:c0:d0:b3:b2:36:cf:
e5:c3:a4:4a:2c:3a:46:24:73:63:a3:21:55:d5:12:bb:bf:8b:
ca:bb:b2:a2:20:2a:e2:70:0d:7b:c2:71:17:f0:65:de:81:2b:
25:ed:65:aa:a5:db:43:8e:d0:32:e8:f3:be:5c:63:1e:a3:72:
88:b9:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:33 2026 by rpki-client