Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1-NctZe8vhMIEpxqRZfogneyZnss.roa
File: 1-NctZe8vhMIEpxqRZfogneyZnss.roa (raw, json)
Hash identifier: O9B7bZUbmdxOtEzLWoybtmceSxfD5CNuo8HAAtzb55I=
Subject key identifier: F8:D7:2D:65:EF:2F:84:C2:04:A7:1A:91:65:FA:20:9D:EC:99:9E:CB
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01A067221DE178763435F4BC9ED70E8FD025
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1-NctZe8vhMIEpxqRZfogneyZnss.roa
Signing time: Thu 03 Sep 2026 11:58:04 +0000
ROA not before: Thu 03 Sep 2026 11:58:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:22:1d:e1:78:76:34:35:f4:bc:9e:d7:0e:8f:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 3 11:58:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8d72d65ef2f84c204a71a9165fa209dec999ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:15:b4:d7:45:fc:fd:03:e2:65:d9:1f:63:
96:86:ab:27:d9:69:d7:c3:d8:a8:2c:5e:ff:56:41:
3d:f7:d9:82:d6:44:26:de:bd:32:f5:d1:49:18:f6:
4a:16:47:5f:b3:17:c2:31:51:17:c5:33:c9:f0:0f:
c2:15:9d:da:b6:07:c2:a3:80:14:bb:09:88:1f:8d:
d1:a5:32:91:79:82:3f:18:cb:d2:b3:56:7b:c9:4d:
e3:34:15:6d:95:2f:d3:3f:a8:21:3e:fc:89:07:63:
98:d3:e5:72:8b:f8:65:5b:a9:f4:ef:43:ed:dd:88:
9a:ff:46:9c:ad:e4:e3:71:be:bc:c5:21:ee:0e:45:
ec:37:a2:44:aa:62:fc:e9:51:16:04:e9:34:36:5e:
62:58:ef:43:56:d6:48:2a:60:46:46:c5:63:a8:5b:
8a:20:db:53:39:23:f8:9e:b1:d1:c8:66:1e:17:41:
1d:a0:2d:89:d5:80:38:b7:b2:c2:d4:b6:35:11:20:
65:49:33:ba:1d:25:5b:ba:5b:3e:f7:e3:c4:a0:4f:
f9:20:97:db:ec:50:4b:f0:de:c2:0d:14:ac:34:27:
9c:1d:08:85:e5:5c:6f:c6:05:2d:ee:3d:6a:10:1f:
be:f1:a9:f9:29:30:64:e1:6a:25:5c:46:f1:7a:5e:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:2D:65:EF:2F:84:C2:04:A7:1A:91:65:FA:20:9D:EC:99:9E:CB
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1-NctZe8vhMIEpxqRZfogneyZnss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
41:05:01:54:eb:11:48:ac:ac:97:c3:e7:00:47:53:b1:86:73:
5d:7d:86:a8:24:19:9c:f0:1e:c6:28:f9:d1:de:0c:d8:9b:3c:
6c:82:8c:7a:b1:a4:13:c2:ac:78:c1:ed:ec:06:81:e8:08:0e:
26:a0:9f:2b:ef:1e:aa:d6:23:8a:f0:8a:01:b7:92:0a:12:68:
d3:6f:15:11:dc:a3:45:b2:10:f4:f1:79:04:fc:c7:c2:a8:fd:
85:6b:15:44:51:c8:d5:6e:c4:cb:5b:38:cf:84:03:42:37:50:
98:1f:4d:da:05:e2:18:4a:95:c0:4d:5b:c5:a2:cf:dc:42:c0:
4c:dc:98:6a:5a:73:b8:b8:0e:d7:9f:f3:e6:6a:d7:5d:73:b5:
f2:89:d8:d3:21:2f:9a:53:c6:9f:85:6f:64:4a:24:c2:c5:92:
2e:e4:c7:4b:2b:08:91:ab:78:93:71:9b:54:d9:c6:c3:f2:de:
0f:bc:29:1d:73:40:14:f5:37:e6:ad:42:31:78:e7:4a:a5:2c:
83:49:1c:61:8a:4e:3d:8a:da:14:bd:b2:6f:66:b1:8b:89:6d:
08:80:c8:5d:23:d0:2b:05:22:74:5d:4c:9a:74:a7:bb:20:da:
d4:0f:fb:3e:35:ca:a6:30:0d:54:09:ae:6b:f1:cf:ac:4e:d8:
46:69:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:55:00 2026 by rpki-client