Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/nmhQRbxOa5LT0QGv7lZf7rQ32T4.roa
File: nmhQRbxOa5LT0QGv7lZf7rQ32T4.roa (raw, json)
Hash identifier: I55EeQb+rPeRVV1XHrRa51iLgFO+dYXqGgZQlGC91aA=
Subject key identifier: 9E:68:50:45:BC:4E:6B:92:D3:D1:01:AF:EE:56:5F:EE:B4:37:D9:3E
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019F12B171D75F049CDEA9E0BE9430DC6AD3
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/nmhQRbxOa5LT0QGv7lZf7rQ32T4.roa
Signing time: Mon 29 Jun 2026 09:24:06 +0000
ROA not before: Mon 29 Jun 2026 09:24:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8823
IP address blocks: 193.47.149.0/24 maxlen: 24
2a10:1180::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:b1:71:d7:5f:04:9c:de:a9:e0:be:94:30:dc:6a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Jun 29 09:24:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e685045bc4e6b92d3d101afee565feeb437d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:fc:e3:b3:53:97:c1:fb:3d:18:00:bf:94:
30:59:bb:8c:f9:7c:69:2e:cc:bd:96:84:a7:9f:49:
8a:77:b2:ad:22:6c:ae:a2:dc:a4:8c:bc:c0:d7:ef:
2f:45:a6:84:06:d1:2c:4d:ac:8e:6d:fe:36:0b:c7:
db:6a:a4:62:7d:cf:11:46:74:e7:ed:6a:38:dc:75:
f8:4e:c9:4b:20:e2:b0:26:eb:2d:a5:b6:32:91:14:
20:6c:e8:5d:5c:71:06:04:ab:7a:4e:96:91:4b:85:
23:3c:56:a2:80:4e:bd:27:af:f8:78:77:1a:f4:ee:
8d:3b:42:d0:eb:a5:78:7b:37:a9:fc:0e:fa:44:92:
db:a2:6a:d6:4f:7e:5f:f2:e8:da:7b:ef:71:ab:2b:
e7:37:27:1a:c0:95:7e:93:be:35:d6:09:64:8f:c5:
01:ba:04:92:d2:d5:7a:3d:09:f9:f0:d2:af:69:a7:
d4:ed:ff:d5:4a:02:83:63:0f:68:0c:7b:c4:c1:fc:
0e:83:3e:1e:97:f1:73:bb:1f:9a:21:24:ee:51:81:
e2:da:0c:33:3a:e4:0c:c9:a8:d2:30:d7:52:29:b8:
1b:39:67:4d:33:e3:0f:1e:5f:22:55:5a:43:9d:63:
7c:6f:d6:85:2d:23:cd:6d:17:bf:18:71:15:88:08:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:50:45:BC:4E:6B:92:D3:D1:01:AF:EE:56:5F:EE:B4:37:D9:3E
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/nmhQRbxOa5LT0QGv7lZf7rQ32T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.149.0/24
IPv6:
2a10:1180::/31
Signature Algorithm: sha256WithRSAEncryption
b7:66:e3:87:cb:dc:9d:e9:4b:2c:40:f2:1e:7b:37:12:63:ea:
be:28:12:f9:77:b9:00:2a:62:d6:ab:c2:db:d7:da:93:4a:3b:
e9:b4:ec:a4:6e:59:1c:0a:c6:48:85:72:92:f1:55:f8:a6:0d:
32:48:83:65:11:97:71:95:73:1e:0f:40:0f:b0:48:46:19:2e:
3c:62:51:7c:3a:7f:f0:09:bc:9d:b4:d0:46:fa:2f:cc:8e:50:
ab:ba:10:68:a1:ae:32:07:ac:6a:6f:2b:0e:82:d9:f1:c7:82:
ef:61:52:9d:2f:c5:4c:c2:85:cc:1f:3f:c8:73:5c:36:f5:94:
b1:ce:cb:d7:97:1c:33:d0:1d:4e:a4:0b:b4:76:7c:3e:bc:50:
8b:5f:f5:4d:f7:13:f3:bf:da:8f:15:d7:b8:90:23:b1:80:af:
a2:69:66:6f:b0:54:73:00:04:31:15:5f:0c:39:3c:cb:db:4e:
e2:84:ea:ee:7f:de:d1:04:36:14:c1:de:79:28:15:3d:54:a5:
20:47:4b:ca:08:98:c7:07:1a:df:c7:fc:5d:f9:94:f7:85:08:
33:3b:0e:e5:12:d9:c2:14:b1:df:ef:8d:1e:6c:4d:c5:60:ab:
b8:79:8c:04:e8:48:25:2b:e4:cf:c5:62:35:1c:03:16:50:7c:
4f:d3:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:16 2026 by rpki-client