Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/NC0rK-C03thsac9C4QAkEJ-rEbs.roa
File: NC0rK-C03thsac9C4QAkEJ-rEbs.roa (raw, json)
Hash identifier: 3yb9aiIunxdu0hRGJg2ZQAjKyUgacXFW5LOpn3cYaFs=
Subject key identifier: 34:2D:2B:2B:E0:B4:DE:D8:6C:69:CF:42:E1:00:24:10:9F:AB:11:BB
Certificate issuer: /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial: 01A083381AAEEC8FCFBA7DE52DCAF093CECA
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/NC0rK-C03thsac9C4QAkEJ-rEbs.roa
Signing time: Tue 08 Sep 2026 22:51:27 +0000
ROA not before: Tue 08 Sep 2026 22:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42183
IP address blocks: 188.93.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:38:1a:ae:ec:8f:cf:ba:7d:e5:2d:ca:f0:93:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
Validity
Not Before: Sep 8 22:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342d2b2be0b4ded86c69cf42e10024109fab11bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:ae:2a:89:2c:6b:b5:51:53:ba:0a:4d:af:
1f:9d:55:8e:0b:d2:7b:a7:d2:23:e1:88:51:d2:89:
28:5f:2e:8b:b8:46:ef:d3:71:8c:45:7e:66:1d:4d:
fc:3c:ab:09:bc:d3:1f:ef:8b:ee:55:0e:0c:5e:70:
f5:e9:dd:30:6c:67:f2:25:f6:d1:b5:54:2d:37:90:
bf:bb:a0:d2:7c:9c:5c:4d:31:02:29:68:c1:b2:d5:
cf:f6:36:d3:30:e9:7d:6d:d8:eb:2e:17:f0:ad:33:
07:2b:74:4c:16:2d:34:14:5a:b2:d6:33:4a:2d:e9:
71:35:8f:d1:40:28:0f:2f:0d:ab:78:aa:ee:45:6a:
e6:72:fe:29:50:d1:e0:ec:3f:6b:a4:8a:cb:90:c3:
33:30:5b:1a:07:af:99:b7:a2:a6:c8:09:8f:b4:63:
44:38:2f:11:01:c5:97:a2:a1:f9:39:3f:c4:7c:0e:
53:70:ae:05:98:e9:78:b2:84:22:9b:4c:e1:a6:7b:
c1:8b:97:ec:a8:dd:2f:65:24:09:8f:97:11:5b:c8:
a4:87:e0:6c:65:0d:25:1c:6b:8a:df:bd:77:ec:7d:
bd:6f:f6:76:25:91:14:98:20:01:ae:57:7a:e7:3d:
a1:3f:0d:de:1a:2c:9d:47:f0:82:18:46:46:89:ec:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:2B:2B:E0:B4:DE:D8:6C:69:CF:42:E1:00:24:10:9F:AB:11:BB
X509v3 Authority Key Identifier:
keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/NC0rK-C03thsac9C4QAkEJ-rEbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2b:a7:1c:03:70:d5:a8:8f:61:78:c1:f4:52:ee:be:41:65:
78:0d:96:41:f9:1d:29:ee:57:e3:51:3c:6e:7a:b0:86:ca:6a:
ca:e5:63:4c:61:90:46:2b:61:70:71:fc:3d:d2:e4:9d:29:90:
12:4d:df:67:8c:38:43:ae:82:b6:47:4f:e0:7b:d3:0c:81:43:
d8:c2:33:c3:3a:98:07:8e:d1:85:f4:fe:34:61:71:95:89:47:
7f:38:d1:33:a1:ad:bf:cb:fa:89:6c:56:fa:48:30:b9:b8:18:
96:d8:7e:e9:25:f9:d9:b5:08:6a:77:b0:92:b5:a7:66:2d:19:
bf:00:5c:0d:16:3f:db:92:97:36:49:8d:45:cd:5e:1d:34:89:
4b:00:41:20:4e:b9:ca:39:9e:a2:fb:a6:5b:81:80:63:97:f0:
ae:25:ea:55:f4:aa:47:f5:4a:f5:d2:a5:51:ce:20:a7:08:0f:
7f:66:5f:e2:cf:97:6b:da:54:a1:03:1f:85:dc:fd:5b:b2:d2:
2e:4e:5a:df:ff:e3:ec:46:0c:f1:76:29:c0:12:38:a5:28:52:
da:db:e1:af:21:5c:46:95:fd:56:c9:b2:76:80:45:ed:c9:53:
1e:52:b5:65:fa:23:45:b5:5e:bc:49:fa:cb:00:7d:72:be:84:
ea:9a:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:02:56 2026 by rpki-client