Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/NYhe77qPXkT9jbK_mCglwgN0KSc.roa
File: NYhe77qPXkT9jbK_mCglwgN0KSc.roa (raw, json)
Hash identifier: N4o7e7+pzteHCfjjrZrmPQBHgxHiEFPs60jPruiVUkQ=
Subject key identifier: 35:88:5E:EF:BA:8F:5E:44:FD:8D:B2:BF:98:28:25:C2:03:74:29:27
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A16372243BE1E77E2643B34A0033A136E5
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/NYhe77qPXkT9jbK_mCglwgN0KSc.roa
Signing time: Thu 22 Oct 2026 11:49:47 +0000
ROA not before: Thu 22 Oct 2026 11:49:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201817
IP address blocks: 90.156.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:72:24:3b:e1:e7:7e:26:43:b3:4a:00:33:a1:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 11:49:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35885eefba8f5e44fd8db2bf982825c203742927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:e2:7b:a0:88:b7:89:9f:93:0b:dd:1d:58:
24:9f:5b:07:3d:c8:64:9f:2b:ba:2d:21:48:2c:ca:
6f:7a:ea:19:e0:4a:98:eb:56:7a:a6:e5:c2:65:49:
99:e9:6f:dc:d8:11:14:7c:f3:cd:d6:f0:27:7a:d4:
67:b2:26:4d:9d:8d:06:15:7e:b2:1e:07:66:ac:c4:
f3:ff:af:76:58:5b:73:46:2e:d1:9d:94:4b:60:da:
d1:50:66:b8:12:81:53:4b:93:1c:a9:4b:03:cb:4c:
d3:72:d4:e1:00:01:20:93:15:b2:3f:f1:3d:22:14:
f4:3e:78:8c:dd:bd:95:31:9e:f6:cc:47:62:b0:38:
70:dc:e3:e8:ea:9f:d4:83:37:70:8e:17:be:3f:d9:
72:08:6e:f2:26:53:a5:c1:54:0a:27:b4:a6:d0:b4:
47:bc:46:15:6d:8b:7b:a4:b9:bd:91:53:a7:05:40:
ee:02:c4:e8:8b:fb:94:12:6d:38:0d:8e:a8:7d:3d:
6f:b9:16:0b:af:78:67:8f:10:a2:db:2d:eb:d1:42:
94:44:5d:ba:19:6f:bf:c5:14:f1:5e:4b:2d:74:68:
7e:a6:c9:07:5d:f0:62:ad:1c:56:80:15:01:75:bd:
f0:da:72:71:df:cc:fa:73:b2:6e:5e:cf:6e:4d:41:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:5E:EF:BA:8F:5E:44:FD:8D:B2:BF:98:28:25:C2:03:74:29:27
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/NYhe77qPXkT9jbK_mCglwgN0KSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.248.0/22
Signature Algorithm: sha256WithRSAEncryption
16:12:ac:bc:3a:10:ad:de:7c:43:b5:ba:aa:89:22:f1:b2:59:
43:91:b5:58:f7:d7:d2:0f:1d:56:95:bd:c2:77:bc:f3:b3:bc:
4a:cd:f9:d0:c7:aa:22:93:a9:12:a3:9c:da:dd:7b:cd:d9:4c:
0e:08:ee:ca:b3:1b:6c:86:5f:95:9c:2a:20:d8:3e:02:f7:35:
40:df:91:f3:df:f0:e4:5f:68:8b:f0:34:6f:4d:ab:4c:d3:6e:
4e:03:4b:7c:d1:43:16:e0:5d:95:75:7d:1d:64:3e:39:d3:aa:
80:91:cc:54:bc:5e:6a:85:ee:1f:d0:a2:ff:e3:f3:c5:77:2e:
21:9f:75:d6:be:ae:25:da:be:f2:a7:28:b7:80:58:94:2b:77:
7b:a7:97:47:d7:8e:c5:76:66:cb:b2:da:26:06:51:12:c9:e9:
0e:0e:23:b6:f1:ba:a2:25:4d:e6:6c:13:ff:26:b0:98:2c:e8:
dd:7b:6d:85:07:d9:82:8a:51:a1:e0:70:23:23:cf:66:bf:77:
90:ed:8a:44:76:7f:f7:ca:b0:f1:3c:2e:52:d0:49:44:bf:9e:
69:8c:70:79:c3:10:75:aa:48:93:55:c5:c0:f6:25:34:5f:ea:
4f:b2:da:c9:3b:ba:2a:48:39:71:8d:2a:c2:b5:3e:bb:b6:f1:
e3:b8:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:00 2026 by rpki-client