Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa
File: NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa (raw, json)
Hash identifier: XSYe/oEdzIZhvEhSL0EIgTMEviLDbp4F9Od9G/pHsq4=
Subject key identifier: 36:AB:C5:FD:EC:33:D6:EE:7E:67:0C:99:B2:F6:5F:54:27:2F:F5:E3
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01A015E9EFA77CA3A30BC1A9E0BD1123DAB4
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa
Signing time: Tue 18 Aug 2026 17:27:27 +0000
ROA not before: Tue 18 Aug 2026 17:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211368
IP address blocks: 142.228.54.0/24 maxlen: 24
142.228.55.0/24 maxlen: 24
2a10:f2c0:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:e9:ef:a7:7c:a3:a3:0b:c1:a9:e0:bd:11:23:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Aug 18 17:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36abc5fdec33d6ee7e670c99b2f65f54272ff5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:14:e4:79:57:71:b5:20:32:13:ea:03:c8:
92:2f:b3:02:fa:77:6c:cd:f6:80:dd:0c:63:1c:f6:
cd:30:4d:87:e7:8d:71:3c:20:93:3c:35:88:28:c9:
d4:f9:8b:8f:68:f7:5a:63:05:21:81:6e:1d:c0:cd:
73:58:c0:7e:e5:f3:cd:aa:f1:d0:f5:9d:5b:ea:bc:
f3:64:50:a5:c4:e1:61:4d:55:32:fa:95:6b:db:f5:
5c:6c:3b:b0:ed:be:90:f9:be:ba:f3:74:3a:11:ed:
bd:34:69:87:70:41:86:02:e0:29:f9:38:83:37:0d:
11:b4:6f:0a:8f:bb:de:af:68:5f:08:71:a2:2c:0c:
fb:17:20:7f:00:f3:b3:ab:42:a4:0f:0e:e6:7b:39:
61:57:77:f9:d5:b9:53:8d:eb:cb:18:88:5a:82:02:
34:56:1d:2d:4a:80:d0:be:94:60:02:c3:54:f4:ed:
c1:54:07:77:4e:16:8c:a8:34:10:62:7e:4c:84:2d:
d8:28:1f:79:c5:85:01:6b:83:48:4a:a5:b8:56:39:
de:69:b8:b9:00:b4:31:5b:ac:06:15:b1:4f:28:b2:
c5:45:4b:6b:c0:cc:7a:80:9a:48:5a:86:6c:e5:77:
81:88:86:db:bc:2f:b6:a8:27:d6:3f:bd:f0:d6:1e:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:C5:FD:EC:33:D6:EE:7E:67:0C:99:B2:F6:5F:54:27:2F:F5:E3
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.54.0/23
IPv6:
2a10:f2c0:400::/48
Signature Algorithm: sha256WithRSAEncryption
7b:d3:d6:11:d6:c5:4d:a9:6f:4f:78:0d:9d:29:bd:48:00:e2:
3c:38:45:16:f0:e0:01:6e:45:c4:83:47:2c:87:94:7c:18:40:
67:fc:3c:50:c8:e4:ef:75:41:81:f8:c5:1b:e7:2b:51:0c:83:
53:94:29:57:26:ec:ad:e6:aa:f3:e3:72:54:d0:cf:91:8a:d7:
85:ef:7f:b9:ac:3b:a2:d1:af:79:c3:f2:6f:04:33:2b:b6:b5:
b8:3b:0e:71:e4:12:32:1b:e7:d8:c3:2b:7c:62:b8:c7:06:c8:
0f:77:0c:68:8a:dd:78:64:d2:de:19:6e:7f:9f:a0:e8:5b:6f:
4f:24:bc:cb:8f:59:cb:a6:a1:a6:71:de:f8:d2:58:98:97:c7:
ef:87:28:9a:e2:0a:ce:01:a4:28:13:f6:3d:7c:13:1e:b7:f3:
60:63:f9:bd:40:dd:ce:8b:60:27:e8:25:19:58:4c:ab:fb:db:
94:3d:91:54:a3:5a:28:18:52:47:4a:42:c4:4a:17:ab:0a:e9:
87:61:f8:53:5a:6a:a3:38:d9:80:44:2a:a4:4f:5d:4f:bf:47:
52:8a:08:57:87:0d:f2:f1:bd:3c:33:b1:85:37:56:01:af:8b:
03:b3:2d:6e:4b:f1:fa:c9:81:99:53:ed:b2:fe:76:b9:76:7a:
90:14:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:06 2026 by rpki-client