Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/N5Okw-wvCpSaWE7cFBqllhvarVc.roa
File: N5Okw-wvCpSaWE7cFBqllhvarVc.roa (raw, json)
Hash identifier: jGdL3bjqM45T2Cc/hnnb7JXeMwbnxtnANxWpSJxOJSs=
Subject key identifier: 37:93:A4:C3:EC:2F:0A:94:9A:58:4E:DC:14:1A:A5:96:1B:DA:AD:57
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 01A0F6D39E9025BF53B3067B33E9E53F0C86
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/N5Okw-wvCpSaWE7cFBqllhvarVc.roa
Signing time: Thu 01 Oct 2026 09:37:38 +0000
ROA not before: Thu 01 Oct 2026 09:37:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57388
IP address blocks: 157.173.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:d3:9e:90:25:bf:53:b3:06:7b:33:e9:e5:3f:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Oct 1 09:37:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3793a4c3ec2f0a949a584edc141aa5961bdaad57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:61:7a:1e:bf:50:94:3e:6d:2d:19:e0:fe:
37:20:16:1c:e4:68:a4:e9:6f:d2:be:60:73:05:82:
bc:a1:1c:84:79:ea:bf:3f:97:9d:5f:0e:10:bb:61:
17:77:85:d7:bc:9d:58:72:21:ca:78:59:aa:73:f2:
70:ea:e7:94:4a:58:30:d3:1e:13:d3:d6:da:54:65:
08:43:1a:63:23:a6:4e:8e:9e:84:1e:8e:c1:27:2e:
2f:d9:9f:7a:61:2a:98:de:d6:a1:72:54:45:0d:c6:
56:ad:b2:dc:44:a9:9f:40:2e:1d:e3:40:88:9d:c5:
25:cc:4a:3c:b7:84:24:a0:d5:64:c1:42:7f:fb:40:
a7:1d:20:6d:1f:d1:a8:ac:b9:17:62:dc:7f:bf:c8:
de:bc:e4:bb:2c:a8:37:9d:5e:2e:82:14:9d:a5:c2:
44:b1:67:af:31:5f:4f:29:59:5f:5c:8a:1e:f5:37:
4c:1b:a2:d9:eb:38:89:fe:87:b3:57:55:57:35:30:
fd:32:98:69:5a:f4:7e:66:97:a3:f0:f2:4d:57:5f:
c5:b4:d6:c4:38:8d:f4:84:61:cf:19:85:1e:7f:9b:
b8:ab:d4:76:5d:f4:4a:54:d3:8b:0a:eb:1f:bb:46:
9d:fc:5f:f5:89:f2:2a:68:af:2c:b7:4d:cf:31:df:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:A4:C3:EC:2F:0A:94:9A:58:4E:DC:14:1A:A5:96:1B:DA:AD:57
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/N5Okw-wvCpSaWE7cFBqllhvarVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ec:a0:64:af:87:23:57:a7:0b:fa:9b:cc:b9:a4:93:cc:34:
01:9a:76:01:f7:ab:ff:63:e7:a1:ed:93:08:e9:d5:58:68:70:
d9:a5:89:0b:b1:f8:67:a4:3e:f8:d9:00:c0:89:41:c9:c0:7e:
41:39:9d:4d:a4:86:52:39:9b:4c:4d:5c:43:fb:f0:ae:73:64:
4b:c1:aa:35:a5:e0:45:cf:cc:d5:52:de:51:2f:af:f9:e3:3f:
40:85:cd:24:3d:1c:2f:68:f3:f7:04:0b:34:09:4a:e7:85:dd:
cf:3e:f3:5a:e4:71:16:b6:de:10:30:64:6e:d7:26:ca:bb:94:
27:0f:c3:ed:f3:74:7e:b5:62:6a:6b:ae:91:20:5a:1d:42:a1:
d8:b6:a6:d4:b3:54:f6:f8:28:3f:b6:9e:f4:12:1c:b2:78:1a:
80:f0:35:ba:0b:83:e0:34:0e:25:94:c4:e5:84:d9:7e:8a:e8:
ba:65:6b:bf:06:dc:0d:ec:49:53:8d:84:47:92:b0:f6:bd:8c:
bf:09:f9:20:8f:dd:76:d2:5e:c2:3b:73:18:2b:0d:63:cc:72:
f6:76:87:38:6e:81:05:67:e0:43:15:71:3a:68:34:69:ca:b7:
8a:dd:49:b0:bd:39:05:f5:76:85:cd:7d:b2:34:6a:0e:2e:47:
86:7d:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:15:15 2026 by rpki-client