Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NoLJaHTd_iS5vEA7_CVrZUePvxA.roa
File: NoLJaHTd_iS5vEA7_CVrZUePvxA.roa (raw, json)
Hash identifier: 7zk3tEnvhKnC3K+f8F6oDVjndmCgattU57jv6aquo2I=
Subject key identifier: 36:82:C9:68:74:DD:FE:24:B9:BC:40:3B:FC:25:6B:65:47:8F:BF:10
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0A9FB83B2680336D9DBCD9E3186544EFC
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NoLJaHTd_iS5vEA7_CVrZUePvxA.roa
Signing time: Wed 16 Sep 2026 11:30:27 +0000
ROA not before: Wed 16 Sep 2026 11:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201499
IP address blocks: 170.168.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:fb:83:b2:68:03:36:d9:db:cd:9e:31:86:54:4e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 16 11:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3682c96874ddfe24b9bc403bfc256b65478fbf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:03:28:dd:fb:73:e8:72:6d:d1:ba:d2:2b:
0c:67:d3:6d:58:0f:54:2d:f5:81:cb:a2:a9:b1:4a:
70:c0:ec:ac:92:5a:1a:8f:86:ee:08:3b:03:48:32:
c6:07:37:79:9f:73:65:ea:33:70:f6:73:90:22:6c:
1b:18:e0:be:6a:38:9c:8d:87:43:3c:16:4d:dc:e8:
d8:bb:dc:f5:a8:be:a0:3b:0f:c6:19:37:a7:dc:13:
a0:29:e6:bf:25:e1:24:e9:87:fd:a0:da:bd:1f:5e:
77:5a:23:3c:56:29:6c:c2:4b:90:9a:16:de:5a:02:
9b:e1:7d:2c:63:63:23:5e:fa:fc:13:c4:b0:3a:51:
ed:a8:a4:b9:50:93:92:5b:79:4d:06:f5:86:10:5c:
f0:b5:7e:20:b5:1f:ac:36:08:29:ff:29:86:1a:78:
c0:eb:b7:20:62:1f:68:9c:54:fc:d1:5f:0c:f0:2c:
ad:dc:b9:58:c7:55:fb:5e:7e:c9:89:f8:03:50:4f:
78:c0:e6:b8:d2:ab:5c:d9:39:48:26:2e:fd:75:1b:
b4:e7:14:e0:ca:0f:fd:0a:d2:e7:aa:47:19:96:7f:
c6:43:79:a8:2f:a7:e9:4b:45:84:cd:11:0d:cd:0e:
ce:12:c5:99:76:4c:80:c2:9b:5f:0d:18:72:d0:d4:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:C9:68:74:DD:FE:24:B9:BC:40:3B:FC:25:6B:65:47:8F:BF:10
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NoLJaHTd_iS5vEA7_CVrZUePvxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.113.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9d:30:ad:43:e8:81:9b:7a:49:4c:7c:db:1d:27:48:9b:19:
3b:5c:13:b1:6f:a4:5d:87:c5:5b:5f:35:27:1a:af:32:38:79:
52:65:a4:92:25:ad:9e:92:1b:1e:4d:dc:86:ef:5c:c3:16:c4:
36:d5:92:cd:f7:cd:5c:fb:e4:2d:f6:07:dc:32:1c:96:e4:5e:
06:30:fc:e6:3b:bd:10:e6:ef:d9:1c:dc:77:45:b4:86:4c:5a:
01:c4:36:99:c3:2c:70:ad:c7:bb:8d:fa:c7:12:71:c0:ec:1a:
1d:0d:f7:23:5c:15:7f:b9:b1:69:35:6f:89:43:f5:4e:fa:02:
89:21:5b:0f:ae:b4:03:f6:67:4b:a3:79:d4:1d:8a:fe:15:dc:
de:d6:7e:d0:7d:85:cd:24:89:7f:11:70:38:b4:85:01:18:8e:
e9:c8:4b:61:ed:c0:d0:82:df:1c:99:c1:1c:1c:1c:11:18:d2:
26:f6:b9:94:4c:d1:cb:50:a3:85:34:85:fd:56:b2:85:cf:f1:
75:96:c5:0b:f6:99:8b:c2:6c:9b:63:82:1a:c3:45:54:75:77:
52:09:8d:00:1f:c6:ce:fa:32:c6:4a:d1:17:2d:44:ac:d4:31:
67:4d:c5:c3:a6:6a:a3:8d:91:1e:ee:fc:96:1f:59:6f:90:37:
fc:dc:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:30 2026 by rpki-client