Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/No-d_K1AdtQFN89IEpRFXmUG73I.roa
File: No-d_K1AdtQFN89IEpRFXmUG73I.roa (raw, json)
Hash identifier: nGDD7GXmkYEq6gGfWHCPiJFjSrwfBH1B1pwZ05Swa6E=
Subject key identifier: 36:8F:9D:FC:AD:40:76:D4:05:37:CF:48:12:94:45:5E:65:06:EF:72
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 01A022A0A1CA45787068A1CD76D31857ABBC
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/No-d_K1AdtQFN89IEpRFXmUG73I.roa
Signing time: Fri 21 Aug 2026 04:42:27 +0000
ROA not before: Fri 21 Aug 2026 04:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274410
IP address blocks: 89.34.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 07:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:a0:a1:ca:45:78:70:68:a1:cd:76:d3:18:57:ab:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Aug 21 04:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=368f9dfcad4076d40537cf481294455e6506ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:5b:51:92:87:4b:d7:d2:a6:c8:94:24:e6:
cd:b7:2c:34:19:9e:4d:cd:9a:22:d5:da:eb:ae:d0:
3b:85:9e:44:f2:3d:9e:c1:13:f2:83:4a:74:2b:d4:
73:7e:c6:21:b2:45:28:d8:df:00:4b:11:bb:7c:aa:
6a:0b:34:c6:35:fd:4a:c2:ed:76:dc:91:7c:9e:f8:
3c:07:45:66:83:b6:ce:80:3a:35:d0:d4:9f:56:ff:
1e:0d:0e:50:19:e2:ef:fa:1d:db:a5:09:13:48:90:
73:81:15:92:38:33:2b:f1:05:1f:b2:1b:c5:b6:eb:
07:8f:c4:2f:c4:a3:df:4c:65:f3:e3:26:1c:5b:8f:
72:46:c5:29:72:22:fe:9f:21:01:70:bf:51:15:b6:
87:72:2d:02:00:f8:85:9d:b3:68:47:03:e3:15:a3:
54:cb:18:03:c6:53:51:d5:1a:f3:71:6a:5b:69:b4:
b0:35:ad:03:2f:16:b5:5d:b9:6c:49:0c:49:2f:4e:
40:20:39:52:e3:99:95:7e:ae:b6:13:cd:92:4f:9c:
2a:08:0f:fe:b7:8a:7c:2d:42:80:33:0b:f0:2e:eb:
0d:18:30:a2:75:f6:d3:f8:c9:1f:e9:67:1a:8c:8c:
02:67:a5:4e:d9:85:ff:ea:42:ed:f4:55:d3:68:9a:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:9D:FC:AD:40:76:D4:05:37:CF:48:12:94:45:5E:65:06:EF:72
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/No-d_K1AdtQFN89IEpRFXmUG73I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
02:57:57:52:fb:60:57:a6:7a:cf:a4:2f:fe:c1:62:a9:0a:57:
ca:a1:06:d5:3b:58:84:66:3f:a7:e2:ba:73:df:69:2a:53:6b:
66:d1:46:00:41:5d:95:80:58:9d:04:5e:96:ce:4a:9a:11:4c:
c2:63:4c:d7:e0:0e:54:d5:1d:7c:88:67:41:6c:4a:86:c5:89:
a8:ef:78:15:bb:e9:62:ab:58:43:66:d2:8b:d0:9b:73:39:42:
c4:b6:22:b1:83:02:ce:f2:61:40:f4:31:07:a4:55:d8:c9:02:
ce:95:e5:f9:ef:c5:12:a1:0b:94:4e:ac:04:7c:c5:68:6f:10:
6e:af:f5:35:c8:77:bb:07:d3:82:91:c7:90:a3:04:b6:af:df:
6c:de:dd:31:26:08:63:f3:01:9b:a0:92:be:97:18:d6:f9:b2:
df:bd:ba:40:2c:e9:df:a8:3c:7f:54:f8:2e:df:ad:f3:fb:76:
8d:24:e1:0e:4e:ef:93:a7:e0:bf:3a:d8:0f:ca:b8:31:fc:be:
fa:18:c9:f3:9b:42:3b:4b:f7:15:ab:63:e3:f3:05:bf:ca:a9:
ed:f4:c3:e2:ea:82:05:fd:5e:0a:33:ad:87:66:23:76:ab:8f:
ce:5f:f5:09:99:78:81:46:10:ee:31:5f:2b:57:e6:c9:be:24:
bb:6d:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:38:33 2026 by rpki-client