Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nO7utCI8R09DEwOai8eBVA4V890.roa
File: nO7utCI8R09DEwOai8eBVA4V890.roa (raw, json)
Hash identifier: 4U20EbBUG5L3iVJDEQaIVthTOOzWUdue50vafnrNkcs=
Subject key identifier: 9C:EE:EE:B4:22:3C:47:4F:43:13:03:9A:8B:C7:81:54:0E:15:F3:DD
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A15DDBBA96FE616B96A82D25CDBB60B214
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nO7utCI8R09DEwOai8eBVA4V890.roa
Signing time: Wed 21 Oct 2026 09:47:23 +0000
ROA not before: Wed 21 Oct 2026 09:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30738
IP address blocks: 109.248.238.0/23 maxlen: 23
188.130.233.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:db:ba:96:fe:61:6b:96:a8:2d:25:cd:bb:60:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 21 09:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ceeeeb4223c474f4313039a8bc781540e15f3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:04:be:67:41:b7:65:5e:1d:ac:27:d3:1a:
f7:34:c0:17:37:87:a8:97:53:c3:d1:8a:f8:f7:10:
36:99:e2:48:c8:a7:f8:90:84:c5:e0:30:d6:e7:fa:
51:8c:4d:e9:c5:d3:08:42:d8:be:1b:a7:6d:68:01:
13:28:1d:6b:58:cd:3f:71:c5:34:5d:4a:31:fd:04:
6f:87:0f:36:6d:0e:a6:ed:d8:f2:d2:1e:37:bf:ed:
29:bf:6e:1d:47:14:ea:53:f4:7e:33:2d:ce:af:d5:
ca:e0:6b:f1:67:41:f7:de:d7:4e:03:89:45:2c:c1:
b2:47:39:ca:2b:53:36:f2:14:b1:42:28:a4:0e:a0:
0b:7a:3f:c9:37:f3:01:17:db:d4:50:76:c8:44:aa:
b5:b7:b6:35:9a:1e:50:70:c7:6f:08:f7:12:8b:90:
bb:0e:56:a1:5c:23:6f:49:1b:68:65:0c:7f:05:cf:
a7:d6:f0:b0:8a:07:57:f7:ba:8f:07:1c:42:bc:1c:
92:69:11:b1:74:74:82:79:90:ea:3b:ce:f5:47:0d:
b4:c3:3c:fd:a5:c7:9d:7e:86:2c:af:36:d9:54:0d:
4c:b7:e5:e6:90:32:f2:0e:b3:c9:54:bd:a8:50:87:
c9:be:d8:43:71:5b:67:ac:61:dc:11:a5:88:8a:88:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:EE:B4:22:3C:47:4F:43:13:03:9A:8B:C7:81:54:0E:15:F3:DD
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nO7utCI8R09DEwOai8eBVA4V890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.238.0/23
188.130.233.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
7d:cf:81:63:ba:0f:e7:5e:51:ad:c3:09:97:3d:c1:1e:f0:6b:
54:a6:f5:50:6a:98:86:01:6d:c2:88:52:b7:3b:d0:d5:44:6a:
20:fa:51:39:5d:f4:02:63:d1:ff:69:07:a1:81:b6:6a:48:d2:
6c:01:eb:f3:47:79:fd:01:78:45:b2:aa:92:19:83:4c:02:0b:
64:d2:ab:e6:ab:e4:36:09:47:a2:4b:72:87:ba:89:0f:e1:42:
6f:03:6d:88:f5:9c:3e:e6:5d:be:e9:c3:b9:e8:c3:94:ba:c3:
a6:dd:9f:95:c3:cf:89:95:a1:ed:9e:d2:04:b0:46:84:d6:2c:
8d:20:37:02:57:08:f4:a3:b6:1b:15:61:fb:43:eb:9c:ee:fb:
58:d1:cb:23:19:92:ac:3c:dc:8d:24:18:c0:38:1c:14:34:b6:
ac:5d:b6:fb:0b:1d:d9:20:27:68:5c:97:e6:57:16:b2:4a:90:
79:34:ab:93:c6:3b:16:5b:83:52:82:61:9e:85:a0:61:80:5c:
a1:73:37:cb:e3:68:31:9b:10:ff:6b:fc:d8:15:48:49:d0:7d:
90:dc:10:9d:2f:2f:d6:29:10:e8:61:a0:b1:46:dc:b6:8a:ed:
e7:af:68:e4:df:b7:9b:bb:d3:cf:12:41:cb:74:03:44:2c:54:
3e:13:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:41 2026 by rpki-client