Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NUlKUTKeipYtkDJRFvmooP2Hiz8.roa
File: NUlKUTKeipYtkDJRFvmooP2Hiz8.roa (raw, json)
Hash identifier: HvLjikJP9Upt9r+oKIC5qlrJf/n3GS4GgdcaPG3cvDo=
Subject key identifier: 35:49:4A:51:32:9E:8A:96:2D:90:32:51:16:F9:A8:A0:FD:87:8B:3F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A1104D0845F077D3B52A31328880195366
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NUlKUTKeipYtkDJRFvmooP2Hiz8.roa
Signing time: Tue 06 Oct 2026 08:20:46 +0000
ROA not before: Tue 06 Oct 2026 08:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 145.116.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:4d:08:45:f0:77:d3:b5:2a:31:32:88:80:19:53:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 6 08:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35494a51329e8a962d90325116f9a8a0fd878b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:3d:50:ce:86:47:e2:5d:63:ff:c0:8d:44:
fd:49:75:64:d6:3a:49:2d:59:7a:29:c0:e3:5f:06:
21:79:b5:83:56:3d:23:bd:97:d2:9a:fa:2b:f8:c1:
d2:5b:5c:9a:99:2e:9b:b6:a9:17:45:b9:61:ce:f8:
ba:36:85:32:28:6b:c9:55:4f:b9:e1:f8:f3:c2:f6:
41:80:06:e4:96:28:23:87:19:9c:5b:0a:4d:cd:8c:
a8:25:c6:8b:5d:07:c9:7b:7e:90:33:bf:2e:b5:5f:
29:60:93:22:49:50:7f:ad:ab:74:b1:a9:19:3a:f6:
e8:cc:2e:55:48:af:02:30:2c:18:49:62:20:32:b2:
0a:c4:1c:dc:72:6c:5d:27:fd:68:79:e0:df:94:5e:
ca:c7:d9:46:fa:ad:3f:1e:1b:48:6e:cc:9c:29:c4:
78:f8:1d:61:08:1c:11:03:5f:de:85:26:6e:ce:2f:
69:f3:95:bd:b3:54:b2:fd:78:bc:ad:e3:65:4b:8b:
96:04:b8:19:d9:50:90:ae:a1:ca:50:df:b7:7a:7d:
78:c8:c1:98:7e:c2:c5:44:48:4e:a4:f3:b9:af:a8:
41:af:41:5b:f6:71:ba:f2:95:91:f5:8c:85:1f:2c:
82:ff:4f:c9:ed:b1:7e:ff:07:50:18:f2:bf:45:d9:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:49:4A:51:32:9E:8A:96:2D:90:32:51:16:F9:A8:A0:FD:87:8B:3F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NUlKUTKeipYtkDJRFvmooP2Hiz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.116.216.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f3:02:bf:de:fe:42:5c:7d:70:dd:19:99:d6:e1:23:3d:64:
7e:4b:b1:2e:b0:d5:8e:b7:ed:3e:b1:9f:b8:ec:86:af:dd:e5:
68:86:f2:72:60:d7:d5:a3:3e:32:ef:a7:a2:8e:47:4c:f9:01:
88:f2:2b:b9:75:5b:5f:a3:1e:ea:9b:78:07:00:ed:33:ef:94:
83:d7:ff:db:6c:23:1c:e6:60:e8:1e:1e:65:44:1e:eb:e4:51:
48:53:6c:6b:fc:d7:30:a6:15:3e:c7:3f:6e:85:7e:49:80:8a:
d8:15:0a:0f:81:70:0a:90:0d:55:d2:bf:2e:1b:61:4d:32:4d:
28:0d:52:35:4d:d0:94:aa:0a:ca:92:88:97:88:0b:f7:5c:71:
be:e4:a0:d7:f8:59:85:4a:55:49:5e:65:b2:5b:bd:4a:50:ad:
a8:4b:5e:85:61:db:c1:6f:89:12:49:56:6b:f4:d1:fe:38:c0:
33:d7:c9:95:8d:0d:85:ad:79:9d:c7:12:13:e2:82:a3:81:f5:
5f:61:7d:1b:4a:42:ca:06:dd:17:48:58:b8:a6:0e:34:11:f6:
c0:17:0f:73:94:21:8f:ef:2c:9e:a9:e8:f9:d9:2c:31:6c:d5:
31:62:4c:6e:9d:8c:b0:3b:d7:27:67:58:9a:e9:89:b6:52:da:
45:9b:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:21 2026 by rpki-client