Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/nSxzZTeXm4VK-PdzkN9C5yQk--w.roa
File: nSxzZTeXm4VK-PdzkN9C5yQk--w.roa (raw, json)
Hash identifier: jDEYXn0+giff7jRdIJX2vozW2oaxz3pOJRnZjAZeIDw=
Subject key identifier: 9D:2C:73:65:37:97:9B:85:4A:F8:F7:73:90:DF:42:E7:24:24:FB:EC
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A0D4FEF787026FE15A4973D182097DD54D
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/nSxzZTeXm4VK-PdzkN9C5yQk--w.roa
Signing time: Thu 24 Sep 2026 19:57:54 +0000
ROA not before: Thu 24 Sep 2026 19:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1199
IP address blocks: 145.102.136.0/22 maxlen: 22
145.111.0.0/16 maxlen: 16
145.152.0.0/13 maxlen: 13
2001:610:5ea::/48 maxlen: 56
2001:610:5ea:6600::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:fe:f7:87:02:6f:e1:5a:49:73:d1:82:09:7d:d5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 24 19:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d2c736537979b854af8f77390df42e72424fbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:e5:d9:d8:e9:80:c5:29:7a:44:cd:3e:ce:
a8:9d:62:2a:ea:19:ca:60:02:59:94:18:24:cb:aa:
5c:57:5b:b8:54:30:64:e9:f0:5b:c6:4f:c4:2c:3f:
0e:92:50:10:5c:3d:96:88:7d:ff:25:12:fc:c8:03:
0b:b5:87:6f:26:c3:2f:0a:87:8b:09:bf:7f:79:b6:
53:c2:06:90:d1:46:3f:61:3c:01:07:37:70:c0:c2:
ec:f0:5a:04:c1:b0:79:38:2d:76:83:59:4b:4a:25:
be:5c:66:ff:e8:31:75:fa:a9:7a:58:52:80:9f:c5:
33:7d:45:9c:79:f4:f7:85:4a:f2:09:96:ba:b2:78:
2b:21:83:88:8d:ac:b0:d5:68:92:02:2b:ac:02:50:
33:dd:38:3e:9e:4e:fa:3b:c7:bc:96:e2:b4:3e:77:
21:32:fb:58:a3:2e:25:fe:5c:7c:7a:66:1b:2f:bb:
ec:1d:f0:ec:aa:bc:a7:93:6a:5b:f9:39:3b:b1:28:
7b:24:5a:e8:fa:88:d4:a7:e8:47:55:89:ae:e8:6b:
05:0c:13:a2:71:f2:3d:8b:c0:9c:c6:38:fe:06:18:
89:71:ac:94:f2:59:40:bd:1f:50:66:7e:d5:14:74:
57:cb:ef:7b:79:5a:27:ff:91:19:ec:10:f4:4e:b8:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:73:65:37:97:9B:85:4A:F8:F7:73:90:DF:42:E7:24:24:FB:EC
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/nSxzZTeXm4VK-PdzkN9C5yQk--w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.136.0/22
145.111.0.0/16
145.152.0.0/13
IPv6:
2001:610:5ea::/48
Signature Algorithm: sha256WithRSAEncryption
a7:01:4e:2c:14:a0:f4:9b:35:20:64:cb:25:df:d3:6d:c2:62:
b6:e0:c5:29:c6:b8:4c:90:85:60:5c:63:6d:f8:4b:d7:a2:03:
19:1b:ad:1c:19:e1:57:a6:cb:44:1a:9d:dc:b9:d0:ee:c5:f5:
f5:f8:ca:72:db:97:30:ff:a8:72:cb:f7:b0:1f:b4:ea:59:e1:
f4:7b:9b:80:c8:77:21:93:2b:c6:5d:b0:ec:10:0d:2d:27:dc:
33:19:d9:5c:da:0f:bc:84:a4:2e:e4:b4:e2:6b:d0:ab:21:16:
6b:3d:6c:8a:32:3f:2f:4b:71:bc:a5:77:99:39:82:26:11:e2:
fd:a5:49:e6:65:aa:f3:52:df:35:8b:0b:e5:2a:81:bc:fc:6a:
d7:b2:f1:4b:f7:a1:ce:79:db:1d:09:87:3b:ce:08:48:2e:32:
79:78:f7:80:98:9e:a4:1b:70:d7:29:ec:a1:86:7e:8b:ab:fb:
cc:8f:29:b2:6a:59:9c:9c:ba:1f:71:c2:22:71:af:29:6c:d2:
fe:38:9c:9d:3e:6d:77:97:e2:bd:38:10:a5:d5:28:39:03:75:
24:07:48:34:68:e6:b5:b4:99:f8:10:f7:74:19:1f:af:9b:bc:
da:1c:61:24:c6:51:09:78:49:3c:a7:0e:f3:dc:24:0d:cb:b6:
66:ba:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:32 2026 by rpki-client