Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/N-mW-dhJixmBRsVJLgxAcUUVCZM.roa
File: N-mW-dhJixmBRsVJLgxAcUUVCZM.roa (raw, json)
Hash identifier: xo34gBOTOrsODU2dHZU2gvPmq3hn1PA8yVNJipFXj24=
Subject key identifier: 37:E9:96:F9:D8:49:8B:19:81:46:C5:49:2E:0C:40:71:45:15:09:93
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019DF42A0BBFB6156F87346AB1274C15C9EF
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/N-mW-dhJixmBRsVJLgxAcUUVCZM.roa
Signing time: Mon 04 May 2026 18:04:49 +0000
ROA not before: Mon 04 May 2026 18:04:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152565
IP address blocks: 31.42.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:2a:0b:bf:b6:15:6f:87:34:6a:b1:27:4c:15:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 4 18:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37e996f9d8498b198146c5492e0c407145150993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:3a:55:62:22:98:d3:02:4c:57:7f:7a:71:
66:be:e2:79:d5:9b:8d:f3:96:26:d4:f7:c5:f6:12:
e8:6b:30:18:43:5f:90:5f:24:3d:ce:df:36:6f:a1:
2e:e6:5a:0a:50:2c:46:2c:7f:81:00:c0:66:f2:60:
2f:7f:f6:47:b3:2e:fc:a3:50:97:02:26:05:a0:2b:
1d:93:9b:cc:c8:c9:db:ae:e9:4d:9c:c1:79:76:b7:
08:c7:c9:4c:f2:e3:4d:32:d6:6a:2f:0b:16:40:fa:
7f:f8:1b:c0:d9:c6:00:6f:e0:59:b2:f4:be:9a:88:
b6:dd:3d:40:f2:08:f3:ba:90:e3:25:aa:f6:e6:93:
77:79:0d:a3:32:80:5a:eb:b3:6f:78:58:bb:23:69:
9e:f5:d5:fb:ee:a4:f5:3b:cb:6f:eb:c5:43:31:83:
0a:7a:e8:21:cb:e7:f3:42:e2:4e:64:2e:3b:a6:45:
db:77:fe:e3:c0:4d:07:56:5a:c3:2f:32:c6:5e:36:
89:c6:41:01:2e:49:18:43:6e:d9:8a:21:35:6e:c1:
00:b3:07:f4:93:2e:4b:bc:65:95:2b:14:b0:b2:c4:
84:ff:98:4b:e8:8a:5e:ae:24:f0:cc:da:4b:3f:8d:
dd:b5:86:75:d6:de:20:30:51:f8:42:3f:2d:57:27:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:96:F9:D8:49:8B:19:81:46:C5:49:2E:0C:40:71:45:15:09:93
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/N-mW-dhJixmBRsVJLgxAcUUVCZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.125.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6d:c7:d6:80:d3:4f:6b:c6:5a:20:09:67:71:7f:2d:33:21:
f8:61:f1:8c:04:62:af:95:e9:4c:7b:c4:7e:76:f6:2d:82:17:
0b:1a:ee:c6:5d:ef:21:b0:c1:30:92:c2:e6:0b:5b:bb:f1:32:
c7:8f:86:1c:15:aa:3f:93:1e:f9:c2:f6:d5:99:90:94:e4:e4:
83:11:d8:20:28:72:6f:a4:2c:c6:9d:72:70:8d:b9:e0:2b:ce:
df:ac:3d:23:51:a2:d6:41:26:0c:fc:86:5a:bc:e0:ee:e2:d3:
08:59:28:da:09:7a:49:ca:3a:7f:3d:18:d9:93:ed:9a:6d:e2:
4e:a6:fd:cd:8b:08:d6:39:1a:41:7a:31:c8:de:27:b0:ce:26:
25:c8:46:88:e7:9f:6e:70:7c:c3:88:02:49:fd:af:38:c3:29:
08:86:2b:5a:b2:ea:d1:64:a1:73:aa:52:dd:e8:b5:43:f1:8a:
ca:86:57:3c:7b:38:e2:c8:7d:97:1f:41:8a:12:5b:7b:14:0a:
94:a3:78:7f:18:59:c9:78:df:aa:4e:6b:c2:62:2f:3a:69:4d:
b6:f8:38:1e:76:1e:a2:b5:ed:13:aa:0d:b8:1f:82:31:21:06:
c7:16:ba:e4:56:68:5d:30:91:88:9d:73:bc:15:df:dd:90:e5:
e1:43:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:21:09 2026 by rpki-client