Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/nu2apDqXy-iino7G3nWPhPWkDqo.roa
File: nu2apDqXy-iino7G3nWPhPWkDqo.roa (raw, json)
Hash identifier: ixg3Ryv/Bp0pzXwcZFr4U5J1gnEXjS591im7CKO4sTg=
Subject key identifier: 9E:ED:9A:A4:3A:97:CB:E8:A2:9E:8E:C6:DE:75:8F:84:F5:A4:0E:AA
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019CC7418A13C54922F69ED2240ED7DADF22
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/nu2apDqXy-iino7G3nWPhPWkDqo.roa
Signing time: Sat 07 Mar 2026 07:44:47 +0000
ROA not before: Sat 07 Mar 2026 07:44:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208063
IP address blocks: 109.122.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 15:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:41:8a:13:c5:49:22:f6:9e:d2:24:0e:d7:da:df:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 7 07:44:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eed9aa43a97cbe8a29e8ec6de758f84f5a40eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:6a:af:41:55:87:ea:78:51:83:05:82:60:
5a:3e:6b:20:5e:e2:fd:bd:95:ea:a8:64:84:8c:06:
90:44:fb:87:82:5d:4c:b5:28:b5:52:ce:a4:e3:80:
fa:dd:ea:87:e0:61:7e:62:c4:c9:d8:ac:f3:04:0f:
7c:64:87:9e:d3:e3:90:71:3c:2d:fb:75:92:88:03:
66:61:b8:5c:29:34:12:dc:06:f2:bc:ad:14:cb:08:
2a:91:60:48:fb:20:55:da:89:9b:bb:59:f5:73:ed:
d4:03:05:bf:65:70:25:e8:27:32:c8:4c:11:45:f0:
64:7d:43:df:3d:eb:29:c8:66:15:a5:c4:98:53:cb:
34:8e:9c:ea:b7:4d:27:63:8a:01:19:17:cb:77:88:
d2:41:bd:da:95:ae:31:29:d4:ec:59:5c:77:d6:91:
9a:dc:97:f2:15:4a:43:43:9a:6d:57:42:74:1d:6b:
4a:c1:b4:db:4b:4a:c7:e8:7c:38:81:6c:09:56:c5:
31:a2:fc:8a:c7:09:a5:7a:9b:9d:b3:ea:68:ea:c7:
a8:0b:14:5f:80:71:2e:ae:00:b8:6f:a4:87:51:bd:
9d:44:0c:8b:90:66:7c:97:88:cd:ff:43:f7:cb:c8:
c2:7c:56:35:8d:b6:b0:f6:7c:66:54:a2:0e:c8:72:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:9A:A4:3A:97:CB:E8:A2:9E:8E:C6:DE:75:8F:84:F5:A4:0E:AA
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/nu2apDqXy-iino7G3nWPhPWkDqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/24
Signature Algorithm: sha256WithRSAEncryption
be:31:4c:e6:45:c9:ee:ff:67:d3:56:c8:f4:c6:aa:73:d7:92:
d6:c7:dd:b7:b6:c5:fc:ae:74:be:37:65:34:29:a9:b9:72:7d:
43:90:b2:b0:55:47:90:50:7a:62:db:c5:e9:fc:b4:5c:69:54:
8c:25:68:d5:55:9a:3e:00:89:de:a1:42:e1:34:5d:b9:36:01:
26:94:26:c6:d5:8c:88:48:17:ff:1c:06:16:3f:51:09:6b:56:
04:d3:9e:be:53:0a:e4:b7:4e:b4:46:bb:2b:17:d2:23:8f:9a:
4e:ff:93:af:96:24:b2:62:58:34:fa:26:3e:fa:a7:54:f9:f0:
e5:bc:bc:92:f2:61:69:08:77:2a:98:4a:57:c6:d1:1f:69:fd:
b7:16:f9:4b:8a:1f:7d:b7:bc:14:40:cc:06:e4:94:04:54:5c:
18:1d:1d:a5:21:ca:dd:f3:7a:a0:8d:57:6d:db:48:a2:51:82:
fa:c6:80:22:89:2a:13:0f:03:e9:37:2a:a4:2b:42:0a:9f:01:
85:41:fd:63:66:19:dd:b3:59:36:e2:9f:2d:f1:5c:24:50:3f:
ee:5f:30:62:28:1e:0f:0a:f6:1c:ac:6a:f5:aa:0b:61:fd:a6:
1b:37:6b:5c:1f:4a:ca:b0:0b:b0:fa:34:06:04:e3:89:66:8b:
25:c6:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 19:08:02 2026 by rpki-client