Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ngpONoHSTwoohoW5OGQa7adKegU.roa
File: ngpONoHSTwoohoW5OGQa7adKegU.roa (raw, json)
Hash identifier: uejL2MnuBHCE3yZt1cUlPz5kgBigbbVinyw+wTmzynA=
Subject key identifier: 9E:0A:4E:36:81:D2:4F:0A:28:86:85:B9:38:64:1A:ED:A7:4A:7A:05
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A016039262F44D0EF5675F3B1E326D371D
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ngpONoHSTwoohoW5OGQa7adKegU.roa
Signing time: Tue 18 Aug 2026 17:55:27 +0000
ROA not before: Tue 18 Aug 2026 17:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 9.142.32.0/20 maxlen: 20
9.142.192.0/19 maxlen: 19
9.151.64.0/18 maxlen: 18
138.226.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:03:92:62:f4:4d:0e:f5:67:5f:3b:1e:32:6d:37:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 18 17:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e0a4e3681d24f0a288685b938641aeda74a7a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:be:f3:f1:f9:05:75:50:bd:fb:96:69:40:
b0:50:d8:3d:d9:d6:c2:15:93:8a:dc:fc:93:97:f5:
73:86:eb:6e:a0:d0:a0:5f:92:d9:bf:69:b6:4c:a1:
7f:38:10:1f:fd:84:92:ae:fa:6f:14:1c:22:c4:69:
40:e8:7f:0d:a7:ae:bb:db:41:25:24:bf:62:b7:bf:
65:aa:67:30:be:43:17:56:bb:9c:76:72:67:8e:87:
4b:c5:33:9c:6b:d4:36:dc:4b:cc:55:bb:e9:7e:2e:
3d:26:6b:32:32:00:d1:d5:f9:ea:43:06:be:d1:a8:
2a:47:92:de:1a:fa:28:36:34:b8:ea:d0:05:fe:cc:
2a:32:fd:1b:f2:2b:d4:2b:f6:07:db:df:37:f6:fe:
14:8f:2f:92:62:36:30:f3:77:a4:8d:5e:91:f5:4e:
e5:6b:cc:df:71:e6:65:df:4e:14:da:1a:10:5b:6b:
f2:f8:97:c8:53:9a:2d:5d:10:77:e8:37:7d:67:c6:
91:61:cd:1e:f8:e2:82:27:1e:de:c2:e8:a3:fc:56:
71:9d:8a:ca:7b:eb:d5:ff:fe:8f:a1:0c:dc:f5:43:
ea:25:da:37:7c:24:81:3a:89:f2:75:aa:da:05:e3:
f1:05:c7:c8:f9:64:af:66:1a:8c:c0:f0:cb:c4:5c:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:4E:36:81:D2:4F:0A:28:86:85:B9:38:64:1A:ED:A7:4A:7A:05
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ngpONoHSTwoohoW5OGQa7adKegU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.32.0/20
9.142.192.0/19
9.151.64.0/18
138.226.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:6c:9c:68:af:6a:eb:6e:ff:a3:5f:36:d0:f2:45:48:2b:41:
1a:8e:64:2e:9e:6d:be:72:e4:c3:7b:e4:df:46:52:6f:93:55:
bc:12:de:41:c3:e7:04:dd:d8:08:c0:2c:41:59:9d:1b:dc:70:
19:1a:46:cc:62:eb:2f:23:d4:7d:ac:42:67:66:62:f3:10:bc:
35:ac:9f:10:d4:ad:90:f5:6d:3f:e6:e1:65:94:9e:3f:ad:76:
f1:fa:52:3f:b7:f1:22:f8:b8:5e:f0:e2:ba:07:e4:ad:e5:ac:
45:19:1e:ba:46:fc:2f:5e:40:d9:1a:2b:1e:ab:75:52:2a:6f:
a1:57:f2:d0:24:14:d1:22:52:7d:19:ec:9f:c8:eb:55:e2:2f:
64:b4:45:31:a0:e2:06:56:59:93:b7:8e:76:e1:b1:b9:43:1b:
e3:c4:ac:c4:47:cd:f3:b0:70:45:72:b5:79:2c:8d:c0:f4:8f:
55:83:44:76:e2:8d:2a:35:20:24:aa:27:c1:54:f3:06:8c:83:
38:1b:40:20:29:80:76:30:89:0c:5e:6c:68:79:46:87:a4:1f:
f0:81:f7:43:38:0a:3e:8d:4b:b2:38:20:06:60:0f:67:98:87:
f2:a5:dd:bc:cb:57:6e:66:fc:90:59:92:7e:01:ff:34:1b:2f:
60:4b:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:43 2026 by rpki-client