Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/nsdQ5ecpVobV_2gQChSGXp6CxKg.roa
File: nsdQ5ecpVobV_2gQChSGXp6CxKg.roa (raw, json)
Hash identifier: /zDk2BPpg9ETTHKSDUXVZAaUfUkR1EyZrx0o/vdlEGo=
Subject key identifier: 9E:C7:50:E5:E7:29:56:86:D5:FF:68:10:0A:14:86:5E:9E:82:C4:A8
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 01A0E70F4BBF4CBF7A8FF3236A578EC65A68
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/nsdQ5ecpVobV_2gQChSGXp6CxKg.roa
Signing time: Mon 28 Sep 2026 08:08:54 +0000
ROA not before: Mon 28 Sep 2026 08:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6661
IP address blocks: 193.168.10.0/23 maxlen: 24
193.168.12.0/23 maxlen: 24
193.168.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:0f:4b:bf:4c:bf:7a:8f:f3:23:6a:57:8e:c6:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Sep 28 08:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ec750e5e7295686d5ff68100a14865e9e82c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:c0:c8:41:51:61:07:3a:63:f8:d3:d0:2c:
b9:0d:12:ef:04:1f:28:25:21:82:5e:bf:51:2c:05:
48:83:8a:25:04:a5:1a:df:ac:27:57:c7:c7:5d:fa:
4c:ab:65:6f:5b:26:70:38:df:9b:78:f9:ff:18:6e:
f7:90:22:96:fb:89:40:22:aa:15:cb:ac:43:cd:6b:
be:f4:d7:7c:33:8f:d3:af:8f:8b:87:8e:6c:d9:a3:
4c:02:94:46:48:76:39:82:6a:95:23:68:ee:33:2f:
bd:1b:8e:86:a2:1f:fb:c8:9d:cb:96:27:9b:ea:52:
72:b0:66:f0:91:2a:59:11:df:1d:c2:6a:14:4e:ed:
6e:36:b0:19:2d:0f:78:7f:13:25:cc:8e:80:43:db:
ef:b7:b3:7f:2a:25:d2:bb:36:16:87:85:8d:d0:0f:
0c:77:00:01:5a:36:f0:be:07:01:e3:68:4c:90:c3:
1d:de:a7:73:de:75:1d:c5:e7:60:ac:5a:8c:0f:40:
e9:9e:df:08:41:90:1d:eb:cb:fb:6e:fa:1a:5b:3d:
60:3e:85:3f:b6:a2:52:78:f6:bc:e4:a7:2e:55:70:
f1:c5:27:86:54:10:b3:64:fe:f2:e6:89:5c:d6:ec:
4f:65:f4:dc:67:7d:52:f0:8b:11:c5:eb:8a:70:c3:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:50:E5:E7:29:56:86:D5:FF:68:10:0A:14:86:5E:9E:82:C4:A8
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/nsdQ5ecpVobV_2gQChSGXp6CxKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.10.0-193.168.15.255
Signature Algorithm: sha256WithRSAEncryption
7f:fe:cf:f8:a9:2d:33:cf:3f:b8:ba:01:60:c8:9c:3a:9c:54:
d6:e1:4e:b8:bb:cd:95:4e:a1:a5:49:e4:ea:1d:03:87:47:3f:
cb:47:70:3a:fc:7f:65:ae:cb:5e:b9:2b:f5:6a:dc:f6:d3:24:
6c:73:72:c6:d1:a8:de:f8:df:64:9b:9f:1f:1a:b9:ce:b3:d7:
13:d9:6e:20:b4:7c:d3:aa:1a:85:0f:24:a7:f8:34:7c:85:a2:
94:d0:6c:b1:15:f1:9d:80:6f:c9:a6:1e:b4:93:3b:1a:07:4e:
27:20:32:34:e9:ae:36:17:e6:77:3e:34:48:13:97:28:49:80:
0b:b3:ec:b1:69:06:ce:b0:fa:24:7b:ed:f6:0a:a4:c7:6c:33:
b9:8e:a5:e0:64:37:54:d6:88:5f:9a:ca:ac:e3:b7:75:22:fe:
2b:ee:88:d3:3a:70:34:ea:ea:c4:5f:4b:0e:80:ae:38:d2:5d:
63:dd:c2:b9:a1:18:87:f6:49:88:a8:b4:30:65:05:ef:6b:8a:
39:8a:08:81:58:7a:7a:7d:33:f8:fc:be:b2:a1:32:5d:a0:cf:
71:b5:51:ab:41:65:e4:35:fd:2e:b6:21:06:a2:12:1b:42:42:
cd:06:1e:3b:5b:14:e0:49:df:5a:ab:99:50:44:4f:05:22:65:
1a:05:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:35 2026 by rpki-client