Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/nxuhJDZV0jmhDBlT5RzlvHXC6Hg.roa
File: nxuhJDZV0jmhDBlT5RzlvHXC6Hg.roa (raw, json)
Hash identifier: sA+6AHBNY7FTWeW8cCqWqp9q1AbjZ2XslECjuK/W6V4=
Subject key identifier: 9F:1B:A1:24:36:55:D2:39:A1:0C:19:53:E5:1C:E5:BC:75:C2:E8:78
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01A063E274AD476A952C8CF992F63ABB5DA4
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/nxuhJDZV0jmhDBlT5RzlvHXC6Hg.roa
Signing time: Wed 02 Sep 2026 20:49:40 +0000
ROA not before: Wed 02 Sep 2026 20:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199884
IP address blocks: 130.49.185.0/24 maxlen: 24
138.16.140.0/24 maxlen: 24
138.16.141.0/24 maxlen: 24
138.16.142.0/24 maxlen: 24
138.16.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:e2:74:ad:47:6a:95:2c:8c:f9:92:f6:3a:bb:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 2 20:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f1ba1243655d239a10c1953e51ce5bc75c2e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:1d:c2:5a:6c:e0:1b:ea:ec:10:76:40:d8:
46:af:3f:e4:ae:a5:48:99:02:83:7b:09:29:9f:97:
60:68:11:e9:7f:67:2b:56:ec:c6:5b:b2:c3:6e:f0:
9a:9b:97:07:f9:fe:47:fb:6b:d0:26:5e:5d:f0:2e:
81:31:8d:d5:3d:56:e7:00:33:16:ce:06:f5:e3:b0:
9d:0e:b9:34:19:a9:2d:b8:45:78:ea:24:f3:33:10:
ab:3a:42:8c:88:85:f3:55:48:de:9c:11:ee:df:eb:
c4:c8:0e:86:33:7a:a2:56:17:7c:87:ed:9a:9a:c3:
aa:d4:c5:63:ca:fb:2e:72:e5:52:11:30:5b:e0:f2:
ed:db:c3:9b:8b:fa:a1:19:44:57:c2:be:84:f8:ec:
ce:38:2a:ac:bc:b6:73:68:64:76:27:80:61:58:86:
40:55:04:3d:cd:63:67:75:15:42:f3:bc:7c:d0:ec:
7f:4b:ee:29:80:c4:b3:8e:39:f8:f7:87:31:aa:ab:
c5:3b:62:d0:4b:16:06:c1:89:8b:0c:93:0a:9a:ad:
b7:99:bb:7a:c1:a1:d1:d8:9d:e5:fc:6b:e0:6b:58:
08:6a:48:17:05:96:26:f3:cf:f6:ae:75:2c:e5:83:
50:a8:fc:7d:a3:76:db:13:0f:0e:84:84:f2:b4:86:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:A1:24:36:55:D2:39:A1:0C:19:53:E5:1C:E5:BC:75:C2:E8:78
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/nxuhJDZV0jmhDBlT5RzlvHXC6Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.185.0/24
138.16.140.0/22
Signature Algorithm: sha256WithRSAEncryption
92:d3:5f:02:31:6c:fe:ad:f4:25:7c:42:da:7c:ca:fd:ca:c3:
18:f6:77:87:14:d1:69:f0:11:dc:c9:1f:b3:d8:90:7e:bb:07:
6f:80:bf:2f:04:94:07:66:47:4d:f5:d5:4e:4b:dc:f5:43:b8:
5e:5b:ac:5d:1a:39:6d:ca:c9:8e:03:76:97:61:ef:13:32:65:
5f:63:db:0a:84:f8:c0:3f:9e:64:72:bb:49:2f:43:74:a3:78:
73:2a:4a:12:52:fb:5c:6b:2d:a2:62:0a:14:07:64:7d:7e:09:
58:10:d2:b7:fe:45:d3:df:cc:b1:cc:b1:80:6c:8d:c3:e0:ab:
d5:fa:43:66:67:24:71:e1:a0:69:3b:8f:de:d5:ed:e0:18:1e:
c4:8f:71:45:91:e5:b6:2f:5c:60:67:b2:b2:31:bd:c9:cb:ed:
8b:40:3b:1e:78:71:5a:3f:86:cd:c3:09:62:41:0b:ef:29:86:
27:6e:25:bc:30:84:ce:3a:5d:ae:22:93:75:07:72:f9:6a:47:
68:99:cc:57:bd:a9:54:59:b2:5f:8d:ef:60:5b:0b:c0:3e:43:
b6:54:04:de:d9:f7:94:46:54:2c:c0:47:3f:e4:c5:87:44:0f:
e4:9e:bc:80:6b:e0:75:fa:a0:b6:9d:f3:bd:fe:1a:12:d1:49:
af:ad:4e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:23 2026 by rpki-client