Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/N0Rx4j4Mz5PSt94hdwe-BTFxUYg.roa
File: N0Rx4j4Mz5PSt94hdwe-BTFxUYg.roa (raw, json)
Hash identifier: xvp5tjhhJmRBPbyXlv23F5s7ZdUZXqdeeQwJYXGU+Ic=
Subject key identifier: 37:44:71:E2:3E:0C:CF:93:D2:B7:DE:21:77:07:BE:05:31:71:51:88
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 01A10177B404F987126A76A241704502F294
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/N0Rx4j4Mz5PSt94hdwe-BTFxUYg.roa
Signing time: Sat 03 Oct 2026 11:13:04 +0000
ROA not before: Sat 03 Oct 2026 11:13:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57167
IP address blocks: 46.254.107.0/24 maxlen: 24
176.111.33.0/24 maxlen: 24
195.14.122.0/24 maxlen: 24
2a11:b100:b100::/48 maxlen: 48
2a11:b100:d100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:77:b4:04:f9:87:12:6a:76:a2:41:70:45:02:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Oct 3 11:13:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374471e23e0ccf93d2b7de217707be0531715188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:c3:5a:c9:0e:06:73:e9:92:e5:db:1d:4f:
ff:f3:a5:bc:b6:03:ea:7d:55:25:17:6d:c9:ad:66:
95:a3:50:62:8d:fc:8f:19:ce:06:55:cf:50:6c:54:
aa:b0:99:f1:0e:07:05:65:5a:3b:8a:8f:f6:73:cb:
01:e1:b4:19:36:92:0f:98:e4:94:58:21:ca:98:92:
1f:00:1e:23:7a:92:f7:9a:94:ec:e9:a7:50:f4:c3:
c0:7a:26:cb:1e:a2:4d:cd:a6:59:f1:53:b1:46:58:
77:92:5f:a8:66:de:8d:35:26:12:a8:5f:0a:01:91:
a2:ec:39:30:83:ed:83:82:b4:aa:53:ad:7c:35:0d:
af:ef:65:7d:ad:b5:74:8d:22:f8:4b:d9:d3:7b:8b:
61:b9:33:cf:4f:ef:db:39:0f:06:59:b1:5e:ee:31:
43:3a:77:b2:18:47:e9:8f:8e:ef:7f:de:ed:db:81:
58:28:43:d1:9f:d9:d8:c2:39:a6:cb:36:7e:f3:6d:
36:f4:c4:12:d0:55:00:da:52:28:6f:5b:bd:b2:fb:
8f:ab:53:21:0d:42:ed:de:12:25:bd:29:31:f5:f5:
3a:16:8b:1a:b6:a1:b0:28:86:09:04:1e:c8:b0:b1:
21:0f:6d:19:77:ad:14:2b:43:ce:b3:bd:8a:be:95:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:71:E2:3E:0C:CF:93:D2:B7:DE:21:77:07:BE:05:31:71:51:88
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/N0Rx4j4Mz5PSt94hdwe-BTFxUYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.107.0/24
176.111.33.0/24
195.14.122.0/24
IPv6:
2a11:b100:b100::/48
2a11:b100:d100::/48
Signature Algorithm: sha256WithRSAEncryption
4b:58:a0:01:78:1f:cc:18:67:e7:65:e0:2b:78:e2:8c:1c:1a:
75:06:17:7a:a0:91:af:bb:9b:ca:f9:84:46:d6:b4:2a:0f:da:
7e:fb:64:58:0a:c4:12:e5:16:48:74:a0:da:fa:b6:16:3a:8a:
0f:e7:ba:0b:e9:13:6f:8e:a7:48:dc:e1:55:f0:fd:00:f4:5c:
41:f6:48:9c:8c:7e:c7:a8:88:fb:ee:82:40:3c:59:0a:78:52:
7f:12:da:4e:a6:c8:f4:80:a7:dc:76:6c:86:d0:17:28:5b:eb:
24:da:6a:47:5e:9b:aa:7f:8c:72:6f:05:00:6c:d2:90:c2:c6:
45:b6:78:9a:bb:02:78:a1:58:4d:1d:a6:27:6b:e2:8c:96:14:
56:91:10:76:20:50:c2:44:e8:a7:2c:1c:28:45:46:97:e0:2b:
73:c5:41:38:c3:6c:00:ec:4b:e6:29:10:4e:a7:34:f5:d4:11:
7a:2a:df:6f:c0:4b:dc:f7:06:c7:41:c7:77:b4:39:39:2e:13:
3b:78:7c:7b:fa:ea:6d:88:f2:61:2d:b1:ac:19:e3:2a:5c:04:
fd:af:e5:45:34:4e:7c:c3:a6:51:b5:01:8e:f8:7f:6d:62:ac:
3c:3d:c6:0c:26:d3:72:74:a6:d3:5e:84:30:03:f4:24:68:32:
78:60:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:04 2026 by rpki-client