Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa
File: Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa (raw, json)
Hash identifier: RxEsMznFmzmlGwJT1srwSiUrG5r0NzfeEQAmBuii6aA=
Subject key identifier: 36:7D:09:CC:68:32:FE:EE:AF:8E:C6:08:D0:2A:F3:E7:AA:B4:0E:46
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019CDE271D0EDA4B3516A5CDCA68C170DE9B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa
Signing time: Wed 11 Mar 2026 18:27:11 +0000
ROA not before: Wed 11 Mar 2026 18:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 46.34.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:27:1d:0e:da:4b:35:16:a5:cd:ca:68:c1:70:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 11 18:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=367d09cc6832feeeaf8ec608d02af3e7aab40e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:8d:9a:59:7a:6e:86:1f:11:ef:6d:64:dd:
16:8b:b1:c6:f2:65:a6:e1:d8:d2:69:74:89:8f:59:
86:c5:05:8d:9d:b7:9b:27:b7:d5:e5:2d:1f:d8:70:
62:74:d8:42:a4:17:e9:f6:86:17:50:60:14:7d:33:
21:f2:f7:d5:93:82:ea:59:69:99:c5:d9:a9:28:4b:
a7:48:12:11:0d:6c:6c:38:85:1c:a0:d4:b4:7b:b1:
2a:7f:ac:9f:fa:20:50:20:9a:dc:8f:5c:94:7d:18:
c3:fb:c6:c6:13:88:41:1c:2c:d8:e3:ed:f2:34:b6:
bb:4f:a6:01:33:95:e7:2a:43:fd:df:0d:03:1b:06:
02:96:c8:ff:ac:87:07:38:7b:84:0d:48:49:2b:5d:
6b:17:bd:36:30:b5:72:5f:1b:4d:d1:93:91:27:bc:
2e:ad:ca:25:a2:21:23:8e:3e:7a:3c:76:b7:60:c7:
9a:15:8c:bd:a2:51:c7:8b:17:7b:ae:8a:0f:e1:94:
c2:15:ed:92:dc:56:be:23:7e:57:f4:f5:af:3b:1d:
bc:a0:41:d1:86:0e:b6:37:a2:b1:37:42:62:8c:f3:
3f:bc:90:ca:91:f5:4e:04:53:be:4d:52:cb:7f:bd:
a4:0c:19:85:9c:31:d8:31:c4:69:05:a6:d2:b3:d9:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:09:CC:68:32:FE:EE:AF:8E:C6:08:D0:2A:F3:E7:AA:B4:0E:46
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.50.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d9:b0:f5:fd:17:fb:2b:38:ba:e0:c4:93:c4:16:35:17:d0:
07:30:7f:3b:59:f0:69:32:96:a7:67:9a:83:18:0d:6e:24:27:
01:20:44:eb:24:2f:61:96:66:dc:9e:a6:8e:cd:7a:23:5a:89:
b7:b7:d6:0d:54:6f:c0:5a:0c:87:a7:6c:df:b8:8d:31:d1:25:
1b:e7:b6:f7:be:bc:d5:e5:0d:cb:0e:65:eb:e1:4e:c4:92:6d:
b2:ac:00:d9:9b:6a:35:c3:78:a4:6f:ab:ab:06:02:3c:bf:c9:
04:ad:72:38:75:78:e2:54:a9:04:d7:5b:8e:dd:ed:e4:d8:9a:
f1:40:5e:01:75:cf:41:06:57:70:5a:aa:48:61:d0:d6:10:9c:
9e:52:9d:cd:48:e3:62:e9:7c:73:e1:7a:c6:dd:42:ba:29:79:
15:ba:6d:c5:b9:b4:57:ec:85:9c:07:eb:a0:aa:a2:54:15:49:
58:9e:c3:fe:02:01:8e:0b:5c:8c:2a:32:e8:c1:02:d6:c4:e1:
a1:a4:8a:80:35:db:76:55:e8:8a:d5:b1:83:24:90:16:99:2f:
05:46:6e:b7:2a:f5:69:55:cb:7b:4e:dc:96:83:d6:c8:a3:34:
ca:77:fd:84:48:7c:52:d1:78:71:ea:ea:14:05:45:e0:ec:2a:
06:e9:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:31:36 2026 by rpki-client