Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nA-HjVNYAbHvJjXDNMH6AoxEpOI.roa
File: nA-HjVNYAbHvJjXDNMH6AoxEpOI.roa (raw, json)
Hash identifier: LEZvlVkjVmLB7qn+6X5kqII2oh4598C3ZkPHQts6YnY=
Subject key identifier: 9C:0F:87:8D:53:58:01:B1:EF:26:35:C3:34:C1:FA:02:8C:44:A4:E2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A00D17561547CF1A61C52E096E865C58CA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nA-HjVNYAbHvJjXDNMH6AoxEpOI.roa
Signing time: Mon 17 Aug 2026 00:20:28 +0000
ROA not before: Mon 17 Aug 2026 00:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 45.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:17:56:15:47:cf:1a:61:c5:2e:09:6e:86:5c:58:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 17 00:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c0f878d535801b1ef2635c334c1fa028c44a4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3d:26:d2:f1:e4:4e:93:9d:6a:e0:30:a7:29:
0d:99:77:d6:a4:24:17:a5:39:af:f5:c5:8f:a7:42:
c2:cb:ad:4f:98:d0:43:39:44:19:2b:7c:c7:aa:ba:
b3:57:98:4f:b4:a5:15:10:e0:2e:32:78:80:a2:81:
83:9a:e0:85:48:21:8d:69:c5:bb:5e:e0:28:2f:fa:
2e:11:eb:c9:a4:b1:62:46:65:87:66:f4:0d:55:f3:
f4:5d:ed:1d:7d:cc:20:62:f3:7d:fb:fb:86:b2:69:
b6:46:01:c6:bf:1c:2f:b0:ea:c0:44:49:c5:7f:a5:
8e:96:35:e4:7d:19:23:7e:c2:30:80:ec:76:7a:1d:
3d:1c:de:88:f7:09:bc:79:15:89:19:f1:6a:42:15:
d3:f9:13:1c:bb:06:81:ca:b5:0f:80:b8:b5:45:c1:
9c:1b:76:ed:0c:3b:71:a2:5f:46:7b:ad:16:a3:e3:
00:49:87:46:02:40:5c:2c:29:7d:f7:4d:ed:e6:e3:
26:58:ce:82:ce:31:72:2b:fb:53:e7:b3:e5:df:ae:
a1:1b:da:20:a4:9a:cc:ca:cb:fb:09:3a:a8:21:b2:
bb:16:f8:84:c7:75:2f:63:19:79:bc:d2:ed:a7:14:
8b:1d:2b:6f:72:4c:2b:1b:df:84:54:fd:06:96:d0:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:87:8D:53:58:01:B1:EF:26:35:C3:34:C1:FA:02:8C:44:A4:E2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nA-HjVNYAbHvJjXDNMH6AoxEpOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7f:8a:b2:3f:20:9b:11:90:4d:c6:72:cd:4d:6e:d1:1f:62:
e6:32:3a:bb:7d:8f:85:dc:e0:8a:c0:dc:1e:0d:53:77:11:65:
85:94:42:2a:d8:88:a2:dc:82:fa:59:87:34:e9:54:3f:bc:29:
97:57:c3:87:cf:45:86:48:c3:c9:d9:2e:a6:d3:68:28:d0:b2:
0c:b0:eb:46:81:ec:b3:2d:7d:bb:08:d6:87:1d:c9:8e:55:3f:
56:83:20:17:d5:bf:f6:aa:70:63:cd:7e:c8:35:49:68:d1:d4:
bc:33:da:64:c3:c4:28:6d:b5:38:9f:05:83:7c:78:c0:13:ff:
02:89:91:8f:12:f3:aa:ab:40:b0:5c:23:e5:a6:e0:d6:08:c2:
17:22:23:b7:50:ed:76:24:e9:0c:f3:a6:d3:0e:f0:5f:2e:6e:
ce:89:93:59:12:37:f3:1e:d7:85:3d:93:90:7c:62:34:e1:5b:
04:74:6a:c1:a5:10:da:50:92:4f:7e:58:d4:65:3f:43:0f:07:
14:8d:81:03:e1:db:ea:6f:c0:89:8c:70:14:f7:ed:e9:51:2f:
3e:8a:0c:3a:c0:8d:d7:2c:90:6a:9a:53:35:91:ac:18:9b:5e:
a2:5d:30:da:48:f8:8f:8d:fe:c2:58:a1:fb:e9:47:a7:a6:5e:
67:2f:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:04 2026 by rpki-client