Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nu3HFHFr2mBrFSXyEHWfkqrxld4.roa
File: nu3HFHFr2mBrFSXyEHWfkqrxld4.roa (raw, json)
Hash identifier: ZdSfiuqpSi0OoqZDXLiE2m4KKUhfLWWODda5GWRzGhM=
Subject key identifier: 9E:ED:C7:14:71:6B:DA:60:6B:15:25:F2:10:75:9F:92:AA:F1:95:DE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A038C02D61A1CF632A63A87EF57D032D7B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nu3HFHFr2mBrFSXyEHWfkqrxld4.roa
Signing time: Tue 25 Aug 2026 11:48:33 +0000
ROA not before: Tue 25 Aug 2026 11:48:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 5.253.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:c0:2d:61:a1:cf:63:2a:63:a8:7e:f5:7d:03:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 25 11:48:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eedc714716bda606b1525f210759f92aaf195de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:8c:2e:de:7a:3e:97:be:ae:cb:f3:ef:3a:
f5:e3:fb:9a:72:6b:64:86:6f:4f:84:99:d8:4f:8d:
d5:c7:ce:3b:54:c9:92:f5:1a:18:25:7b:c9:43:c8:
1d:62:fd:55:2c:e3:f0:58:1b:c3:01:96:3b:fe:11:
e3:5c:3f:df:06:fc:d6:3f:76:54:d7:7d:61:15:2e:
89:0a:c1:e5:46:2c:b4:24:ca:6e:7b:6e:a1:2e:32:
5f:69:09:b2:e6:08:ff:bd:9c:1d:d8:c9:50:78:9a:
aa:5f:4e:06:44:ee:72:1a:8d:a1:58:66:f8:a7:d8:
f7:86:da:c1:91:25:db:cd:7e:2f:bd:13:30:59:78:
33:e8:51:11:3f:99:98:b5:a5:35:b4:cd:03:14:ae:
37:5a:66:9d:f5:07:fd:1b:6f:8e:61:f7:81:fa:70:
ca:88:b1:2f:17:2f:7e:0c:ed:bd:97:cd:00:9c:e7:
01:f2:be:b0:ca:50:ac:cb:cf:99:ce:10:c9:22:49:
be:45:43:8d:2d:a8:f3:ef:98:19:f0:02:11:70:b1:
ee:7f:d2:89:38:4d:a1:7c:01:f6:e5:f1:8d:bc:b7:
e1:1d:8d:d5:b2:ff:49:d1:a6:e6:af:16:88:59:09:
e8:64:59:13:a7:3a:e3:98:c6:17:c3:4f:5d:4e:57:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:C7:14:71:6B:DA:60:6B:15:25:F2:10:75:9F:92:AA:F1:95:DE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nu3HFHFr2mBrFSXyEHWfkqrxld4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f4:71:b4:ba:58:d7:bc:2d:17:94:35:42:a4:55:7e:8e:08:
04:39:fd:d2:bf:be:0b:77:7b:eb:d6:c7:07:88:2c:7b:d2:5a:
10:ab:1c:dd:4e:a1:bf:22:e1:65:b7:ab:b0:d4:fd:30:52:2c:
b2:cf:92:02:2a:91:ac:e3:49:28:8c:f8:4e:dc:41:0e:97:63:
2d:ff:17:8f:6d:43:56:97:90:fe:ff:d1:2e:2b:30:b7:36:61:
80:67:87:3a:7c:50:0e:74:0f:34:3f:0d:50:eb:58:04:61:3e:
42:ca:1f:14:b7:5e:38:2c:30:1d:6f:d5:c1:93:18:24:de:a9:
f4:d5:53:cc:11:37:94:5d:3f:47:db:8a:ca:5c:f9:7a:2b:93:
98:11:68:2e:f5:33:28:b4:7b:65:0a:ee:95:3c:95:41:87:5f:
54:3d:cb:19:94:f7:e1:77:4d:c1:c8:e2:7d:bf:87:0d:c3:22:
0c:3d:9e:50:dd:61:91:53:5f:4a:25:88:de:4a:93:52:f4:c2:
80:f7:5e:ca:11:51:f7:1d:37:ac:83:ca:ea:3d:a0:ac:0b:8b:
0b:d1:2d:bf:cd:3c:a1:25:25:9c:57:cd:4e:c5:21:41:2d:d5:
82:11:6f:25:fb:e3:60:3d:78:5b:37:cc:e3:fd:78:b0:d8:cf:
65:87:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:51:34 2026 by rpki-client