Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/NoSK7sZyq5DVw267WTMAXasfJ-A.roa
File: NoSK7sZyq5DVw267WTMAXasfJ-A.roa (raw, json)
Hash identifier: Bg3ZeyYpcA1S2YyAVbtMxuNPQPI+1r0FDTP7AdCyUJQ=
Subject key identifier: 36:84:8A:EE:C6:72:AB:90:D5:C3:6E:BB:59:33:00:5D:AB:1F:27:E0
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01A056F80EF4FBE49FD7C968619E3671D6F9
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/NoSK7sZyq5DVw267WTMAXasfJ-A.roa
Signing time: Mon 31 Aug 2026 08:38:12 +0000
ROA not before: Mon 31 Aug 2026 08:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:f8:0e:f4:fb:e4:9f:d7:c9:68:61:9e:36:71:d6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Aug 31 08:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36848aeec672ab90d5c36ebb5933005dab1f27e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:c7:02:55:19:9f:82:f0:a8:7b:59:74:1e:
4f:57:e8:37:9c:79:7d:16:76:5f:35:73:59:0c:72:
2d:9a:ac:8e:6f:3c:02:91:c1:f8:90:6b:47:1f:a3:
52:cb:6b:d8:eb:f1:e7:c5:74:c5:28:a9:f2:fa:3f:
bc:6e:8a:b6:06:56:1e:b2:26:6c:da:b2:6c:81:c6:
85:78:87:5e:53:19:2b:ad:24:ea:31:cc:9c:40:19:
8c:d9:fb:78:12:85:90:4d:b8:d9:fe:07:e9:0a:bf:
57:a2:27:91:72:74:11:2b:b0:ec:c8:32:5c:53:a1:
09:39:61:cb:16:59:40:b8:89:df:c0:82:46:43:53:
9e:ba:03:0a:1c:a5:53:b3:98:48:b6:c3:d9:a6:ae:
15:43:6d:8c:18:46:4b:f8:4b:87:b1:71:96:ea:2a:
a9:64:c4:3f:a2:69:04:70:c7:1e:2f:74:7a:7e:90:
86:f5:35:84:35:a1:b9:0b:ba:6f:eb:77:40:b7:79:
e1:88:c0:8a:0c:26:74:c3:22:3b:db:ea:d1:cf:33:
62:91:e8:8a:fb:55:fb:cc:d1:5f:b9:ca:a8:48:2b:
aa:5a:f7:58:b4:43:02:67:62:41:61:ac:36:ac:e5:
49:cb:00:ef:ff:e9:48:e3:ad:f0:54:bc:e0:b3:ef:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:8A:EE:C6:72:AB:90:D5:C3:6E:BB:59:33:00:5D:AB:1F:27:E0
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/NoSK7sZyq5DVw267WTMAXasfJ-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:50:98:f4:a7:da:39:f5:1c:52:6b:68:1f:f9:28:56:61:ed:
ad:15:22:f1:74:21:9c:7f:15:77:87:2f:a7:92:cb:58:d6:d5:
b1:8d:53:f0:02:60:04:f0:cf:74:59:f6:d0:a8:b3:e2:5f:1b:
a3:a2:b6:5d:ca:97:d2:fe:5d:9a:38:51:99:2c:50:5b:aa:d7:
b8:07:d2:0d:c5:18:ba:e8:64:ad:ca:7a:20:5b:d1:3e:00:ca:
cb:6a:7b:74:92:d6:ed:90:02:48:c9:af:dc:71:f4:d7:74:ae:
bd:50:c6:e3:4c:74:15:ef:c8:69:bf:0c:dd:60:e9:58:f8:c8:
50:14:13:79:07:88:31:02:c5:1c:1f:5f:56:fa:af:4c:80:e1:
8b:a3:b6:13:41:d3:09:4e:8e:ec:71:77:68:3e:30:79:29:47:
87:ac:70:bc:2d:13:ce:38:1f:ae:6d:3f:fd:4b:ab:1f:07:0f:
54:90:35:43:35:da:7c:d3:3a:d9:15:8b:7f:d8:e0:dc:71:de:
84:20:23:b7:d6:de:66:4c:66:a9:34:c4:15:c0:1c:3d:06:3c:
d2:e0:21:2a:53:c5:f2:20:fb:bf:66:3f:04:6c:e2:c5:de:29:
47:7a:82:0a:6a:37:c3:af:7d:4c:2c:2f:34:2b:ee:74:b8:6e:
a1:06:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:54 2026 by rpki-client