Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa
File: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (raw, json)
Hash identifier: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=
Subject key identifier: 9D:DD:8E:48:1D:70:4F:B2:A9:55:49:84:5D:36:C6:84:3A:BD:5E:C8
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 019F69FC3E41AED6165EE1ABC58200CBA6A7
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa
Signing time: Thu 16 Jul 2026 08:12:46 +0000
ROA not before: Thu 16 Jul 2026 08:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219325
IP address blocks: 212.102.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:fc:3e:41:ae:d6:16:5e:e1:ab:c5:82:00:cb:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Jul 16 08:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ddd8e481d704fb2a95549845d36c6843abd5ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:14:4a:df:2e:8e:26:37:34:9f:1f:cb:3b:
8a:b1:42:2f:10:4d:ce:ee:37:17:50:ca:8b:64:de:
17:4e:70:18:6f:0a:ba:f9:c9:03:72:5b:20:b0:db:
02:62:e5:0e:41:db:60:b3:97:c6:14:41:8c:5a:15:
0e:fb:cc:e1:b2:29:8d:a2:d7:b1:61:ed:ea:b7:f4:
66:b4:a1:65:0a:09:76:a1:e2:df:52:cf:a9:00:bd:
0d:02:be:3a:81:48:cb:9c:0f:d5:7c:ba:28:f7:0f:
59:94:29:59:df:aa:5d:3a:6e:e0:75:6b:7a:54:8e:
26:97:89:35:e3:38:5c:1b:29:54:7d:ea:6e:a8:35:
55:b0:57:6c:89:65:8c:ce:ef:5a:15:f7:ac:49:e9:
d3:f1:a3:0e:4f:50:31:e9:f1:46:6e:26:bc:10:e1:
c7:37:3e:c6:e3:59:d3:4c:23:26:a3:ac:16:75:06:
f6:65:0e:db:7a:01:da:9b:e0:16:c1:8c:ba:48:15:
20:47:28:30:fa:98:99:eb:23:d5:5b:14:b9:a2:19:
2f:26:bc:e0:f6:d3:c0:fc:df:16:80:20:f9:66:18:
dc:8c:23:8e:f4:e9:8d:a0:67:9f:29:52:67:9d:c3:
d4:a7:25:85:ad:0c:fe:66:92:ac:20:1f:f0:9c:7e:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:8E:48:1D:70:4F:B2:A9:55:49:84:5D:36:C6:84:3A:BD:5E:C8
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.100.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c7:8d:17:31:ba:2d:28:cb:c2:83:42:cf:a1:df:b8:b1:a2:
0e:c7:f3:ff:20:e4:35:db:34:65:b7:b6:61:0e:14:37:3e:66:
5d:a9:e9:9e:ea:34:47:3e:85:97:d6:37:53:73:ca:e5:06:8a:
56:e3:ac:7c:68:4a:55:a5:c9:06:7b:5b:c3:58:d1:d8:1b:3d:
d3:e5:09:40:41:75:c3:0e:b1:02:f9:cf:36:a6:81:c3:e2:a7:
81:fc:d9:c4:02:1c:da:29:8e:3c:cd:3c:bc:f8:a3:88:17:fa:
6d:f9:54:ae:74:c2:15:23:03:97:62:ce:df:ee:86:64:31:66:
a7:54:6d:fe:88:95:ce:0d:62:5f:3b:0a:69:26:e0:d1:34:6c:
27:fb:dd:bd:00:d7:2a:af:18:43:5a:58:2e:a8:96:4e:3f:38:
dd:24:55:43:f8:f5:09:df:25:12:ef:58:be:e6:85:1a:b0:55:
55:d8:8b:25:2a:28:fd:51:d3:f7:61:b3:21:7f:07:a1:7f:03:
6b:2a:88:dc:31:18:f1:88:12:cd:94:e9:d4:bd:65:99:89:99:
51:5e:71:5b:97:7a:be:a8:d8:25:b9:73:19:d1:81:bc:ab:f7:
a4:42:4a:df:fa:f5:df:91:af:50:1f:88:38:a4:c0:ef:86:c4:
56:11:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:09 2026 by rpki-client