Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/NxbpjVs3Uhaa1iz97O54Wc3fOHs.roa
File: NxbpjVs3Uhaa1iz97O54Wc3fOHs.roa (raw, json)
Hash identifier: YWjMNHt7mgfjPZ+Q+D+xYGfu4N2/tU52pkEln1AD3R4=
Subject key identifier: 37:16:E9:8D:5B:37:52:16:9A:D6:2C:FD:EC:EE:78:59:CD:DF:38:7B
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1971B86945683455667CB18C06B9809F9
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/NxbpjVs3Uhaa1iz97O54Wc3fOHs.roa
Signing time: Sun 01 Nov 2026 12:35:25 +0000
ROA not before: Sun 01 Nov 2026 12:35:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218232
IP address blocks: 153.76.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:1b:86:94:56:83:45:56:67:cb:18:c0:6b:98:09:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 1 12:35:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3716e98d5b3752169ad62cfdecee7859cddf387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:e6:98:4e:50:c2:77:79:fb:a8:23:31:1a:
1f:3a:e0:a9:de:55:cd:e8:f5:44:da:bd:28:40:56:
b0:75:c4:92:2f:fa:58:ca:73:3f:72:38:48:c8:48:
d6:2f:94:6c:f0:50:da:3e:e7:dd:7e:d6:d1:14:2c:
72:95:18:59:b5:83:05:e9:3a:a4:d0:e5:30:b4:72:
00:1c:7a:62:ac:74:d6:3b:4a:5c:d0:1f:c3:30:58:
a1:55:23:2f:df:b1:ba:6b:9e:fd:44:c2:cb:b5:5f:
b9:bf:0f:3e:7d:73:a2:b2:9d:28:70:29:9b:1f:c9:
a9:45:77:67:3d:78:21:1d:22:ff:cb:71:f0:6c:98:
74:e0:22:41:07:a3:42:bd:b6:2c:ac:dd:26:f8:75:
0a:37:fa:a4:e0:de:d2:a8:35:b6:e4:92:b2:76:5e:
1e:e3:f9:67:fb:2a:6b:ba:f8:ce:c5:49:a0:82:4e:
07:49:ad:45:60:5c:b1:27:61:79:6c:64:d3:b4:ea:
1f:6e:84:b0:25:14:14:2c:7d:ec:be:36:d1:5d:fe:
75:a7:1c:30:02:ac:1d:8a:d4:af:d1:56:4a:f5:dd:
3c:bb:cb:34:a2:d9:90:8f:e1:48:00:24:71:62:b3:
82:7b:4d:5e:15:2b:99:42:c5:54:0e:95:c9:a9:d3:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:E9:8D:5B:37:52:16:9A:D6:2C:FD:EC:EE:78:59:CD:DF:38:7B
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/NxbpjVs3Uhaa1iz97O54Wc3fOHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.159.0/24
Signature Algorithm: sha256WithRSAEncryption
71:28:0b:39:ab:fb:7c:43:70:13:64:de:99:28:cd:0c:43:82:
d6:8b:ba:00:b1:07:c8:95:57:5c:05:47:2e:20:87:92:6e:48:
14:89:88:7f:b7:fb:ad:d2:bb:f0:e6:12:f1:15:81:0c:9b:93:
a2:bc:7b:8e:88:5d:f6:b3:a1:6a:6b:7e:45:8a:9d:42:9c:4c:
0f:70:d4:3d:a2:19:4e:21:43:3f:38:08:78:9d:76:64:7a:d5:
5d:49:f3:25:89:62:21:b1:3c:66:20:e9:47:0b:24:0f:d6:8c:
24:b1:85:fc:d9:52:d9:32:17:95:86:08:50:10:9b:fd:4a:95:
54:11:c8:3e:12:26:50:4e:11:f0:d0:d6:8a:58:c2:26:34:3c:
fd:71:dd:cb:61:fd:ab:7a:76:01:03:d9:3b:79:2d:6a:f2:9a:
25:00:8e:68:bc:ed:7a:7b:9c:89:dc:e8:f1:fc:77:ef:6e:31:
78:35:80:e3:b6:c4:ff:7e:45:de:ad:12:c8:49:36:fc:b7:d2:
9d:44:3a:bf:f5:d3:8b:72:1f:9b:3d:2a:8e:c9:e5:7f:2a:23:
12:5b:f3:42:36:05:53:0d:82:43:82:ea:3f:73:3c:be:cd:c9:
fe:fb:95:69:20:a8:dc:3c:f0:8b:08:9e:df:79:aa:d1:11:a9:
68:3b:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:05:26 2026 by rpki-client