Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa
File: DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa (raw, json)
Hash identifier: NPIW3IPajlO+RZm/cg9qqMOdImUpO6F0PwMyYtUpmwo=
Subject key identifier: 0C:D0:7D:2F:C6:5E:68:77:BC:D1:1F:FD:9D:98:C7:79:4D:F1:5C:B5
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019FAD0BB8C51FCA1AB307DB73663469E07D
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa
Signing time: Wed 29 Jul 2026 08:44:14 +0000
ROA not before: Wed 29 Jul 2026 08:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57588
IP address blocks: 185.170.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:0b:b8:c5:1f:ca:1a:b3:07:db:73:66:34:69:e0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Jul 29 08:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd07d2fc65e6877bcd11ffd9d98c7794df15cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:8d:00:80:3d:5d:8d:3b:63:91:da:60:c1:
03:a4:19:e4:2d:ca:9d:cb:64:30:ee:5a:96:3a:40:
84:bf:f9:8c:90:9b:5d:33:26:42:89:49:ab:ed:99:
22:dc:4e:d3:cf:7c:09:c8:68:17:fc:00:15:37:e7:
e7:12:79:bf:c9:e9:cc:6d:dc:8f:9e:f1:9e:31:27:
ba:dc:18:a9:e3:3c:b8:e0:fb:c9:e5:31:d6:0a:f0:
60:43:c1:27:66:45:39:d5:11:34:2b:0c:e5:c1:f8:
df:1c:51:44:a5:ac:f8:d7:47:96:8b:ac:8f:a2:03:
6d:e0:9b:4e:71:ef:0e:cc:e4:6d:6f:04:39:8c:1f:
0e:ed:22:4a:4d:9a:b8:73:16:ea:23:05:51:7a:15:
71:3d:e7:48:fb:c5:d7:d9:98:8c:bf:c3:02:39:a8:
ed:82:52:fd:7d:93:be:57:bb:e3:1d:22:0c:64:f4:
07:e6:22:15:44:db:03:97:59:c4:6c:51:b3:f3:b6:
74:b6:6e:0c:35:e0:ed:0c:69:45:24:27:ff:ba:36:
e1:38:8d:ac:1f:b2:97:86:eb:74:50:99:1e:5b:a1:
25:75:5f:0a:ba:47:04:34:d6:e0:6c:b1:75:67:4b:
e6:d3:88:01:95:19:b9:1e:ac:a1:19:a9:f0:31:a0:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:7D:2F:C6:5E:68:77:BC:D1:1F:FD:9D:98:C7:79:4D:F1:5C:B5
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1c:17:a7:f4:7b:69:6a:0b:16:0a:8d:53:cb:34:3a:13:e1:
ec:ff:8b:10:5e:10:f9:59:81:66:5f:cd:bb:6d:6d:30:0e:fd:
73:dd:16:f0:2d:19:7e:1e:75:f2:2f:60:f2:0d:08:cf:09:24:
01:1b:2b:ce:37:f5:31:8e:58:e4:2c:22:ad:a4:2d:2d:7f:75:
16:be:79:85:58:a0:03:4c:86:60:9f:d5:fd:65:a9:46:71:2a:
7d:9e:10:2c:5d:c0:89:37:b8:0d:42:61:2b:e3:ac:d1:d6:db:
1e:e5:c8:c7:43:27:b1:db:97:3e:04:10:14:46:de:be:e8:0d:
20:ac:96:4f:88:c7:dc:ac:7b:cc:32:e9:b5:38:81:ce:f6:b6:
b3:69:4d:d1:7c:be:c0:80:b0:6c:7f:32:8e:15:a0:bd:20:fa:
37:50:93:bb:01:17:cd:ac:04:a2:18:70:2f:79:18:ae:d9:7a:
23:cf:72:31:19:73:12:12:4c:ab:ce:23:fc:d8:7f:c3:41:d8:
75:06:0b:51:aa:db:8f:df:68:75:dc:e2:f6:db:61:9f:9e:a3:
07:31:06:3e:53:98:91:47:cb:81:da:75:96:22:88:15:e5:ff:
e8:33:16:87:0d:4d:ed:b9:4b:b3:12:df:7d:58:a2:7d:18:72:
88:a5:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:16:49 2026 by rpki-client