Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/NOTd4-A4PmSQj4XSSOacvmdiako.roa
File: NOTd4-A4PmSQj4XSSOacvmdiako.roa (raw, json)
Hash identifier: 8iobNGMtq59P99qMnRi2vFVNNvHMw8CEZpBCxMHYatM=
Subject key identifier: 34:E4:DD:E3:E0:38:3E:64:90:8F:85:D2:48:E6:9C:BE:67:62:6A:4A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0B8E408B5CC838C77F3734D818EB53AF7
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/NOTd4-A4PmSQj4XSSOacvmdiako.roa
Signing time: Sat 19 Sep 2026 08:59:07 +0000
ROA not before: Sat 19 Sep 2026 08:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59623
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:e4:08:b5:cc:83:8c:77:f3:73:4d:81:8e:b5:3a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 19 08:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34e4dde3e0383e64908f85d248e69cbe67626a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:75:9d:8a:53:89:30:62:c0:c7:83:61:23:
d3:94:3c:4a:3b:a2:46:7b:dd:8d:99:9e:fe:04:a6:
69:01:07:ec:82:47:17:d5:ec:38:4d:ed:62:af:d7:
80:87:64:99:cf:6c:6d:45:45:6f:3e:40:b0:ec:00:
53:94:86:80:b9:a6:35:c4:1b:4d:9d:f3:6f:d6:03:
f2:86:b7:d9:5a:f7:ef:06:6c:8e:10:3d:db:7a:7e:
79:69:6b:ed:28:0c:fb:22:25:28:89:00:c5:ee:d9:
ab:e2:42:72:7c:f4:c0:6a:19:66:02:9b:6b:d8:be:
77:3c:93:0c:ee:4a:51:04:5c:54:79:a2:34:bd:2a:
25:7a:ac:4f:c1:96:48:7f:30:c1:27:0c:c8:15:d1:
55:b1:fb:53:24:93:45:be:cc:ff:a2:fe:6a:d9:79:
1e:ee:4f:69:e2:67:5a:ae:d2:0b:78:01:f7:35:a4:
d0:ad:e3:ff:db:73:77:33:ac:6b:9f:dd:39:76:93:
7e:32:54:cd:11:58:07:3e:10:76:fc:8a:bd:27:46:
53:d6:58:4c:8d:10:3b:18:7d:d5:f2:7c:c7:97:a6:
fb:3c:69:3b:bb:d3:07:d1:57:c5:98:9f:f0:64:36:
4e:dc:a1:d9:74:74:80:10:11:b3:c1:e3:c7:b6:6a:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:DD:E3:E0:38:3E:64:90:8F:85:D2:48:E6:9C:BE:67:62:6A:4A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/NOTd4-A4PmSQj4XSSOacvmdiako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0c:c9:86:90:aa:7c:81:08:43:36:b9:91:12:36:20:62:06:
8b:ac:02:b8:06:91:3a:0e:7f:3f:f3:81:57:02:00:4b:f8:85:
41:4f:e0:3d:11:b6:b4:02:c3:05:2d:ea:d0:5c:41:68:7a:ea:
78:dc:9c:42:09:e4:84:99:50:b1:35:4b:95:35:ee:46:3d:57:
d7:d6:cf:93:bb:70:b3:a1:49:c0:b2:bf:78:6c:a4:31:70:1d:
6a:1c:d8:08:e9:fc:db:cb:6d:c9:46:b1:77:32:1b:37:67:74:
62:e3:77:ad:f6:55:ec:0f:06:c9:5f:df:2a:2e:36:e0:c1:23:
c3:68:87:5d:aa:8e:79:88:70:3f:8f:d0:a7:c7:82:98:4e:db:
5e:1b:0c:67:1f:5d:09:ed:ba:46:65:a9:c3:9d:12:3f:49:6f:
3e:82:ed:9c:15:b9:58:23:5c:c1:83:94:4a:7e:6d:50:9b:1d:
8c:84:e8:18:e6:a2:92:1d:25:f1:f7:b4:91:19:3a:06:4e:4b:
98:e4:ea:84:24:1b:df:ba:70:25:97:c7:64:4d:e2:f7:f8:52:
a3:02:39:38:e7:06:f7:b3:75:33:b9:5f:16:64:5c:97:7d:d4:
f7:8b:61:64:e2:90:18:7b:9d:c2:17:3a:11:60:6f:83:cf:8d:
9f:64:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 19:54:28 2026 by rpki-client