Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N9qa-XuE8J_j0wYWFuqYHBpJaWw.roa
File: N9qa-XuE8J_j0wYWFuqYHBpJaWw.roa (raw, json)
Hash identifier: 7l+rhBRhEFdndF2VuccgaACA281fJc8gugkSparogok=
Subject key identifier: 37:DA:9A:F9:7B:84:F0:9F:E3:D3:06:16:16:EA:98:1C:1A:49:69:6C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0802FF3132DC0D6723163FB92D18D6C8E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N9qa-XuE8J_j0wYWFuqYHBpJaWw.roa
Signing time: Tue 08 Sep 2026 08:43:41 +0000
ROA not before: Tue 08 Sep 2026 08:43:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211936
IP address blocks: 185.238.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:2f:f3:13:2d:c0:d6:72:31:63:fb:92:d1:8d:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 8 08:43:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37da9af97b84f09fe3d3061616ea981c1a49696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:09:ba:57:f0:da:89:60:1e:f5:36:7b:cc:
55:b7:90:74:13:4e:a7:5c:f8:fc:64:59:93:5f:15:
ff:9c:98:02:fd:4e:c5:a0:c8:5b:d8:1b:4d:eb:b3:
64:a2:65:4e:85:6c:9d:78:3d:4c:97:8e:d2:59:2f:
5f:74:da:70:b1:2c:4c:61:ea:21:5d:a5:7a:91:4d:
5b:20:13:63:5a:20:3b:13:67:55:8a:e6:e1:c3:b4:
c2:43:b8:05:2d:fe:95:7e:f3:62:f0:5b:2a:ca:ee:
70:73:b9:5b:37:bb:98:71:17:4f:43:07:81:86:ac:
04:22:b1:3d:99:c1:4b:01:39:0d:d2:b2:48:2e:b5:
d1:2c:1f:4c:ad:63:5b:0f:fa:b8:1a:05:99:ad:2a:
80:3a:fb:52:0d:09:78:48:73:87:6d:d7:6c:da:2d:
50:6e:8a:7e:ef:16:95:87:c6:1e:bd:32:9c:b8:21:
11:42:9f:40:81:0b:90:85:3a:b4:17:1a:78:27:e9:
92:e2:34:a1:4b:28:5e:41:c0:1b:21:84:36:8e:78:
fc:87:e4:13:bb:eb:86:6b:52:4b:05:af:ce:93:8b:
c3:3d:1e:23:0f:04:75:36:28:54:a8:d3:52:8b:4d:
64:7c:c3:d3:92:f3:d6:05:c2:79:b4:64:34:b5:6d:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:9A:F9:7B:84:F0:9F:E3:D3:06:16:16:EA:98:1C:1A:49:69:6C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N9qa-XuE8J_j0wYWFuqYHBpJaWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:23:00:cf:cd:ed:ef:df:74:e5:b8:fa:be:ee:e6:a0:79:e5:
c9:a3:5c:64:4e:b5:23:da:e9:0f:c2:58:2c:61:89:f8:a0:2c:
55:c1:e8:80:b7:64:d7:8e:ad:f0:df:45:3f:84:75:d5:dd:e0:
37:b5:19:35:78:c9:d1:92:25:f9:03:bb:80:9d:d9:3a:b0:0c:
c5:b8:db:7a:22:ec:4f:37:ac:f5:2f:9c:cf:7f:76:00:36:89:
ca:d5:a6:1e:fe:a2:6e:5a:7b:e9:08:e3:b1:87:30:84:49:e6:
34:95:df:4d:d0:88:89:f9:85:aa:a1:24:bc:49:6d:29:da:81:
91:f8:77:ba:cb:07:38:20:8e:5c:26:5f:6e:27:7e:62:e9:73:
d6:dd:35:84:89:12:b1:30:c4:07:46:f8:b4:8e:ef:38:a0:b1:
1c:88:b1:79:5c:89:11:80:ed:a0:80:5b:dc:ee:22:ae:bd:e4:
cd:aa:02:69:48:f0:06:18:c7:e7:bb:ce:1e:96:69:a0:c1:d0:
72:01:0d:2c:64:6c:7d:26:5b:05:84:31:d3:f1:b5:97:21:ce:
26:da:9b:9d:be:11:68:fa:d8:4a:b7:d7:8d:cc:02:d2:dd:01:
4b:61:9b:4b:42:bb:16:8b:79:d5:84:2e:8e:19:93:ea:83:70:
7e:f6:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 13:37:27 2026 by rpki-client