Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nDtT9iDdNa0R1KfhVCS3rLcbUZ8.roa
File: nDtT9iDdNa0R1KfhVCS3rLcbUZ8.roa (raw, json)
Hash identifier: HM5uokUVs3ytZ7hz3zbpTe0d6lBOhc5Cp+pW4u6XE3A=
Subject key identifier: 9C:3B:53:F6:20:DD:35:AD:11:D4:A7:E1:54:24:B7:AC:B7:1B:51:9F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FF4F5B6BCE8E56F149CB993B4551187E2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nDtT9iDdNa0R1KfhVCS3rLcbUZ8.roa
Signing time: Wed 12 Aug 2026 07:52:51 +0000
ROA not before: Wed 12 Aug 2026 07:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 185.230.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:f5:b6:bc:e8:e5:6f:14:9c:b9:93:b4:55:11:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 12 07:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c3b53f620dd35ad11d4a7e15424b7acb71b519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:49:d3:a7:fe:f9:5f:67:db:8a:95:2f:83:
f9:43:de:ee:7e:5a:0e:df:5e:ad:58:77:51:7f:9f:
a1:4e:fa:c2:36:b9:a6:d1:4b:55:f3:f0:f4:74:e3:
62:f8:85:29:cf:92:aa:34:c3:9a:b8:ef:5a:f1:df:
da:e0:fd:87:26:4d:32:f3:be:e7:4e:8e:68:09:17:
92:94:4b:9b:9c:ad:6f:7f:bb:52:25:02:24:b2:7b:
00:d6:51:7f:1a:89:87:33:88:bc:f8:54:f5:ed:c5:
ef:22:90:e6:19:9e:4d:b5:d8:a2:3c:f8:b2:7b:da:
20:fe:ff:a7:8f:1a:f0:b5:40:e7:4e:30:b7:3b:c5:
b2:b7:71:f0:5f:4d:ee:eb:87:fa:71:5e:58:0b:65:
51:1d:16:9c:0d:3a:cd:9a:8d:7c:3a:e6:75:85:f7:
18:4a:98:41:af:14:a7:d0:7d:b5:f7:32:b2:28:c7:
50:34:90:91:7b:ec:5d:04:19:ad:7c:f0:fd:ed:e1:
f6:66:65:2d:9a:3e:d5:a9:e2:18:3e:52:12:b7:0f:
2b:83:5f:73:8a:a6:6c:ae:8f:0e:47:a0:c7:4e:57:
f6:6a:86:fb:14:3d:d0:ea:df:0a:d0:e4:f7:b0:e0:
ed:ad:b3:2a:5f:a2:a2:02:29:73:6e:c4:07:55:b6:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:53:F6:20:DD:35:AD:11:D4:A7:E1:54:24:B7:AC:B7:1B:51:9F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nDtT9iDdNa0R1KfhVCS3rLcbUZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:95:4b:44:f1:fd:d2:46:dc:ec:69:b0:2a:5d:fe:48:97:29:
13:c6:37:da:5b:0b:32:dd:1d:a7:96:4d:55:26:4b:f5:01:79:
06:10:e0:6b:31:b1:db:1c:8d:31:14:0b:bb:4c:92:ac:ce:ae:
43:c5:6d:6b:47:e9:90:1d:67:91:a0:b2:ef:ed:04:75:5d:00:
4b:0c:ca:2e:0f:ef:80:e9:5b:61:32:af:17:3e:f5:91:b7:ce:
ff:95:5e:1d:5f:17:ae:d3:22:84:23:b1:b4:1d:0f:08:4b:f4:
23:c2:f3:06:6e:c3:e5:c7:d5:db:9d:47:1e:69:bf:07:d0:ea:
38:67:d1:b6:00:b0:64:f2:e5:21:56:ca:d7:0a:48:88:bb:67:
19:3d:0b:52:ea:37:68:65:40:75:94:97:29:f8:14:93:c6:9a:
19:1d:e5:d5:d2:55:aa:f8:60:f2:83:a9:73:4a:15:56:da:4d:
59:e7:2a:7a:b4:a4:48:d3:28:e4:88:1f:84:04:02:ee:1f:bf:
68:30:31:53:38:66:d8:b7:af:6e:9d:a5:88:d1:3f:8d:1a:25:
a0:22:10:a4:00:7c:7e:09:0e:0a:c8:f6:3b:48:5a:6c:75:b9:
f2:01:76:f0:29:c6:df:1b:f5:ef:49:86:7e:76:9c:9d:f8:42:
c8:d9:0e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 22:21:12 2026 by rpki-client