Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/NUttqqXP8pEImO0rZuGzsvGLu5Q.roa
File: NUttqqXP8pEImO0rZuGzsvGLu5Q.roa (raw, json)
Hash identifier: 52JdBvzrAL+Cv3h/jUh1SQWWYKCUR72hiXa1BlbLWYY=
Subject key identifier: 35:4B:6D:AA:A5:CF:F2:91:08:98:ED:2B:66:E1:B3:B2:F1:8B:BB:94
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019914C38E5BD9B057DD528139D7124A6B32
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/NUttqqXP8pEImO0rZuGzsvGLu5Q.roa
Signing time: Thu 04 Sep 2025 12:46:24 +0000
ROA not before: Thu 04 Sep 2025 12:46:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61084
IP address blocks: 194.146.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:c3:8e:5b:d9:b0:57:dd:52:81:39:d7:12:4a:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 4 12:46:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=354b6daaa5cff2910898ed2b66e1b3b2f18bbb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:f2:ef:5e:f5:f6:d0:ed:34:0c:6f:fd:e8:
dc:ea:0a:a9:37:ef:7b:f7:9e:4a:e7:d3:17:5a:e4:
b7:e0:34:37:84:61:7a:ce:70:99:da:c2:a0:1a:75:
4c:36:a2:11:96:8c:46:76:db:ad:e9:29:37:3b:a5:
f8:d6:12:5b:2f:df:58:29:50:83:7d:15:62:94:d1:
5b:40:8b:60:39:81:a0:3f:7c:79:cf:53:85:50:bb:
2e:2b:a4:e6:b7:07:14:79:5a:7e:46:a6:f7:4f:9f:
64:cc:d5:5a:5b:16:98:e1:c8:dd:76:b4:80:43:da:
fc:48:c4:78:e7:91:74:b9:51:e9:1a:df:b3:e2:5b:
dd:2c:5e:18:c7:d2:d6:2f:9d:15:aa:89:19:8e:1d:
74:ed:f0:82:5e:ab:ac:eb:19:8c:16:45:c5:32:7f:
aa:38:fd:80:cc:d8:f1:9f:a3:92:db:c9:0f:41:d1:
b4:b2:81:8b:39:92:7c:c7:fe:03:e9:c2:46:d2:2c:
c4:2b:ea:81:89:ea:ef:6d:08:e7:1f:a3:ce:48:95:
b2:43:d7:60:64:a3:33:21:e7:dd:c5:db:57:0a:40:
56:c0:a2:95:4d:a4:c6:d5:73:38:43:ba:fd:2a:df:
53:b1:64:d1:c3:f6:98:6f:24:5e:a4:5d:98:bf:38:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:6D:AA:A5:CF:F2:91:08:98:ED:2B:66:E1:B3:B2:F1:8B:BB:94
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/NUttqqXP8pEImO0rZuGzsvGLu5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
43:00:80:12:86:df:89:dc:81:47:37:29:dc:60:22:a3:40:c5:
0c:73:76:c2:ab:3a:7d:15:9d:b2:f7:98:96:a1:02:9d:76:d9:
81:a2:2d:47:c2:a8:60:3d:30:2d:ed:81:96:54:89:9d:cc:db:
4c:5f:1f:5d:06:90:50:06:0a:5d:77:be:0d:b4:c7:8b:b2:39:
5d:f0:eb:dc:54:0f:85:8a:71:92:8e:d1:a8:6f:4d:65:f3:62:
c2:e1:ac:5b:91:e2:31:6a:83:bb:a8:b7:31:4b:21:9d:a0:c2:
7f:6c:13:28:97:e0:3f:09:d3:ba:8f:4a:60:b0:a9:72:be:cd:
7b:87:e3:f5:6d:c9:de:01:92:5c:65:e2:0d:49:ba:03:d4:c4:
d8:ee:9d:fb:6d:16:bf:b8:c3:41:61:cf:86:6b:48:f5:ad:78:
d9:ba:58:f0:c6:27:52:cf:0f:55:aa:c4:41:7d:ec:3b:08:02:
36:f5:46:c9:f2:f5:b1:7a:c3:2b:09:8d:41:5c:ce:fa:d9:fb:
f9:45:de:72:d2:7c:21:f8:bc:ec:6e:03:2f:36:35:cf:b6:91:
ef:15:a1:48:cc:60:bb:eb:6a:9f:86:33:7c:36:c5:78:92:c4:
74:b9:6d:32:4a:b1:26:30:52:25:08:7e:af:2b:a4:50:b3:33:
5a:59:69:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkUw45b2bBX3VKBOdcSSmsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwOTA0MTI0NjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTRiNmRhYWE1Y2ZmMjkxMDg5OGVkMmI2NmUxYjNiMmYxOGJiYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppvy71719tDtNAxv/ejc6gqpN+97
955K59MXWuS34DQ3hGF6znCZ2sKgGnVMNqIRloxGdtut6Sk3O6X41hJbL99YKVCD
fRVilNFbQItgOYGgP3x5z1OFULsuK6TmtwcUeVp+Rqb3T59kzNVaWxaY4cjddrSA
Q9r8SMR455F0uVHpGt+z4lvdLF4Yx9LWL50VqokZjh107fCCXqus6xmMFkXFMn+q
OP2AzNjxn6OS28kPQdG0soGLOZJ8x/4D6cJG0izEK+qBiervbQjnH6POSJWyQ9dg
ZKMzIefdxdtXCkBWwKKVTaTG1XM4Q7r9Kt9TsWTRw/aYbyRepF2YvziX3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVLbaqlz/KRCJjtK2bhs7Lxi7uUMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvTlV0dHFxWFA4cEVJbU8wclp1R3pzdkdMdTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpIaMA0G
CSqGSIb3DQEBCwUAA4IBAQBDAIASht+J3IFHNyncYCKjQMUMc3bCqzp9FZ2y95iW
oQKddtmBoi1HwqhgPTAt7YGWVImdzNtMXx9dBpBQBgpdd74NtMeLsjld8OvcVA+F
inGSjtGob01l82LC4axbkeIxaoO7qLcxSyGdoMJ/bBMol+A/CdO6j0pgsKlyvs17
h+P1bcneAZJcZeINSboD1MTY7p37bRa/uMNBYc+Ga0j1rXjZuljwxidSzw9VqsRB
few7CAI29UbJ8vWxesMrCY1BXM762fv5Rd5y0nwh+LzsbgMvNjXPtpHvFaFIzGC7
62qfhjN8NsV4ksR0uW0ySrEmMFIlCH6vK6RQszNaWWms
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:53:33 2025 by rpki-client