Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa
File: NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa (raw, json)
Hash identifier: fQmf+0QjeWGgS66kmRBZPjLky3GL2ce/S+K3VIzYjtw=
Subject key identifier: 36:87:82:5D:C5:95:DD:48:16:1C:F3:FF:2A:39:13:73:32:8A:FD:77
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019FE24AA78E2756BA9A89ACC9FBA94AAF69
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa
Signing time: Sat 08 Aug 2026 16:52:51 +0000
ROA not before: Sat 08 Aug 2026 16:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212623
IP address blocks: 185.216.51.0/24 maxlen: 24
2a0f:ca00:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:4a:a7:8e:27:56:ba:9a:89:ac:c9:fb:a9:4a:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Aug 8 16:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3687825dc595dd48161cf3ff2a391373328afd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:d3:87:04:33:9a:35:06:e8:b0:ab:18:a6:
3b:0a:c5:ea:dd:cc:1a:1a:a6:24:80:19:67:aa:17:
42:bd:49:9d:8a:b5:27:09:54:c0:03:97:dd:c0:4a:
73:0b:66:bb:24:15:23:b4:6e:d6:ac:2b:5b:2d:7b:
9d:74:63:de:e1:65:03:ff:97:50:ab:41:69:c9:ec:
8f:e5:c1:e0:f2:02:c1:93:41:cb:a3:dd:3a:71:26:
c3:4f:2d:dc:e6:54:a9:ce:c2:58:88:6f:29:60:f1:
03:9b:8f:c6:bc:5a:90:18:95:46:7a:ab:c9:5c:a0:
a8:5f:ba:07:8d:a9:e2:60:0d:1e:ed:bf:a5:d3:1c:
33:d0:15:0c:05:99:22:6d:ad:c2:8d:ee:e6:d3:7d:
d7:4b:18:06:01:09:e4:dc:cd:8b:7f:17:5d:ee:03:
d8:2f:f6:fe:e2:8c:42:3c:61:91:0e:26:be:e2:9a:
5f:6d:68:8a:f4:5a:1f:0e:3e:2b:2a:ad:05:b6:b6:
32:52:8a:58:09:c0:8f:4f:05:e0:7f:1e:b6:d8:03:
0f:17:87:ec:06:d0:5f:24:78:45:53:49:eb:63:a8:
dc:49:f6:c7:dd:ee:fc:f7:7c:9c:f0:58:9d:70:dd:
d0:81:49:92:da:40:ee:ff:52:81:8b:c7:a8:92:74:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:82:5D:C5:95:DD:48:16:1C:F3:FF:2A:39:13:73:32:8A:FD:77
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.51.0/24
IPv6:
2a0f:ca00:8000::/48
Signature Algorithm: sha256WithRSAEncryption
2c:f5:06:98:c0:d1:b9:56:da:69:ac:75:ab:69:bf:63:c4:9b:
d8:e6:5d:f1:90:ee:5c:30:91:10:fc:b2:ea:98:87:cb:4f:9b:
71:13:66:11:b8:50:85:ff:2c:68:42:23:6a:86:d1:16:d9:1a:
39:e1:30:8d:0c:cd:43:a3:2f:b3:26:90:1b:56:47:15:cc:b4:
da:71:4d:c1:ac:76:86:65:00:5e:0a:e3:5e:d3:98:e2:f3:e6:
dc:37:96:d3:48:54:d1:3a:0e:c0:74:48:b4:7d:fd:4b:e4:53:
be:c9:e4:89:1c:0e:9c:ce:6b:b5:97:84:33:d8:4d:88:55:b5:
0e:6b:93:e2:a3:b8:b5:f0:0a:14:e5:17:22:26:cc:51:23:96:
d5:e3:83:7a:f3:18:93:2b:b0:1b:25:3d:87:df:02:14:aa:c2:
09:a2:31:26:88:6d:24:ab:4e:37:76:e2:4e:c1:b7:18:0e:4e:
22:09:48:ba:fc:a7:d6:7f:9e:f6:fa:3b:2b:62:a4:ad:55:a6:
12:0c:7f:ac:de:ec:f4:d5:e9:5c:7b:7c:dc:be:ab:a7:e6:f4:
0d:ca:04:48:ff:e8:8b:7a:0d:a0:6e:c2:5a:72:af:95:73:9b:
f9:26:9b:3f:9c:6d:e4:5c:8b:68:81:fe:68:90:9f:f1:89:e6:
e3:ac:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:25 2026 by rpki-client