Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ncIYfW0_fjNOjd3teL0VQ1rNAF0.roa
File: ncIYfW0_fjNOjd3teL0VQ1rNAF0.roa (raw, json)
Hash identifier: rNY3+DQBLORssQ1Rc/0gHqiQZaDCyuW2nSZrKuODFZc=
Subject key identifier: 9D:C2:18:7D:6D:3F:7E:33:4E:8D:DD:ED:78:BD:15:43:5A:CD:00:5D
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A05CA7BF4149D8CD97C677D42376461599
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ncIYfW0_fjNOjd3teL0VQ1rNAF0.roa
Signing time: Tue 01 Sep 2026 11:08:12 +0000
ROA not before: Tue 01 Sep 2026 11:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.95.227.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:a7:bf:41:49:d8:cd:97:c6:77:d4:23:76:46:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 1 11:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dc2187d6d3f7e334e8ddded78bd15435acd005d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:f1:91:07:f2:83:5e:e5:de:35:47:77:97:
b0:3c:be:ed:cd:5c:5b:b1:48:de:fb:91:6c:ba:f5:
7e:c3:6a:b3:d1:a3:d5:1d:37:08:cf:e8:c4:fe:b0:
ba:9f:16:4d:d6:50:06:8e:18:c5:81:20:56:c5:a8:
70:fb:15:c4:c4:18:6f:21:9e:b9:36:c9:b5:cf:5b:
1c:97:af:0c:52:fd:a3:6a:e8:c8:e4:11:ef:79:b7:
b7:91:6a:dc:56:bd:c2:cf:16:5b:54:2f:6a:b7:8a:
c3:3d:bf:0f:23:73:72:1a:ca:f2:0c:8c:d8:d8:7e:
ef:a8:d9:64:e8:6c:3a:cd:a5:3c:c8:8d:02:ca:bd:
dc:bc:45:83:5f:ad:47:5c:f2:7a:31:08:15:e9:c7:
22:2b:4a:63:82:81:86:6d:6a:db:c0:00:ce:67:88:
56:15:8b:90:71:dd:67:ef:eb:c5:08:ea:e6:01:57:
d2:82:8e:9c:17:28:90:bf:4e:a1:48:40:94:89:ac:
ef:6e:94:32:43:aa:8f:fc:ef:0e:67:95:a9:3c:bf:
b8:d4:b6:de:d1:ec:0f:75:01:e8:67:7d:60:fd:f2:
7c:d3:95:d0:ce:4e:c7:2e:71:e0:e0:c7:88:88:b1:
4b:82:94:b1:6e:db:3f:83:be:83:c5:15:2d:e7:52:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:18:7D:6D:3F:7E:33:4E:8D:DD:ED:78:BD:15:43:5A:CD:00:5D
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ncIYfW0_fjNOjd3teL0VQ1rNAF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.227.0/24
45.149.5.0/24
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
90:81:3e:7b:c5:ca:d8:ba:1c:0c:34:5d:e8:40:ca:4c:ba:5f:
12:6f:50:81:6a:c4:8c:76:5e:ce:55:63:27:30:78:29:54:12:
0c:07:2c:a5:55:02:0a:18:89:5d:ad:ed:4c:7f:41:07:2e:24:
23:d8:73:e5:c4:0e:b2:ed:8f:a6:eb:63:1f:5c:d1:19:83:9a:
b6:a4:de:23:97:25:c9:89:ab:e8:33:88:0a:ed:31:46:33:be:
cd:4a:14:6f:a3:da:83:7c:c1:73:ee:9e:b4:3b:e3:95:fd:68:
d6:50:89:95:47:69:fd:ee:75:12:e2:d0:3c:95:a0:63:dc:fd:
a6:ff:5e:a9:65:0c:a1:d7:97:ac:68:ae:7d:d1:d2:5d:b5:c0:
71:f9:c6:a3:a4:11:26:90:f7:95:41:a2:1a:24:42:5c:2c:eb:
d4:40:70:7c:1e:72:6b:ec:42:8b:82:73:c3:31:57:72:6c:cc:
5a:75:f4:39:fb:78:04:40:47:db:3d:17:d8:c6:1b:07:55:53:
3c:ca:c6:b5:55:33:c5:f9:ea:a4:64:dc:8e:18:b3:40:a8:06:
3b:5d:bf:11:f6:a8:56:39:9f:f5:c9:9f:f6:dd:6a:94:62:80:
56:f2:a7:2a:93:c9:c7:82:80:a6:a2:b1:34:d4:3b:53:f0:a4:
32:c2:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:04:53 2026 by rpki-client