Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NC0kd2sqD0OMbmJxZapD9EbhDwk.roa
File: NC0kd2sqD0OMbmJxZapD9EbhDwk.roa (raw, json)
Hash identifier: Z89g2NM0db5AtjTZcVVecxjvx9+bbCNKQ9lO21g6Rd4=
Subject key identifier: 34:2D:24:77:6B:2A:0F:43:8C:6E:62:71:65:AA:43:F4:46:E1:0F:09
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A14231C1C671CBF0B631A445FBDCE80638
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NC0kd2sqD0OMbmJxZapD9EbhDwk.roa
Signing time: Fri 16 Oct 2026 00:51:59 +0000
ROA not before: Fri 16 Oct 2026 00:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198364
IP address blocks: 200.102.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:31:c1:c6:71:cb:f0:b6:31:a4:45:fb:dc:e8:06:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 16 00:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342d24776b2a0f438c6e627165aa43f446e10f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:99:63:cc:d0:e9:d4:50:2d:b5:b0:06:85:
0d:03:09:1c:af:97:3d:78:84:db:9e:f0:d4:64:e1:
22:04:b9:f6:d9:9d:3b:46:bc:1b:ef:a5:a2:35:d9:
70:47:8e:2b:12:9e:9a:4b:c1:f5:99:fa:ff:b3:1d:
06:f5:70:c4:47:10:b2:36:4e:58:db:0e:d5:1f:cc:
cd:77:f0:d4:64:fe:cb:87:a8:ec:de:dd:1d:82:3e:
85:b7:a7:c3:b7:33:45:79:50:fc:c0:d6:79:31:5f:
58:f6:a5:30:5a:ef:18:1b:8c:31:3a:91:4f:31:51:
90:aa:35:29:f0:c7:44:00:72:a5:84:fa:6c:2c:da:
1a:d3:6f:35:d9:0a:33:db:9f:d8:6b:9d:b2:05:e7:
64:25:e6:f4:36:0f:aa:3c:8e:03:e6:f5:9f:67:0e:
68:c0:3b:5a:9c:03:d4:b1:b4:c0:8e:21:5e:83:72:
6b:0f:fc:85:76:91:7d:86:38:86:9d:d5:52:c0:7e:
23:13:f8:27:e5:b8:7e:ac:9d:f0:39:63:ee:48:00:
58:50:83:07:39:0d:03:f4:52:dc:2a:75:7b:ba:cc:
2e:f4:6c:6a:48:89:89:3e:b1:c6:92:c4:26:df:06:
0a:02:90:24:b3:bd:c7:fc:6b:25:68:27:f2:fc:da:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:24:77:6B:2A:0F:43:8C:6E:62:71:65:AA:43:F4:46:E1:0F:09
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NC0kd2sqD0OMbmJxZapD9EbhDwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.92.0/24
Signature Algorithm: sha256WithRSAEncryption
de:8c:b4:30:99:50:a2:36:6b:d5:ef:63:f1:f2:77:c6:f1:e9:
05:cc:c5:6b:23:27:51:27:be:68:14:78:a7:86:75:28:46:32:
01:d1:f9:b7:2e:fb:78:c9:4e:ea:b0:41:aa:c2:51:2b:23:cf:
9f:6f:9c:c4:fe:e4:48:fa:12:c6:8c:54:bc:b1:03:87:a2:d8:
cb:90:87:72:e7:ad:c2:ae:27:65:26:99:0b:3a:44:a4:e3:ba:
ee:c6:32:62:cd:e6:e8:db:e5:2c:d8:4b:3c:57:f4:92:b7:ac:
79:fd:cf:1c:16:0d:45:6e:e1:70:93:04:4f:09:24:5d:30:d3:
cd:8a:de:6b:f3:aa:54:78:29:52:ff:0c:4b:1e:d2:2c:35:b9:
86:ee:34:b0:b2:0c:77:a9:e4:e8:05:ba:ae:c1:97:d1:03:ff:
1a:d8:18:eb:7c:88:49:42:cb:de:d4:25:fe:e5:25:9b:a0:2a:
d8:61:57:7a:c5:f8:50:33:2a:86:64:e8:3a:57:89:7d:35:fa:
dd:09:46:fc:d7:38:35:18:ca:32:a1:bb:b2:c8:67:aa:8a:5e:
04:1f:e5:2e:62:f3:ce:2b:14:7c:91:35:ab:21:eb:dd:df:d1:
f5:5b:29:bf:b2:3b:1c:13:5c:a1:66:24:4f:ed:91:a6:c2:e5:
60:61:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:36 2026 by rpki-client