Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/NxsJzkhsWz_RyXSPZyBpukFfitM.roa
File: NxsJzkhsWz_RyXSPZyBpukFfitM.roa (raw, json)
Hash identifier: Rfv8fCcF2Us5IBM1aVUuN//vRZSaCBPlao/y/Bt5KrI=
Subject key identifier: 37:1B:09:CE:48:6C:5B:3F:D1:C9:74:8F:67:20:69:BA:41:5F:8A:D3
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE673B093097A4F95028997CE22FE
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/NxsJzkhsWz_RyXSPZyBpukFfitM.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136988
IP address blocks: 198.33.146.0/24 maxlen: 24
198.33.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e6:73:b0:93:09:7a:4f:95:02:89:97:ce:22:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=371b09ce486c5b3fd1c9748f672069ba415f8ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:c1:01:42:45:fb:8d:a1:c4:03:18:2e:67:
5f:ce:3b:f7:c2:82:9d:78:4e:74:30:95:8f:3a:d0:
ce:b3:c4:b8:c1:a3:6b:b2:d2:39:d9:43:b5:2c:7e:
7c:e3:b7:67:55:ad:13:ed:0f:e0:3f:ef:08:91:4a:
71:4e:c0:f8:34:3e:ba:59:69:75:76:81:a3:09:ce:
76:db:2a:d6:3a:80:6b:44:87:54:52:e2:83:27:54:
8f:60:1b:fe:ee:de:74:d6:58:75:d4:d6:7d:a9:23:
a7:b6:cc:46:3e:22:64:f7:72:3e:54:e2:7c:d2:5f:
9a:5e:f4:ec:ae:59:29:ec:d1:0e:d4:3c:ca:fd:fc:
d8:a7:68:d4:4a:a9:ba:31:34:3b:68:94:4f:e3:d8:
67:e7:4f:b7:ba:5c:c4:92:5f:e5:95:7c:1f:7d:cb:
10:eb:33:06:e5:08:69:a2:af:4d:50:6b:d1:bf:a5:
43:67:4f:d3:63:c9:01:85:1d:29:27:0f:cd:f2:ce:
64:47:ef:51:d3:75:71:cb:8e:1d:8b:2a:c3:37:99:
81:e3:89:03:4d:57:63:64:b0:9c:00:3d:4b:69:e0:
f3:d0:ac:ac:93:4f:70:3b:95:9a:65:7e:fd:95:1b:
82:d1:40:f7:83:4a:4a:18:9b:98:02:cf:91:7a:15:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1B:09:CE:48:6C:5B:3F:D1:C9:74:8F:67:20:69:BA:41:5F:8A:D3
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/NxsJzkhsWz_RyXSPZyBpukFfitM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.33.146.0/24
198.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f6:bd:bd:65:20:45:61:60:06:9f:3b:5f:c1:97:53:ce:98:
5f:f2:16:77:5c:b2:2a:ac:c2:4d:ac:09:d4:d6:e2:cd:3e:48:
6d:07:45:42:38:76:51:a7:b2:e0:f4:7b:b8:e1:3e:60:d9:a2:
46:cd:22:1f:55:30:2b:37:80:7f:f9:ec:6e:40:c6:61:16:92:
9e:50:fc:98:67:d4:3e:a8:70:7a:7d:bf:9a:4e:8f:07:5e:76:
15:d3:c5:ca:9f:d4:f4:1b:0e:1f:3e:e3:14:c2:a1:eb:b2:31:
de:be:88:6e:03:13:b7:6b:7b:c4:b6:60:a5:10:89:60:d6:d5:
9f:25:88:5b:cd:96:84:fe:7a:70:49:0a:f0:97:da:94:ed:0b:
f0:5f:cf:b5:48:39:cf:c1:e0:83:9c:ee:0c:33:18:c3:eb:b7:
67:5c:8c:1b:58:2e:e8:e3:6e:a1:5f:c8:37:a0:87:6a:e5:fb:
84:d4:99:ee:ee:cf:ae:68:86:42:a1:41:e7:23:97:35:1c:e6:
80:8f:8d:d5:0a:28:53:cf:00:6a:1c:c8:85:a0:5b:91:b1:71:
00:98:09:22:70:9c:cb:27:c9:8b:2e:88:df:53:d6:d3:58:34:
8c:41:53:fc:ad:0e:62:1d:fd:6c:17:e9:f5:b6:97:a9:4c:aa:
92:16:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:19 2026 by rpki-client