Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa
File: cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa (raw, json)
Hash identifier: xhs6LS1Q1Mh7UyOa5htlvASV20ak+TW1Eqf9IPtVEL0=
Subject key identifier: 70:DC:7B:8D:B4:CF:27:40:51:25:B4:06:CA:9F:3B:1A:41:27:F4:CA
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 01A00A5A08843A605F9CDF06C11817DA0048
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa
Signing time: Sun 16 Aug 2026 11:34:27 +0000
ROA not before: Sun 16 Aug 2026 11:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:5a:08:84:3a:60:5f:9c:df:06:c1:18:17:da:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Aug 16 11:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70dc7b8db4cf27405125b406ca9f3b1a4127f4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:de:41:50:13:3f:5c:e4:0d:a1:42:50:bd:
3a:8b:40:af:12:da:5b:8a:15:73:73:39:a2:f0:34:
d0:c5:06:1d:4d:48:15:a6:7a:f5:cb:7d:e5:6e:50:
3f:fe:3e:b0:16:bd:81:0e:20:bf:08:66:3c:3a:97:
97:db:a0:d0:6b:b3:1d:ec:fd:71:99:c9:49:7b:01:
e0:54:fe:3f:a6:ff:de:b0:b8:84:77:e4:cd:31:a6:
c2:66:f6:d7:fc:e0:2d:59:82:28:78:2a:f7:6a:00:
25:88:f3:1c:45:de:fb:95:06:b4:19:11:6a:3f:ea:
fd:cc:51:23:cf:5a:94:eb:60:1b:e9:52:70:22:54:
e7:ea:48:16:1b:9a:e3:59:1e:db:cd:77:1c:14:27:
d0:2c:7c:55:ce:fe:bb:7a:c3:e9:aa:b1:d6:fd:20:
97:c8:26:d9:d2:22:0a:40:c5:ca:30:fc:13:12:0b:
f2:0d:ff:bf:d8:b3:27:ae:b5:6e:c2:00:44:81:c3:
72:5e:27:c8:99:44:f2:67:80:36:ac:c8:17:28:51:
82:5d:56:ad:1d:f0:82:9d:28:d8:b5:0f:19:57:0e:
b6:c4:88:e7:6a:93:fe:73:02:1e:44:94:21:9c:e5:
93:5d:d6:e5:68:7e:75:85:41:3d:46:fa:5c:e2:55:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DC:7B:8D:B4:CF:27:40:51:25:B4:06:CA:9F:3B:1A:41:27:F4:CA
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:92:21:92:dd:49:59:3e:91:c0:8f:8f:ce:f4:a9:71:90:
37:0e:de:87:73:7a:16:b9:29:cd:42:09:ab:82:8a:63:cf:d5:
58:36:99:39:9e:ca:79:2d:bf:bc:5d:41:95:c7:a9:e9:8f:0b:
b9:27:58:71:94:1c:29:fd:0e:b8:b6:0f:6d:44:02:e5:63:6d:
ef:3a:e5:25:8c:62:2e:af:67:49:8c:1e:1a:5d:4b:49:19:d1:
c5:ab:c4:aa:70:91:32:85:ed:c2:56:4e:af:0f:e5:45:19:00:
99:88:e6:f8:4c:aa:b3:a9:fc:69:0b:c0:82:e1:8c:49:30:24:
67:32:e6:c0:f3:06:c8:b6:e9:a5:a0:ca:7b:85:9e:ed:77:b0:
13:47:26:7f:fa:c9:5e:90:51:a0:d7:32:0e:c5:3a:51:aa:90:
bc:95:56:14:e3:dd:96:32:ad:cc:1d:58:67:a7:a2:a1:28:01:
2d:2b:b4:09:04:09:5d:f7:3d:31:f7:be:b1:d5:40:5d:84:9f:
02:54:c3:ac:cc:29:ba:5c:09:ff:5a:36:aa:6c:40:fd:c6:22:
55:55:79:aa:35:e6:16:31:36:8a:e7:1a:a1:f8:22:01:31:03:
5c:59:55:af:4d:0e:dd:de:67:b7:e2:b6:9f:e0:df:4f:fa:8a:
4f:ce:f0:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAKWgiEOmBfnN8GwRgX2gBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGRlMzZjZTY1NDM3MjFmMjdhNjg5M2EzYjNhYjdmZmY5
ZTEyMjEwHhcNMjYwODE2MTEzNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGRjN2I4ZGI0Y2YyNzQwNTEyNWI0MDZjYTlmM2IxYTQxMjdmNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmLeQVATP1zkDaFCUL06i0CvEtpb
ihVzczmi8DTQxQYdTUgVpnr1y33lblA//j6wFr2BDiC/CGY8OpeX26DQa7Md7P1x
mclJewHgVP4/pv/esLiEd+TNMabCZvbX/OAtWYIoeCr3agAliPMcRd77lQa0GRFq
P+r9zFEjz1qU62Ab6VJwIlTn6kgWG5rjWR7bzXccFCfQLHxVzv67esPpqrHW/SCX
yCbZ0iIKQMXKMPwTEgvyDf+/2LMnrrVuwgBEgcNyXifImUTyZ4A2rMgXKFGCXVat
HfCCnSjYtQ8ZVw62xIjnapP+cwIeRJQhnOWTXdblaH51hUE9Rvpc4lWEPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHDce420zydAUSW0BsqfOxpBJ/TKMB8GA1UdIwQY
MBaAFPRN42zmVDch8npok6Ozq3//nhIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvY054N2piVFBKMEJSSmJRR3lwODdHa0VuOU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQGMA0G
CSqGSIb3DQEBCwUAA4IBAQBYX5Ihkt1JWT6RwI+PzvSpcZA3Dt6Hc3oWuSnNQgmr
gopjz9VYNpk5nsp5Lb+8XUGVx6npjwu5J1hxlBwp/Q64tg9tRALlY23vOuUljGIu
r2dJjB4aXUtJGdHFq8SqcJEyhe3CVk6vD+VFGQCZiOb4TKqzqfxpC8CC4YxJMCRn
MubA8wbItumloMp7hZ7td7ATRyZ/+slekFGg1zIOxTpRqpC8lVYU492WMq3MHVhn
p6KhKAEtK7QJBAld9z0x976x1UBdhJ8CVMOszCm6XAn/WjaqbED9xiJVVXmqNeYW
MTaK5xqh+CIBMQNcWVWvTQ7d3me34raf4N9P+opPzvD8
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:33 2026 by rpki-client