Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/nCADtZCNJkYUNVOa9U_NAk0KS5k.roa
File: nCADtZCNJkYUNVOa9U_NAk0KS5k.roa (raw, json)
Hash identifier: Wf20IjUpqKSqLN3uHCmAWFDI3uxI4awBhCKDzl6rwTk=
Subject key identifier: 9C:20:03:B5:90:8D:26:46:14:35:53:9A:F5:4F:CD:02:4D:0A:4B:99
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01A06AAEDF8151634A8DF529D7547C3939CF
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/nCADtZCNJkYUNVOa9U_NAk0KS5k.roa
Signing time: Fri 04 Sep 2026 04:30:40 +0000
ROA not before: Fri 04 Sep 2026 04:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 45.85.12.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:ae:df:81:51:63:4a:8d:f5:29:d7:54:7c:39:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Sep 4 04:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c2003b5908d26461435539af54fcd024d0a4b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:9f:4b:c0:46:61:c0:aa:c4:41:e4:a8:f2:
50:ae:7a:6b:c9:40:d6:25:0d:16:b1:3e:c1:68:54:
72:be:bf:5b:ca:83:9a:86:a6:1c:85:b4:b5:8f:fb:
a6:cd:06:08:bc:8a:c8:76:92:ea:d6:29:54:95:d3:
eb:38:7b:b0:68:41:32:df:3d:bf:96:cf:20:85:44:
d1:e2:35:c4:45:7e:f0:4f:ce:29:68:30:c0:6a:07:
82:1e:8f:67:5c:ec:f8:f5:72:d5:9b:8c:cb:c5:a7:
ee:ca:a1:06:76:70:15:d3:62:24:49:30:09:41:d7:
2e:97:49:f8:b1:b2:55:6b:ae:48:18:b7:2b:1e:69:
6a:ed:ae:90:32:a3:bb:7e:5a:26:83:95:b2:8d:9d:
ab:80:bf:35:91:96:de:e9:36:3a:c8:f5:9a:81:c7:
02:e2:1c:bf:49:c5:37:bc:1c:f4:c6:84:ff:13:36:
e6:2a:2d:6f:ad:3c:ec:45:7f:4c:6a:5b:f5:d2:72:
e5:ca:55:ee:99:f2:56:91:f3:54:a1:f2:9e:82:61:
e3:0c:38:43:fd:36:c5:bb:0e:c2:1f:49:2e:79:96:
24:44:38:da:d9:f9:e0:56:76:7b:cd:24:31:f1:98:
cb:da:0a:d7:e1:18:00:4c:3b:60:db:cc:33:8a:b7:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:03:B5:90:8D:26:46:14:35:53:9A:F5:4F:CD:02:4D:0A:4B:99
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/nCADtZCNJkYUNVOa9U_NAk0KS5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4a:1b:08:0c:e0:67:1a:6a:36:e5:0c:b0:a4:f1:d4:6f:0c:
52:26:9c:1b:18:88:c9:72:f1:9a:3c:65:a5:b2:31:59:8f:8b:
b4:34:97:b0:6b:dc:d6:a9:82:a9:bf:7c:8e:2a:26:e8:81:ea:
44:81:cc:6e:ee:bb:1c:de:ba:4e:8b:54:c8:87:20:ba:02:31:
0f:50:2a:49:5a:85:63:a0:5d:17:10:83:e2:46:2b:13:8e:42:
8f:af:fd:d2:07:bb:b8:94:41:70:43:96:06:8f:52:fd:cf:21:
c5:c1:20:8d:4e:98:2f:77:b7:6c:c8:25:60:e8:9d:e6:4e:f0:
e3:68:0c:58:81:a1:ec:ec:74:d4:48:1a:de:d6:66:cb:80:60:
da:71:f4:7a:51:67:d2:74:ce:ba:8f:b1:3d:b3:a6:14:96:8c:
a7:37:58:8a:f7:3b:fc:bb:02:a1:46:d3:8b:60:f5:01:4e:5b:
55:10:6f:6a:63:aa:2d:2f:f2:f2:9e:10:66:56:3c:87:0e:6c:
06:8d:dd:92:49:b3:9e:fe:60:2e:a6:73:04:86:9b:8c:ff:cd:
50:08:81:ce:ee:a0:0a:fc:96:ca:60:f4:b7:9f:3d:ce:41:91:
63:b1:66:c2:7d:72:1b:4f:d8:4f:3b:a4:6e:0f:3e:4d:de:87:
ac:92:52:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 09:17:19 2026 by rpki-client