Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/nF0enHZgLVZjaWa5Zj_RxQHqgcc.roa
File: nF0enHZgLVZjaWa5Zj_RxQHqgcc.roa (raw, json)
Hash identifier: bZ8n5I2vQSOPQegllbH0nrlHZ8rv0jZPkL+haBHXJe0=
Subject key identifier: 9C:5D:1E:9C:76:60:2D:56:63:69:66:B9:66:3F:D1:C5:01:EA:81:C7
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019C09EB25D4C4133C0CCFAC796B407EF663
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/nF0enHZgLVZjaWa5Zj_RxQHqgcc.roa
Signing time: Thu 29 Jan 2026 13:22:11 +0000
ROA not before: Thu 29 Jan 2026 13:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 188.246.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:eb:25:d4:c4:13:3c:0c:cf:ac:79:6b:40:7e:f6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jan 29 13:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c5d1e9c76602d56636966b9663fd1c501ea81c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:68:1e:8f:a7:54:3c:af:39:1d:95:a6:1a:
88:9e:51:b5:8c:af:37:e5:bf:02:4f:95:fd:99:54:
07:91:17:c3:82:29:0b:07:4e:ad:a2:79:06:88:cc:
fc:d1:d9:46:18:4d:32:b9:92:62:16:a8:94:b6:94:
f0:eb:ef:ce:36:75:13:5f:93:31:50:40:6f:5a:3f:
10:da:cb:dd:36:9f:bb:a2:10:70:d3:06:fd:a7:70:
bd:17:af:a9:2a:23:07:94:92:b4:a4:54:00:c1:d4:
cf:2b:f3:8c:c0:47:03:6e:72:ac:ea:55:d8:9d:b1:
93:a3:0f:d6:50:30:c4:88:38:0b:37:29:c4:ab:b2:
40:81:0b:ba:b3:a7:bb:e7:d5:19:37:eb:c5:0e:86:
7f:53:63:3e:22:4a:6e:25:f0:cc:12:38:44:8d:31:
8a:3a:aa:d1:1f:14:0a:9c:ce:8d:72:14:79:25:82:
89:70:9f:ed:4b:af:48:29:c6:1f:af:75:58:4a:8f:
0b:ea:f0:a3:cc:2e:c9:8c:76:ef:6d:c6:9b:3b:45:
ed:0c:ff:7d:cf:51:d6:6d:26:25:ed:ea:7e:58:b7:
74:12:79:d0:74:eb:0e:c6:5f:b5:7e:03:f3:1a:49:
82:79:ce:7a:16:1f:c4:2c:39:61:50:f4:ba:f8:f1:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:1E:9C:76:60:2D:56:63:69:66:B9:66:3F:D1:C5:01:EA:81:C7
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/nF0enHZgLVZjaWa5Zj_RxQHqgcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:6a:f4:f1:cf:8d:b3:ca:8e:0f:64:4a:56:72:76:f5:43:5f:
85:d0:4a:f6:da:8d:04:bf:3c:bd:7f:cd:bb:44:fd:75:41:3a:
7b:f8:18:31:3f:ba:ef:b0:df:26:f7:6f:f6:fc:84:55:51:96:
c2:a5:27:f7:ba:6e:a5:a0:f9:de:5f:18:56:b9:dd:77:77:c6:
57:d2:af:b7:0c:1c:af:6c:b1:35:d3:ae:e7:67:b0:91:44:ae:
77:f8:02:ac:36:34:b7:1e:0e:44:82:fa:52:84:60:90:d5:18:
e6:0e:d4:9e:c3:40:84:e4:f9:79:b3:ab:6d:bb:d5:10:cb:6f:
8b:d8:90:ff:47:44:98:69:f1:b3:34:39:02:91:a9:ef:ba:96:
ce:b8:8e:1f:ae:eb:33:89:b9:a9:16:56:7e:33:40:c0:42:7b:
0a:ac:73:2b:0b:a5:f3:42:a6:b2:d7:a8:3d:f1:f2:99:ed:bc:
94:70:6b:25:e5:e0:91:47:56:35:30:a6:28:49:25:8d:2d:ec:
9f:78:cc:62:12:51:13:b5:cc:2e:9d:f3:8d:7c:43:16:4c:f7:
8f:34:30:3d:2d:fe:f0:32:5e:93:c5:b3:39:02:eb:2b:af:69:
d0:7d:f1:2a:a2:20:c5:a0:0c:6c:00:0d:75:ad:f0:21:0a:04:
c8:4f:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:10:45 2026 by rpki-client