Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/NMfbsowFqcogPMg6cAeG3w9cjq0.roa
File: NMfbsowFqcogPMg6cAeG3w9cjq0.roa (raw, json)
Hash identifier: uFoj7c/4SsWRnxgjbLgJrGS7fytT/Dv79U+edW6MDx8=
Subject key identifier: 34:C7:DB:B2:8C:05:A9:CA:20:3C:C8:3A:70:07:86:DF:0F:5C:8E:AD
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019C7B005C722697D12206A9BB0820E75071
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/NMfbsowFqcogPMg6cAeG3w9cjq0.roa
Signing time: Fri 20 Feb 2026 12:22:26 +0000
ROA not before: Fri 20 Feb 2026 12:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 45.10.148.0/24 maxlen: 24
185.174.22.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:00:5c:72:26:97:d1:22:06:a9:bb:08:20:e7:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Feb 20 12:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34c7dbb28c05a9ca203cc83a700786df0f5c8ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:27:28:dd:87:fc:ad:a0:8e:79:d2:2d:9f:
74:3d:c9:f3:b7:ad:0b:43:bf:cc:10:6b:fe:5e:9e:
32:d1:93:fb:f6:d0:97:b6:86:cb:bc:fd:43:25:d9:
a8:8e:ad:99:34:69:4f:ac:29:b5:5b:e2:33:33:d5:
6f:c6:19:7e:ff:47:e4:83:ac:86:70:a9:c8:87:e7:
d7:85:0a:b3:f9:10:25:7f:61:1c:fb:ad:9a:47:14:
d4:a0:0e:a3:d0:b8:1c:a0:5a:95:96:c9:0c:01:61:
ee:bf:74:9f:d5:2b:9a:5a:fe:91:fa:95:79:94:41:
54:c2:7c:16:a1:6d:ff:20:ce:74:db:69:b0:de:81:
8b:43:be:d3:1c:e2:e7:2f:e6:e8:5d:88:9d:6b:53:
c1:8d:a3:77:2e:03:f9:a7:7e:bd:9a:28:15:8c:24:
b6:ab:e0:ce:dd:e5:cf:bc:87:20:53:3b:de:1e:7e:
1f:62:4a:04:c6:46:ca:0d:ee:7e:a8:f1:b8:ec:8c:
a0:8f:fe:6f:fc:02:68:5d:95:dd:00:9b:70:85:8c:
d4:b0:d0:77:8d:37:91:0e:a8:23:82:cc:01:c4:9d:
9d:98:c7:9d:1c:61:ea:bb:3e:14:ff:86:2a:d2:a9:
b7:e3:bb:aa:ee:8d:4d:05:f1:e9:a9:e5:8a:17:11:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C7:DB:B2:8C:05:A9:CA:20:3C:C8:3A:70:07:86:DF:0F:5C:8E:AD
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/NMfbsowFqcogPMg6cAeG3w9cjq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.148.0/24
185.174.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:66:97:14:83:86:0b:32:09:30:af:a3:87:0f:58:0b:9d:23:
71:d5:73:3f:68:2c:8f:5a:8b:18:33:26:e9:9b:6c:9b:3f:f4:
9c:73:ea:23:ba:ec:96:15:b0:ae:8e:20:7f:c5:a8:a6:da:a3:
46:c9:15:93:6f:2d:3b:e0:64:8f:7f:81:fb:40:f4:b5:03:b8:
2f:4e:51:14:02:06:8c:5c:01:58:cd:19:70:47:90:de:06:88:
2f:91:90:4d:46:50:25:cc:2c:97:40:ca:1b:61:e3:ad:0a:59:
0d:ac:5e:e9:b9:cc:e6:f0:0c:c7:52:f7:7e:61:53:99:30:4f:
8d:3f:6c:ba:16:ae:73:aa:72:3e:30:0d:74:b2:83:81:9c:81:
f8:f7:8e:2c:0d:96:85:60:14:38:43:0d:50:63:56:d2:80:ae:
5e:9a:f0:dd:31:53:61:4c:6d:a9:bc:c4:db:a8:04:dc:a5:37:
b9:53:fe:82:44:61:47:f6:ca:2e:84:a0:ec:c0:81:2c:36:d5:
b1:c9:ad:3d:84:a6:3b:82:8b:ec:79:14:91:16:78:f0:6e:16:
4a:bc:b1:76:a8:d5:9a:37:94:b6:65:a8:05:06:ea:97:f4:42:
a3:1a:f9:b9:a1:d0:37:be:49:32:c0:d6:f4:24:ab:1d:30:72:
a4:39:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:05 2026 by rpki-client