Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nFPpXsxn_UDGo7vb2qFLbGJuGx8.roa
File: nFPpXsxn_UDGo7vb2qFLbGJuGx8.roa (raw, json)
Hash identifier: V8Jx/4gw7yjnKNpAEJyiXdqYX+DA47ro/IV1ZE83enY=
Subject key identifier: 9C:53:E9:5E:CC:67:FD:40:C6:A3:BB:DB:DA:A1:4B:6C:62:6E:1B:1F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D8B7DF6011D1D56F99F079BECBFC3A63E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nFPpXsxn_UDGo7vb2qFLbGJuGx8.roa
Signing time: Tue 14 Apr 2026 10:16:21 +0000
ROA not before: Tue 14 Apr 2026 10:16:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402405
IP address blocks: 94.249.204.0/24 maxlen: 24
2a02:2fc0:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:7d:f6:01:1d:1d:56:f9:9f:07:9b:ec:bf:c3:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 10:16:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c53e95ecc67fd40c6a3bbdbdaa14b6c626e1b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:2c:32:f0:a4:f6:e0:35:0b:74:55:0e:77:
d6:b7:6b:d5:c0:b5:ba:d7:be:91:09:04:fc:6a:01:
3d:52:1f:61:c8:7d:44:66:84:ed:cf:54:db:d3:f5:
16:fc:0d:e8:bb:96:71:07:3a:fc:b7:54:c0:94:26:
7c:40:3f:2a:c8:36:74:26:22:a4:aa:3c:83:a4:a1:
b2:cd:4d:43:e2:eb:e3:d1:94:51:8b:12:74:05:2e:
69:b0:f8:46:4a:4d:44:58:88:1b:c7:7e:c4:85:42:
18:ce:b5:16:fc:a3:0c:6e:c4:f7:9e:ac:da:92:52:
33:c4:b5:1c:c9:e7:72:68:a1:a2:7d:19:2b:e7:7a:
cd:2c:dd:b0:21:8d:2f:c9:a6:14:7d:4f:44:0d:e6:
f3:81:aa:37:35:6c:ab:62:1e:ad:13:b5:d9:97:fa:
c3:d1:77:a5:23:1d:1a:90:64:f4:b4:8b:64:c8:52:
e2:8f:ca:a0:fd:92:84:47:87:17:1a:9c:71:cd:99:
1f:a0:51:4f:d5:bb:6d:07:36:af:1b:fa:85:35:a4:
1c:f9:b6:4c:77:99:e9:73:43:9e:98:09:3d:e4:26:
8e:36:48:46:20:97:06:f1:62:96:cc:d8:af:32:9b:
45:11:f3:74:f1:01:08:2c:64:cb:01:97:e6:0b:af:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:E9:5E:CC:67:FD:40:C6:A3:BB:DB:DA:A1:4B:6C:62:6E:1B:1F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nFPpXsxn_UDGo7vb2qFLbGJuGx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.204.0/24
IPv6:
2a02:2fc0:1b::/48
Signature Algorithm: sha256WithRSAEncryption
1a:7a:5d:ee:08:a3:10:61:5e:2c:ce:4d:e1:23:60:d4:fd:bb:
29:13:d4:ee:a1:f2:e3:3d:7c:61:f3:12:49:a3:ce:18:62:1e:
8d:50:7a:15:1d:a2:b7:78:a1:6f:72:2d:e0:9c:6c:86:b2:6c:
ee:7c:0e:2c:74:1a:44:fa:b2:44:a7:e2:c6:f0:02:c9:e7:da:
cd:cf:00:52:0b:f2:9e:98:75:83:c3:c3:28:43:52:0b:02:15:
3a:09:25:b6:0a:50:c1:58:bb:c3:f2:94:51:3b:79:6e:05:c5:
a9:ab:6f:b2:87:d4:e5:f2:ef:bd:6e:c7:94:ae:b7:43:05:a7:
69:6e:7d:03:0a:ef:5d:e2:7b:fd:da:d1:53:4a:bf:3a:2f:f1:
64:0e:0c:ca:0e:ab:77:f0:fd:35:c0:bf:dd:30:a3:1e:2b:84:
c7:bb:10:1a:4c:a6:78:14:40:2e:20:fa:13:2f:af:06:02:33:
32:ef:c6:e8:25:68:bc:44:6a:8d:48:c0:27:50:2d:f0:cd:e7:
e8:83:a9:64:a3:e6:b5:e7:92:11:45:33:4d:ad:d5:11:8e:fc:
1f:5f:55:12:d6:74:eb:1c:56:67:ca:41:94:29:94:9d:76:01:
8c:b9:10:d9:42:4f:1a:f1:c6:c9:ee:c9:a1:bc:70:0d:71:e9:
bb:3a:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:04 2026 by rpki-client