Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa
File: nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa (raw, json)
Hash identifier: eBvmstTRO+Qzu9U4Nj16cxuQx8JdP3s1HFl/0VPOS5I=
Subject key identifier: 9E:B3:02:79:8B:B7:98:CB:A8:FD:F0:C0:F8:6B:D3:08:11:4F:95:60
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01A084EF90362A70B5688CCCA8D9DB745B86
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa
Signing time: Wed 09 Sep 2026 06:51:27 +0000
ROA not before: Wed 09 Sep 2026 06:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212317
IP address blocks: 2.30.0.0/17 maxlen: 24
5.78.0.0/16 maxlen: 24
2a01:4ff:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:ef:90:36:2a:70:b5:68:8c:cc:a8:d9:db:74:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Sep 9 06:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eb302798bb798cba8fdf0c0f86bd308114f9560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:5d:45:75:e1:bb:b6:ca:04:8d:7c:fc:b8:
bf:68:32:c8:0e:0c:83:0b:0e:7b:a4:cc:12:3e:ff:
7c:79:90:0d:86:23:00:00:cd:dd:67:dc:16:68:7c:
c8:0e:eb:93:d3:22:16:f1:db:e1:26:90:5d:1a:b6:
b3:6b:67:d7:b6:33:8b:66:88:bd:11:93:d8:6e:d5:
9b:c6:eb:78:69:9d:00:62:45:0c:c7:ad:e5:6a:2e:
d2:25:f8:20:04:9a:d4:4f:2b:bd:e2:69:11:6e:a3:
49:6b:47:2e:6b:e7:db:1f:cf:d1:ae:c9:f1:d1:34:
b2:0c:f1:c1:65:ea:c0:e8:c6:30:47:37:05:b7:36:
ca:28:39:be:77:05:96:d2:99:3c:50:9b:4b:0a:6a:
97:69:4e:50:7d:59:cf:8b:9b:cd:8a:24:76:d7:b7:
4c:4f:01:c0:72:5c:6d:53:55:50:bd:9d:93:05:4e:
02:b4:19:2e:68:18:81:27:3a:7b:57:56:23:92:b2:
06:7f:cd:27:e8:a9:96:1d:7e:d2:a1:09:8b:60:a2:
2e:15:39:21:b6:8a:b1:0d:80:e2:8d:d0:bb:b0:67:
28:f0:91:aa:1e:f8:f8:96:72:5a:69:16:fa:c1:2a:
c3:1f:85:10:43:b1:46:c6:54:91:8c:d0:72:c7:9d:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B3:02:79:8B:B7:98:CB:A8:FD:F0:C0:F8:6B:D3:08:11:4F:95:60
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.30.0.0/17
5.78.0.0/16
IPv6:
2a01:4ff:100::/40
Signature Algorithm: sha256WithRSAEncryption
2a:23:e4:fc:91:df:04:1d:1e:83:25:03:4c:2c:75:47:c7:1f:
59:7e:34:44:7c:fd:f8:c5:79:0e:00:b5:09:12:6f:ff:34:9f:
af:af:15:7c:e9:29:49:6f:64:b8:70:cd:2c:56:f8:c3:58:b9:
e7:7d:33:2f:4c:99:38:3b:8f:5e:64:50:21:da:b5:9a:d3:0f:
d3:8a:75:f4:d1:38:25:dc:6a:f1:c2:45:5c:96:ca:7b:30:11:
1e:db:77:7a:bd:aa:eb:c4:12:bc:5d:04:56:c2:0f:60:5b:1e:
69:20:d1:c2:75:c3:6f:89:b6:1f:8d:a2:13:04:75:54:59:c5:
fd:bd:a2:3b:44:00:7f:c0:04:5c:72:66:0b:60:48:e8:90:0b:
f7:ae:df:77:80:31:7d:5b:b8:f7:32:ee:72:02:de:13:a3:f5:
49:ce:e8:1d:00:e8:d2:12:c5:3c:60:c3:fe:da:4b:fe:ac:6a:
bf:09:bd:a7:1b:f4:cf:54:31:bb:3b:8e:d2:b8:f3:90:f1:34:
1d:3c:9e:fc:79:e5:11:3e:cd:63:81:46:e5:a8:ca:72:85:5f:
1e:be:88:b8:4c:01:79:f9:7b:25:1d:f4:8c:83:0c:23:76:cf:
93:de:ff:15:ce:37:7d:ef:f5:9f:ae:6c:23:10:21:1b:3a:47:
0d:03:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:22 2026 by rpki-client