Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/nt0-oWRDzO_mDAuQc0QDXAYkENI.roa
File: nt0-oWRDzO_mDAuQc0QDXAYkENI.roa (raw, json)
Hash identifier: ZuR3o3gn2u9J1FCO08jz8Ove8mQtUA4pSs4hehuj6QM=
Subject key identifier: 9E:DD:3E:A1:64:43:CC:EF:E6:0C:0B:90:73:44:03:5C:06:24:10:D2
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019D29D057ED66563E10AB392CFF9DDAD9F1
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/nt0-oWRDzO_mDAuQc0QDXAYkENI.roa
Signing time: Thu 26 Mar 2026 11:03:33 +0000
ROA not before: Thu 26 Mar 2026 11:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51693
IP address blocks: 46.70.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:d0:57:ed:66:56:3e:10:ab:39:2c:ff:9d:da:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Mar 26 11:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9edd3ea16443ccefe60c0b907344035c062410d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:9f:32:00:a6:ce:38:96:70:39:f0:6c:e8:
2e:a5:2b:e1:43:6d:2b:de:05:76:4d:72:cd:13:97:
d3:6e:25:5c:c4:66:e7:f3:b4:78:68:24:a4:66:e0:
1f:74:8c:9b:53:28:d9:03:6e:ed:f2:df:0c:2b:9a:
d8:4f:9d:75:4c:4c:fc:63:e6:8e:8a:3d:7a:fc:1e:
0a:7c:58:4d:a5:af:db:d3:f3:aa:37:69:f5:03:75:
74:ff:8c:9f:82:dc:c9:18:14:0e:69:63:85:5e:dc:
94:ab:e7:f8:b6:ee:96:7d:c8:51:c6:71:3a:d2:2d:
f8:81:0b:ec:fc:c7:ec:b6:82:06:70:85:9e:11:c8:
8c:12:0e:09:f9:12:9c:87:1f:6b:ec:a9:ad:9c:26:
39:a9:c3:19:18:5e:2f:33:f9:bb:c8:74:5a:42:d9:
99:22:87:76:9f:08:da:5c:0c:f9:fc:25:be:58:e0:
e6:0f:d3:40:d4:2c:38:ea:3d:39:ce:c4:57:35:26:
6c:4d:d9:ab:17:93:d0:71:a8:99:73:4d:1f:fc:82:
8d:21:08:c4:d4:d6:f0:1d:d7:45:01:0d:2f:1c:35:
36:33:f8:f0:27:2b:61:33:2e:f7:64:d4:50:2e:73:
a5:47:e6:ab:26:88:1c:8b:ac:d9:a3:4c:be:05:a9:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:3E:A1:64:43:CC:EF:E6:0C:0B:90:73:44:03:5C:06:24:10:D2
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/nt0-oWRDzO_mDAuQc0QDXAYkENI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:06:e1:8c:cc:78:a4:b8:88:55:cc:50:01:46:73:d5:f8:90:
96:5c:de:59:b3:5e:a5:41:fa:6c:3e:0a:70:bd:95:94:18:8b:
d1:6b:56:32:70:50:b2:7f:c1:8a:33:6f:03:ec:7a:19:19:66:
27:7e:ca:2b:d6:9b:ce:fc:79:de:d6:a3:3d:2a:ad:78:99:cf:
69:63:10:6f:38:60:0e:c5:6a:dd:6a:a5:17:ce:2d:d4:64:2c:
24:b1:f6:3b:6a:d8:a8:7c:6b:c7:4d:28:46:2c:f7:16:2b:a9:
53:84:91:55:45:d5:6f:e4:d0:f4:0e:55:f2:af:e4:1b:d0:e8:
06:20:c1:a0:85:24:c6:cb:a2:3b:68:02:ff:b0:80:0b:0a:19:
b5:ab:35:0a:8d:18:b0:d4:f4:18:1e:0f:fb:42:4b:07:b2:0c:
cd:61:e2:51:b6:3e:63:b5:56:ab:73:74:f3:7f:07:cc:2a:ad:
65:85:19:86:c7:63:92:37:36:8b:80:a7:13:b3:63:49:37:d3:
e2:91:d0:54:ae:b7:4d:66:02:eb:f2:d8:89:94:95:18:d4:fa:
e0:63:45:0e:d4:69:cb:62:36:a5:50:b5:96:ac:4a:7f:c9:d6:
64:f8:a1:d1:5a:93:d1:dc:6b:8c:67:91:89:12:2b:da:42:a6:
64:25:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:51 2026 by rpki-client