Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/nTe4XS35nHxQSCG2D80P-vLwCdc.roa
File: nTe4XS35nHxQSCG2D80P-vLwCdc.roa (raw, json)
Hash identifier: VFddyo3u6Vm8UnAzJlN5YGNR/ZyZRBkt6xiG3mZLyRs=
Subject key identifier: 9D:37:B8:5D:2D:F9:9C:7C:50:48:21:B6:0F:CD:0F:FA:F2:F0:09:D7
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019B7BA36DA4780D12E5A64324876F874AF7
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/nTe4XS35nHxQSCG2D80P-vLwCdc.roa
Signing time: Thu 01 Jan 2026 22:17:46 +0000
ROA not before: Thu 01 Jan 2026 22:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198049
IP address blocks: 91.230.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:6d:a4:78:0d:12:e5:a6:43:24:87:6f:87:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Jan 1 22:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d37b85d2df99c7c504821b60fcd0ffaf2f009d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:fd:4f:8f:42:89:bf:6d:53:a4:ab:b2:d4:
87:43:d8:1f:2c:39:9a:da:a4:4c:fd:61:12:7d:49:
c7:c2:4b:9b:04:e6:ad:20:3f:e8:89:29:da:59:1e:
94:58:fe:40:71:ed:36:ce:af:40:0f:3a:92:da:a0:
c8:d7:2c:5e:78:28:bd:9c:62:07:19:d2:62:6f:34:
a6:62:06:1e:c1:9e:06:5b:5f:2c:b9:e8:5c:13:40:
d4:c7:c7:f4:77:c5:ff:93:c2:79:d8:e8:44:68:f3:
3b:e0:05:23:f8:2d:ff:ca:19:27:2f:0b:4e:67:2e:
df:f4:e0:5f:fb:db:27:11:e9:fb:24:f8:f5:bd:0e:
2f:82:ad:41:21:d1:7a:d4:6e:08:57:e8:b4:a7:d8:
df:61:62:f7:ad:ca:28:c9:b5:1b:b4:c3:88:58:46:
ae:a4:4b:b2:47:44:8a:88:81:ba:73:0f:51:10:5c:
7d:1f:ed:a2:04:72:4b:8b:6d:78:23:5a:b0:cb:55:
8a:03:71:24:c7:82:28:cd:58:ca:89:6c:e5:99:a6:
d9:b2:b4:e4:83:c6:e6:23:42:69:e3:9e:80:51:71:
cf:ae:88:07:0d:31:a8:56:b8:0f:f1:54:69:a3:55:
d6:a4:dc:6e:cd:77:e0:07:58:41:c6:a6:fe:2f:f7:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:B8:5D:2D:F9:9C:7C:50:48:21:B6:0F:CD:0F:FA:F2:F0:09:D7
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/nTe4XS35nHxQSCG2D80P-vLwCdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:21:ec:3a:95:66:22:02:f3:b9:78:b4:a9:71:87:0c:48:
3f:7c:85:cd:be:5f:8a:09:e3:83:83:c9:8f:f0:8e:a6:77:37:
47:eb:0a:99:48:45:e6:31:c2:90:ba:e1:98:8c:d1:73:9c:f2:
75:9e:83:a1:86:c3:06:51:ec:e2:ae:ad:55:fa:19:58:c2:77:
3b:fb:5d:db:40:5f:5c:3a:b1:03:12:f4:29:2b:c7:40:5e:e8:
4b:79:a4:81:03:cb:dd:5e:b5:ec:14:26:b0:de:c8:73:82:f8:
58:47:3a:a6:71:9f:9e:9a:e5:ec:7b:26:52:0f:f4:57:66:57:
22:2e:cf:ee:70:33:2d:46:f4:8d:c6:e7:cb:4b:5b:e4:9d:83:
f7:7b:d4:2f:4e:45:7f:1f:b8:71:40:6d:51:61:fb:3a:81:53:
13:be:40:30:5c:26:f4:b8:e1:f9:db:5a:31:fd:6f:f1:53:f9:
18:67:10:2f:98:29:22:c8:2f:a1:59:c4:42:f7:4d:65:22:fb:
fd:28:d6:63:66:c7:38:93:16:71:a9:ff:44:13:60:64:79:2e:
7a:23:65:f4:5e:1f:05:0d:b0:29:a5:8f:65:79:e8:d4:bf:ec:
ba:f4:60:14:19:64:a1:5a:f2:19:73:c9:2f:cb:6d:dc:f8:8b:
29:b2:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:30 2026 by rpki-client