Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nNOvhEqXr1_m5YsMAyKEEFK4ruw.roa
File: nNOvhEqXr1_m5YsMAyKEEFK4ruw.roa (raw, json)
Hash identifier: tbPy1AwLHOxN+fAzqnbnMBMM+Rd+NJWYLNy7meGqwG8=
Subject key identifier: 9C:D3:AF:84:4A:97:AF:5F:E6:E5:8B:0C:03:22:84:10:52:B8:AE:EC
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019D9A590DF25374BA64EEBBDFA2AA47E8F6
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nNOvhEqXr1_m5YsMAyKEEFK4ruw.roa
Signing time: Fri 17 Apr 2026 07:30:20 +0000
ROA not before: Fri 17 Apr 2026 07:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402214
IP address blocks: 95.170.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:59:0d:f2:53:74:ba:64:ee:bb:df:a2:aa:47:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Apr 17 07:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cd3af844a97af5fe6e58b0c0322841052b8aeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:a6:ae:3b:72:30:33:2d:0f:ff:9d:89:5a:
7c:6a:35:0e:6f:fb:7a:9b:3d:e9:66:d7:c5:39:b5:
c5:1e:ae:53:84:db:fe:d8:95:82:ea:c7:c4:9d:6d:
bf:a4:aa:80:c4:65:6b:73:31:93:84:97:22:bf:9c:
1d:c2:2f:b8:6f:59:00:4c:8c:af:f2:53:04:86:b6:
2d:38:11:3f:5d:4b:96:e2:7a:d6:c1:09:e6:9b:6a:
44:39:72:4e:e7:f0:c4:48:8d:09:dd:40:66:46:9d:
33:ac:46:b1:aa:10:59:7a:df:de:61:cd:90:fa:c8:
df:b8:a5:33:e8:7c:76:e4:f8:7a:67:7d:54:71:8d:
70:17:2e:32:61:66:f3:ae:7f:6a:be:2c:de:b5:50:
ec:af:31:5c:14:58:ed:6e:f4:c4:b7:66:84:e8:d4:
9e:e0:7b:64:68:aa:c5:f0:a5:8e:41:91:aa:c8:78:
43:60:e5:b6:3f:48:0b:26:61:54:d8:b8:16:b4:7a:
c1:85:03:2a:89:41:78:22:06:33:08:d5:20:9f:91:
64:c6:e3:12:07:ac:b8:1d:8a:5b:ba:76:ed:49:85:
20:6c:56:93:4b:b2:6d:6c:3f:7a:18:b6:52:0c:71:
15:4d:48:7b:85:42:5d:5d:db:96:a4:7b:ca:8a:e9:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:AF:84:4A:97:AF:5F:E6:E5:8B:0C:03:22:84:10:52:B8:AE:EC
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nNOvhEqXr1_m5YsMAyKEEFK4ruw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.19.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4e:93:b0:6d:12:fb:56:cf:79:68:65:d7:75:52:0e:c5:90:
3a:27:fd:9c:20:ac:3b:9c:d0:44:92:17:e7:e8:6d:66:13:29:
4f:44:84:80:24:53:e4:ae:c1:2f:38:16:b0:73:19:8f:f1:64:
a5:17:fe:56:b8:c2:7a:95:aa:f3:75:81:bb:29:a2:14:18:fe:
b8:25:4a:34:ea:23:84:3d:11:29:ce:e7:41:92:db:50:1b:75:
a7:ac:c8:f7:fb:56:3d:5d:fe:87:98:dd:e2:6f:2a:7b:d8:08:
ed:54:ff:be:a7:42:ad:01:03:61:48:8b:9a:7d:a2:a5:1e:12:
46:ff:e3:ba:16:2e:24:b5:8c:92:a1:4f:f1:5a:26:6d:da:ea:
af:60:0d:d1:06:02:fa:11:5c:e6:f1:05:5c:7a:ca:48:18:54:
4c:69:a3:e1:b1:a1:1a:90:f8:66:98:39:7b:f6:7f:13:96:23:
29:dd:3c:3f:93:ae:b8:43:30:8b:2a:45:a6:16:b5:db:e4:7d:
6e:b3:0b:ca:58:f8:8c:a7:c7:32:cb:9e:86:ac:1c:c5:d2:96:
c5:b7:97:25:64:2b:b7:5f:9d:4f:53:e3:b5:93:b0:44:39:62:
a8:8c:42:c1:ce:20:31:6d:b3:c3:2b:d4:56:d3:88:1e:66:e7:
6f:59:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:11 2026 by rpki-client