Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/0NoujwxR-gj9DnZ6yWroTaY4BNw.roa
File: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (raw, json)
Hash identifier: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=
Subject key identifier: D0:DA:2E:8F:0C:51:FA:08:FD:0E:76:7A:C9:6A:E8:4D:A6:38:04:DC
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019B7F8140BD1E78526BED900F10113FE042
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/0NoujwxR-gj9DnZ6yWroTaY4BNw.roa
Signing time: Fri 02 Jan 2026 16:18:55 +0000
ROA not before: Fri 02 Jan 2026 16:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210292
IP address blocks: 160.238.120.0/24 maxlen: 24
160.238.121.0/24 maxlen: 24
160.238.122.0/24 maxlen: 24
160.238.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:81:40:bd:1e:78:52:6b:ed:90:0f:10:11:3f:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jan 2 16:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0da2e8f0c51fa08fd0e767ac96ae84da63804dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b8:2a:24:8f:f6:31:b2:06:db:88:1f:cd:4c:
d8:09:ef:aa:6e:1d:00:29:c1:e6:8d:4c:bf:49:01:
fd:db:f2:96:9d:e5:b5:79:d3:11:99:47:11:6d:cb:
21:e1:a4:82:e4:16:e7:91:c1:86:8c:96:c3:45:11:
b7:3e:c8:bf:71:3c:65:52:e8:d7:ca:c6:4c:55:32:
83:29:51:7a:0f:45:28:ed:14:64:ae:d4:03:d1:15:
38:86:a1:e8:16:55:2c:a1:c9:f9:c8:fd:4f:e1:33:
ae:6d:d1:3d:f6:0c:3a:24:05:89:66:1d:cf:b5:10:
b0:37:81:be:0a:3b:e2:f9:a1:f7:55:dc:d6:ef:40:
df:e5:d5:41:d7:c8:ee:e6:f0:ae:b8:2c:41:cb:24:
4f:d7:90:16:da:f7:c0:e2:3f:31:57:fa:e0:b1:63:
23:73:ac:79:2a:43:ef:e8:d5:e9:69:c3:d9:87:70:
97:95:59:98:70:1a:ae:d9:fe:b4:0a:32:c4:3a:be:
5a:5c:b2:06:78:78:b0:e3:0d:af:a7:6b:da:b5:20:
0d:65:60:2c:74:4e:4f:6d:ed:75:05:6c:71:5f:83:
5a:ee:8a:ce:ae:87:be:2a:3b:d4:5a:c3:8c:66:60:
7d:82:9d:16:24:4b:ff:2d:ac:11:b0:e0:09:7b:17:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:2E:8F:0C:51:FA:08:FD:0E:76:7A:C9:6A:E8:4D:A6:38:04:DC
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/0NoujwxR-gj9DnZ6yWroTaY4BNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:ed:ae:b6:6c:70:bc:bb:9a:c8:d1:23:2d:32:1e:f2:56:d1:
7d:24:5c:4c:d2:c5:76:88:ba:2f:34:9e:96:57:b9:20:d1:5b:
87:c8:ac:12:1b:d2:59:78:5f:0d:89:a0:29:87:4c:0c:0b:2b:
f4:87:53:c9:e8:8b:92:41:91:bb:d4:8a:2d:a0:c8:34:27:f5:
1f:47:63:d8:f7:9a:5e:f0:5b:d9:92:26:7b:59:5e:d0:d0:ba:
07:30:fe:ae:39:47:d8:25:bd:80:60:23:73:c6:94:6a:46:df:
dc:66:d9:b8:98:df:4f:2b:1f:63:68:e0:ac:7b:49:34:b6:a7:
1a:8c:06:39:ed:f7:78:2b:d3:e0:21:05:41:b1:d3:1c:80:09:
5e:e1:61:9c:42:b0:65:fb:41:e9:8c:1b:4e:47:8a:e1:95:3d:
04:ec:04:df:3d:63:85:84:27:be:99:e3:1e:08:59:10:07:3d:
69:f6:63:1a:2e:7a:3d:c3:80:b8:2a:e5:39:4c:a6:16:40:6e:
ce:d4:70:9f:c5:d2:54:04:1e:65:ec:c6:0b:c8:66:53:be:62:
67:77:41:e0:61:68:4f:b3:25:13:77:4b:5f:48:15:d3:3a:a3:
ce:e8:fd:06:1f:83:51:99:00:58:a0:4b:c6:b5:7f:8d:6d:9a:
f1:b8:1c:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gUC9HnhSa+2QDxARP+BCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjYwMTAyMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGRhMmU4ZjBjNTFmYTA4ZmQwZTc2N2FjOTZhZTg0ZGE2MzgwNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77gqJI/2MbIG24gfzUzYCe+qbh0A
KcHmjUy/SQH92/KWneW1edMRmUcRbcsh4aSC5BbnkcGGjJbDRRG3Psi/cTxlUujX
ysZMVTKDKVF6D0Uo7RRkrtQD0RU4hqHoFlUsocn5yP1P4TOubdE99gw6JAWJZh3P
tRCwN4G+Cjvi+aH3VdzW70Df5dVB18ju5vCuuCxByyRP15AW2vfA4j8xV/rgsWMj
c6x5KkPv6NXpacPZh3CXlVmYcBqu2f60CjLEOr5aXLIGeHiw4w2vp2vatSANZWAs
dE5Pbe11BWxxX4Na7orOroe+KjvUWsOMZmB9gp0WJEv/LawRsOAJexcsmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDaLo8MUfoI/Q52eslq6E2mOATcMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvME5vdWp3eFItZ2o5RG5aNnlXcm9UYVk0Qk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoO54MA0G
CSqGSIb3DQEBCwUAA4IBAQC67a62bHC8u5rI0SMtMh7yVtF9JFxM0sV2iLovNJ6W
V7kg0VuHyKwSG9JZeF8NiaAph0wMCyv0h1PJ6IuSQZG71IotoMg0J/UfR2PY95pe
8FvZkiZ7WV7Q0LoHMP6uOUfYJb2AYCNzxpRqRt/cZtm4mN9PKx9jaOCse0k0tqca
jAY57fd4K9PgIQVBsdMcgAle4WGcQrBl+0HpjBtOR4rhlT0E7ATfPWOFhCe+meMe
CFkQBz1p9mMaLno9w4C4KuU5TKYWQG7O1HCfxdJUBB5l7MYLyGZTvmJnd0HgYWhP
syUTd0tfSBXTOqPO6P0GH4NRmQBYoEvGtX+NbZrxuBxW
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:40:37 2026 by rpki-client