Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/NOCmADB0YfK3LWDGeRgeFYCfPBE.roa
File: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (raw, json)
Hash identifier: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=
Subject key identifier: 34:E0:A6:00:30:74:61:F2:B7:2D:60:C6:79:18:1E:15:80:9F:3C:11
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 019C89A3A3A488FF3729E3099B5C5284F612
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/NOCmADB0YfK3LWDGeRgeFYCfPBE.roa
Signing time: Mon 23 Feb 2026 08:35:28 +0000
ROA not before: Mon 23 Feb 2026 08:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208992
IP address blocks: 45.144.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:a3:a3:a4:88:ff:37:29:e3:09:9b:5c:52:84:f6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Feb 23 08:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34e0a600307461f2b72d60c679181e15809f3c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:3e:c4:a9:4f:93:fe:43:ab:1b:68:46:c4:
6b:81:09:e5:24:e1:cf:87:37:29:f8:1b:e9:b7:f5:
f9:0a:26:c8:e9:fa:89:69:f4:c9:59:27:c4:9b:3a:
33:93:8e:9a:6a:ae:4c:c9:36:04:fd:ff:f3:1d:43:
be:31:ea:20:14:9c:c6:ca:14:0d:64:15:8a:b0:85:
25:97:c8:1e:38:54:ae:f6:f2:a0:e2:e8:f9:ac:72:
47:92:bd:5e:9c:65:40:93:c1:fe:68:2d:37:9f:cf:
c7:e0:86:22:5e:51:fc:23:ad:f4:ee:5d:75:77:f2:
7d:51:98:39:8d:22:b8:2d:ba:c4:fa:3e:42:c5:8d:
0f:45:81:d6:a5:4e:c3:c4:bc:7d:c9:6e:16:ad:e9:
5d:68:f3:c5:3a:cf:40:4c:52:f8:55:94:ea:aa:63:
c1:3d:c6:4b:91:00:dc:f9:47:61:b8:40:27:a2:03:
d2:41:90:67:8a:70:8f:ab:8d:d2:e0:40:6c:d1:1c:
85:80:2a:4a:a2:89:17:d7:50:49:3d:c7:96:6d:3b:
1e:17:da:26:27:e5:9d:47:89:13:80:49:3f:4a:73:
82:ed:1b:27:f2:bc:20:f2:6c:77:e0:57:58:c1:2e:
3b:08:be:76:b6:77:1e:6d:ef:40:39:55:ca:dc:ee:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:A6:00:30:74:61:F2:B7:2D:60:C6:79:18:1E:15:80:9F:3C:11
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/NOCmADB0YfK3LWDGeRgeFYCfPBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b1:23:df:36:5b:bf:12:3c:3f:38:c0:2b:fa:f5:5a:03:8b:
ac:9f:a6:00:5a:be:9c:4b:d1:a6:fe:28:07:d2:22:fb:63:d7:
d0:0e:29:76:d4:83:7b:09:3d:1d:24:1c:90:11:83:6c:86:66:
07:ac:07:2a:2f:54:94:0b:68:1e:ae:e3:7e:db:9c:73:8c:db:
e2:f3:b6:e7:e2:a6:4d:f2:19:2a:31:55:c2:d2:7d:b9:2a:13:
03:97:15:26:14:3b:4a:f3:8a:6a:8c:ba:60:03:d9:ae:a7:bf:
3e:33:ab:bd:0b:87:41:a0:87:20:63:37:fd:e8:b7:d5:41:8e:
f9:8d:6f:3c:4f:24:74:0f:41:89:00:0e:77:2a:a6:54:c5:37:
05:ce:d1:ac:df:4d:fa:54:69:4f:bd:95:a0:db:14:89:39:b5:
d0:f5:e7:b7:36:3d:cf:2b:79:12:82:0d:c5:c2:13:ac:0f:09:
4b:9a:eb:5a:bd:1c:ef:ae:a2:e6:36:74:75:83:53:b2:5d:fc:
d8:93:22:9e:a5:8c:a0:3d:12:07:63:dd:67:b8:db:1a:75:35:
b8:24:62:86:df:1b:8f:0a:08:0d:43:d7:f8:99:53:aa:f9:a8:
96:30:4c:89:e5:fe:ce:fd:dc:ca:1d:79:f5:72:c9:7e:ae:4c:
10:6b:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:19 2026 by rpki-client