Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/NnKs8Yb8P3AYym3D6rU-l-mCsgw.roa
File: NnKs8Yb8P3AYym3D6rU-l-mCsgw.roa (raw, json)
Hash identifier: CaO/qZrRLoULZQwtinK2Fm2iopecGkEHAdsrfA5k0X4=
Subject key identifier: 36:72:AC:F1:86:FC:3F:70:18:CA:6D:C3:EA:B5:3E:97:E9:82:B2:0C
Certificate issuer: /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
Certificate serial: 01A06C3A8ABECA9D632150E3C7C0DDCEAB12
Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/NnKs8Yb8P3AYym3D6rU-l-mCsgw.roa
Signing time: Fri 04 Sep 2026 11:42:50 +0000
ROA not before: Fri 04 Sep 2026 11:42:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198352
IP address blocks: 193.37.108.0/22 maxlen: 22
195.246.116.0/23 maxlen: 23
2a01:a0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:3a:8a:be:ca:9d:63:21:50:e3:c7:c0:dd:ce:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
Validity
Not Before: Sep 4 11:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3672acf186fc3f7018ca6dc3eab53e97e982b20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:b6:f4:db:34:a2:43:6d:46:35:6a:de:a7:
19:3a:e9:47:ae:61:5b:15:cd:0f:28:26:f6:b6:97:
84:36:83:fb:84:44:dc:55:2e:45:95:7a:ff:2a:a3:
f0:6d:7b:75:ac:b8:32:fe:49:8c:e7:71:b2:05:70:
c6:86:56:fe:e1:4a:2a:31:02:d3:7c:5e:ba:ec:ee:
7d:ff:31:64:7b:aa:f4:d0:99:77:79:43:22:c6:e2:
cb:cd:9f:a1:5e:b9:75:1a:55:71:a4:d9:60:6b:24:
e1:dd:ed:6c:51:47:c4:6c:2c:0f:72:df:f0:dc:68:
41:e2:1c:6d:15:ab:cb:26:aa:ed:44:bd:ec:0c:06:
96:5e:d5:dd:ae:b4:00:34:4a:f1:78:ab:c0:77:1f:
c3:73:31:11:31:da:8e:4c:bd:3c:22:b0:23:42:e9:
0e:97:30:9d:4c:77:cc:1d:4c:72:45:1c:2f:2d:67:
fa:76:83:92:db:7e:31:7e:51:65:06:47:61:ce:f2:
f5:d6:66:81:87:6f:d8:24:e0:e2:ca:93:6f:60:bc:
81:ad:4f:30:5c:5c:5d:53:a1:f9:09:f1:70:83:61:
ed:4c:31:b1:72:1c:5a:4e:c0:19:75:90:36:31:73:
9e:27:ef:04:90:c1:87:01:7f:e5:e3:8d:ac:9c:c8:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:AC:F1:86:FC:3F:70:18:CA:6D:C3:EA:B5:3E:97:E9:82:B2:0C
X509v3 Authority Key Identifier:
keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/NnKs8Yb8P3AYym3D6rU-l-mCsgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.108.0/22
195.246.116.0/23
IPv6:
2a01:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
77:6b:8a:9c:63:d8:94:1d:a6:f6:d6:c6:ca:48:27:67:df:d3:
4e:27:83:ac:be:30:bf:94:c5:69:31:ef:91:af:12:28:66:67:
bd:fb:77:9f:a7:87:57:7f:30:b0:53:b9:cf:99:51:bd:ec:c7:
e0:a5:bc:5c:93:e3:a6:24:e8:b2:b5:7d:5f:8c:dd:92:48:39:
fa:0d:ff:73:fc:a7:a2:23:fb:36:54:21:84:31:f3:d6:0a:18:
51:b0:a6:cc:5a:05:d2:dc:95:a1:c9:05:23:9f:12:6b:88:b2:
7d:f6:1c:cb:fe:b8:96:12:48:e8:10:df:4d:ac:51:84:15:82:
28:8d:0b:8d:07:6a:06:58:0c:b0:47:15:93:8c:77:93:20:df:
33:c5:65:c8:9d:fc:d7:a6:4f:10:99:b9:80:78:8c:de:20:53:
bf:94:8f:54:0f:43:37:d0:e9:fd:d2:ca:5d:14:2e:5b:98:00:
82:69:d5:47:e9:54:7c:56:a7:ff:dc:ab:4b:44:35:6c:80:37:
eb:e4:8e:d1:0a:0a:11:d4:39:14:3a:7b:31:2b:ea:40:5a:e8:
3d:de:0b:0b:fa:88:42:b2:48:22:24:0b:e3:d7:ae:0a:7c:22:
44:fd:49:05:46:e2:3b:3e:54:85:cd:3c:59:9b:ee:57:82:b5:
27:af:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:11 2026 by rpki-client