Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nsCuYa_X4f2lP4i11WvF1aq3i2k.roa
File: nsCuYa_X4f2lP4i11WvF1aq3i2k.roa (raw, json)
Hash identifier: TTu+Kk1ZK6f+uz53U3+NJ5nMAwegzeDmNXAWwx9881A=
Subject key identifier: 9E:C0:AE:61:AF:D7:E1:FD:A5:3F:88:B5:D5:6B:C5:D5:AA:B7:8B:69
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A0AD6402C65D466500E790BE7BA3E25E82
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nsCuYa_X4f2lP4i11WvF1aq3i2k.roa
Signing time: Thu 17 Sep 2026 03:23:27 +0000
ROA not before: Thu 17 Sep 2026 03:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49860
IP address blocks: 188.130.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:64:02:c6:5d:46:65:00:e7:90:be:7b:a3:e2:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Sep 17 03:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ec0ae61afd7e1fda53f88b5d56bc5d5aab78b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:b7:92:08:ae:eb:cb:fd:54:ee:be:c1:b3:
dd:e2:58:b9:c4:28:49:20:42:f1:54:2c:a9:7d:9a:
41:c4:59:00:34:f0:3f:fe:a4:39:c7:a7:94:20:c2:
b6:15:01:53:aa:ea:cc:de:79:26:38:81:25:bd:b0:
fc:ed:1a:d7:06:4b:e0:a5:9e:63:94:22:b1:fe:f6:
e0:83:ae:6d:61:2d:b0:b5:50:a6:74:53:b1:7d:9a:
c2:c2:f5:0f:56:d7:f7:35:eb:b7:b1:c8:73:af:e7:
35:35:da:c5:4a:22:46:a0:4d:53:41:db:57:c0:be:
cd:cd:69:a9:f5:85:5d:46:99:61:de:c2:39:84:71:
de:7b:df:fe:27:4f:da:49:2b:db:50:f0:c9:30:25:
cc:d0:18:32:12:29:9f:d3:78:3a:4a:72:d2:20:d9:
81:78:05:54:05:61:00:00:1b:ee:4a:d8:38:18:e1:
9b:a6:7b:20:ef:74:2e:cf:5b:3e:c4:bf:f7:6f:a7:
db:f5:46:2f:40:3b:39:b0:42:41:47:12:29:d3:cb:
27:1e:5a:0f:b9:12:db:67:7e:6d:f0:ad:01:f0:9b:
27:60:68:3e:6b:32:3c:37:0b:c0:a0:ee:bf:85:44:
56:72:6d:12:74:61:96:2e:a7:56:32:12:df:a4:91:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:AE:61:AF:D7:E1:FD:A5:3F:88:B5:D5:6B:C5:D5:AA:B7:8B:69
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nsCuYa_X4f2lP4i11WvF1aq3i2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
Signature Algorithm: sha256WithRSAEncryption
69:14:0d:7f:8d:9d:46:60:0e:2d:08:b2:9a:8e:be:61:99:8d:
63:8e:15:ca:6c:9b:dd:bf:0d:d2:6a:c7:2f:74:a9:9e:fa:9d:
30:72:0f:d7:3c:9b:40:b2:b6:2f:4f:19:ef:ad:21:fe:8c:2d:
ba:31:e4:f6:be:f0:c6:4b:a3:49:8d:c7:1c:bd:cf:a7:9a:ba:
6b:b2:82:da:bb:3c:3a:4e:ca:c1:df:0b:e1:ed:ed:dd:e3:3a:
bd:f6:29:fd:50:d9:10:63:29:39:b4:f6:db:45:3e:45:e9:69:
df:f0:fd:6a:0e:09:cf:82:97:fd:8d:39:50:dc:40:8e:7c:d6:
ee:9b:0d:e9:3f:31:09:95:57:a0:a3:26:22:54:79:68:3e:b0:
d6:b4:9e:d9:75:37:dc:98:d7:2b:58:98:58:da:55:4e:6c:7b:
a8:b8:fe:66:9c:33:93:e3:cb:12:2c:64:86:7c:b5:eb:4f:0a:
50:44:42:16:da:39:39:5d:c4:ea:3c:9c:df:b3:7d:67:0c:42:
b1:71:53:c0:04:fd:b6:03:a1:87:68:8e:aa:65:e0:6b:3a:ea:
24:72:81:56:b7:eb:b8:b0:32:34:bc:88:18:5c:79:64:23:2d:
9f:cc:ad:bb:6b:25:5a:28:52:37:26:72:52:ad:67:29:72:2d:
5d:42:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:37 2026 by rpki-client