Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nsnMc1RKIPz6SQoEa03h-Fe8fj8.roa
File: nsnMc1RKIPz6SQoEa03h-Fe8fj8.roa (raw, json)
Hash identifier: 9FUbEmThk7RG4Jsxax5O18g0TFwlzk7ZRpLfHPM09Hk=
Subject key identifier: 9E:C9:CC:73:54:4A:20:FC:FA:49:0A:04:6B:4D:E1:F8:57:BC:7E:3F
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019C33CB5DA7807B11BE329886618DA12B0F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nsnMc1RKIPz6SQoEa03h-Fe8fj8.roa
Signing time: Fri 06 Feb 2026 16:31:31 +0000
ROA not before: Fri 06 Feb 2026 16:31:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16262
IP address blocks: 46.8.52.0/23 maxlen: 32
46.8.153.0/24 maxlen: 24
109.248.168.0/24 maxlen: 24
109.248.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:33:cb:5d:a7:80:7b:11:be:32:98:86:61:8d:a1:2b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 6 16:31:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ec9cc73544a20fcfa490a046b4de1f857bc7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:ca:65:45:99:7e:1a:f6:bf:91:ef:35:cd:
a8:2f:f9:42:42:03:21:da:e9:cf:af:d7:8b:29:bb:
53:29:a0:ed:61:56:f2:2d:e8:8f:37:4d:81:37:d3:
0f:68:d4:fc:b0:61:0b:71:53:57:40:a5:ca:70:96:
fe:7a:d7:81:e8:0c:a0:60:e5:d3:59:f5:fb:bd:b7:
45:d0:6f:9c:0c:a2:00:ab:ba:66:c2:77:1d:7c:31:
8d:e8:ff:9c:a5:f6:01:5d:ef:23:33:75:22:73:d1:
72:fd:11:02:14:36:5e:a8:63:ba:4a:4a:bc:31:5f:
8c:5d:0f:79:31:de:86:33:08:57:33:8d:08:75:46:
31:07:59:4a:6c:58:55:1e:54:29:db:56:4b:97:f9:
24:37:8b:d1:70:33:08:21:80:f7:8d:37:4e:32:df:
8d:19:3e:62:75:d6:34:0b:14:0b:ae:39:ff:a0:0d:
b5:a1:71:8e:b2:11:29:3c:f2:ac:82:c8:44:f8:3d:
33:f1:31:84:53:34:76:d8:d1:3d:5d:1a:36:e8:83:
8f:44:2c:ce:e8:8c:f4:dd:c5:2f:61:22:39:53:e4:
54:a8:65:bf:44:a6:2c:1b:b0:f3:9b:9f:15:13:0f:
ba:eb:97:49:37:82:78:5c:f6:20:ee:08:a6:8d:aa:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:CC:73:54:4A:20:FC:FA:49:0A:04:6B:4D:E1:F8:57:BC:7E:3F
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nsnMc1RKIPz6SQoEa03h-Fe8fj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.52.0/23
46.8.153.0/24
109.248.168.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:fc:67:2a:96:46:7f:cc:b2:d6:6b:c3:45:f6:3d:b7:43:fd:
a4:62:22:99:e2:61:3c:ba:84:1b:14:ca:8d:92:d2:2d:4a:52:
e1:03:04:34:e9:0d:ae:fa:1d:d8:15:41:24:a0:53:1d:3e:e0:
c3:5e:9f:d4:4f:c0:bc:69:50:f8:8f:30:33:51:f5:58:62:9b:
94:37:98:40:a8:e3:0e:45:40:1e:a5:c7:5e:6d:d2:c9:f2:6c:
63:74:77:f3:1e:b6:0e:5f:dc:f7:d5:2a:4a:6e:c2:f4:84:e9:
cb:c7:84:fd:de:21:14:9d:93:a1:f4:4b:fa:9d:74:ac:35:d2:
44:2d:7c:9e:aa:27:e1:b7:e3:ad:31:68:1f:38:d4:ab:95:f8:
6b:a3:1b:c8:d7:39:82:2f:af:2a:91:be:34:b0:9e:11:66:67:
ff:0c:42:d3:0d:ce:f3:62:36:bf:87:99:4d:e6:9e:5d:66:40:
46:84:19:2d:a4:91:f0:85:2e:0e:cb:fe:f0:27:c1:87:79:26:
0f:90:9c:38:76:47:a8:96:49:aa:76:ed:e4:81:56:34:22:0a:
10:db:52:0f:43:1e:f3:77:b6:1b:d0:85:08:18:6e:1a:ac:a9:
8a:73:12:97:b4:9a:ef:f7:57:08:aa:65:f7:00:e5:3b:73:02:
53:05:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:05 2026 by rpki-client