Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/nePvBB9jd-ANLBpu4PjrNstOto4.roa
File: nePvBB9jd-ANLBpu4PjrNstOto4.roa (raw, json)
Hash identifier: 12tNIputzR8y4Zof/Id9Sf+A353vg+elH0JLCwhD41s=
Subject key identifier: 9D:E3:EF:04:1F:63:77:E0:0D:2C:1A:6E:E0:F8:EB:36:CB:4E:B6:8E
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019D7763C41E2D83B12AE826DE6624D1A728
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/nePvBB9jd-ANLBpu4PjrNstOto4.roa
Signing time: Fri 10 Apr 2026 12:35:20 +0000
ROA not before: Fri 10 Apr 2026 12:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 80.253.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:63:c4:1e:2d:83:b1:2a:e8:26:de:66:24:d1:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Apr 10 12:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de3ef041f6377e00d2c1a6ee0f8eb36cb4eb68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:bc:a6:38:b8:4c:26:6e:44:9c:e0:ec:8a:
c5:62:c5:64:fa:0a:96:64:6c:3f:dd:93:ab:1d:06:
e8:37:30:fb:8e:4f:aa:fa:5b:f4:5b:fc:61:1f:de:
7f:26:fc:22:5f:1a:e5:1b:e4:a4:d1:06:b6:88:46:
af:53:1d:7b:38:da:63:2c:b4:24:c7:19:4b:3a:fd:
01:8e:6c:14:7a:a8:fd:bb:04:a0:fc:21:3a:e4:40:
55:22:a8:40:7e:85:59:1e:b4:fb:13:53:87:b9:df:
71:42:cb:58:17:a1:87:18:4e:7c:16:4b:a5:99:6d:
0e:50:64:78:9c:ec:6e:0c:82:ea:7f:20:0b:f5:cf:
1e:58:e8:42:85:a5:25:64:d8:36:1c:8c:36:75:04:
ac:97:a1:9b:c5:e2:f0:93:2c:47:f6:f6:d0:1d:14:
ef:ee:ab:1b:c2:31:15:57:bb:aa:f7:dc:1c:ab:1f:
7d:09:d0:c1:6b:12:44:d4:dc:1a:cf:56:0e:12:2a:
b4:3e:37:ef:c7:5a:8d:85:39:60:2e:83:9e:05:25:
3a:b2:a9:98:13:67:82:c2:d6:a0:a0:60:23:48:a6:
4d:a6:ad:77:97:4f:c2:26:9e:52:66:c7:38:e3:c8:
ce:e6:ce:85:b3:dc:b3:d8:b4:ba:0e:e0:ee:c7:5c:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:EF:04:1F:63:77:E0:0D:2C:1A:6E:E0:F8:EB:36:CB:4E:B6:8E
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/nePvBB9jd-ANLBpu4PjrNstOto4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4b:3d:95:1d:22:90:f4:b8:e8:64:b3:be:37:ed:02:d0:1d:
57:49:c6:ff:f6:cd:18:1f:65:79:5c:1c:95:6c:1d:1b:95:d2:
5d:7d:3b:b0:30:8e:57:19:3e:88:d0:6c:44:9b:af:42:e7:f0:
39:b4:79:51:a0:98:6f:f8:fc:b0:db:4e:34:19:47:09:4a:87:
8b:d6:28:d3:e9:21:9a:8c:a8:a8:29:0a:ce:ec:58:e7:44:04:
a6:24:d4:f3:09:1d:fb:b6:58:5c:d2:9e:7b:ce:54:6f:c9:73:
1e:fc:db:bc:1e:5c:11:94:51:f5:22:41:9f:48:b0:34:bf:1a:
59:57:2e:28:f8:df:b8:c9:3c:dc:e8:9e:59:eb:68:06:8f:ca:
1c:2c:13:1e:34:8b:69:75:29:7f:e8:3f:ec:38:21:1c:67:c7:
9e:74:2e:bf:c7:c0:6a:4f:d3:71:2b:4f:fe:29:85:4e:c7:69:
75:b5:52:3f:01:4e:e2:d8:e1:33:f6:c9:36:0f:4d:6e:54:08:
72:8a:07:b5:3c:4f:2a:0d:bc:63:2a:72:fc:d3:4b:ca:3e:c9:
1d:61:b0:7f:fc:bd:28:31:b1:ab:b4:88:ed:14:6e:91:f3:a4:
c0:d5:92:8b:90:a2:41:e8:5f:62:c8:af:5f:20:b1:16:2f:13:
14:a9:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:20 2026 by rpki-client