Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/NCBS6S7dbPRbVbMZAA5wdXMKQ5k.roa
File: NCBS6S7dbPRbVbMZAA5wdXMKQ5k.roa (raw, json)
Hash identifier: Nny9mwkO9g7Ta3xJG9twAHrYNKWRzZdme681CxunWuM=
Subject key identifier: 34:20:52:E9:2E:DD:6C:F4:5B:55:B3:19:00:0E:70:75:73:0A:43:99
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 019C7CE855460AFDA047378DD31ABCF7955F
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/NCBS6S7dbPRbVbMZAA5wdXMKQ5k.roa
Signing time: Fri 20 Feb 2026 21:15:26 +0000
ROA not before: Fri 20 Feb 2026 21:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207754
IP address blocks: 46.255.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:e8:55:46:0a:fd:a0:47:37:8d:d3:1a:bc:f7:95:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Feb 20 21:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342052e92edd6cf45b55b319000e7075730a4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:0c:53:40:f5:ef:6f:83:db:06:98:b4:9b:
90:6c:fc:80:69:f5:b6:60:ad:d4:29:2e:fb:b0:6e:
86:29:6b:99:b8:14:b2:16:bb:14:ca:58:e2:1c:14:
af:9c:50:b3:5c:cd:ae:d4:c6:9e:85:a2:62:71:6c:
00:13:23:45:5d:d0:95:12:98:f9:2d:25:d5:10:75:
f9:9a:96:cd:00:bc:dc:5b:e1:a8:09:d5:ec:6d:c9:
ce:7f:e4:be:8e:50:cd:92:9c:37:39:e6:34:bb:01:
8e:13:25:6f:36:af:c5:65:01:1e:e6:79:c1:1f:96:
30:e5:b1:6f:02:e6:37:8b:e0:73:7a:b1:da:9a:e0:
50:53:a6:12:eb:78:80:2c:49:42:f9:9a:30:1a:f8:
db:32:53:e2:8e:30:07:06:30:0c:34:41:4b:5a:8d:
48:29:7a:a3:8b:00:ac:21:b8:bf:5b:af:89:af:7c:
2c:66:5d:42:27:2f:10:34:4e:01:55:0e:74:13:4e:
88:ec:db:cd:b1:4e:a8:a1:1f:8d:36:d4:25:c4:a2:
b5:10:c7:ee:a7:fd:44:bb:38:24:e9:d8:8b:03:d8:
b6:97:6a:df:19:a3:76:a7:57:47:5e:fb:52:b5:fd:
92:d6:62:e2:9c:83:55:e4:1a:c4:9f:d0:08:8d:2c:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:52:E9:2E:DD:6C:F4:5B:55:B3:19:00:0E:70:75:73:0A:43:99
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/NCBS6S7dbPRbVbMZAA5wdXMKQ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b4:e5:84:62:7d:a0:93:25:f5:c1:fd:0f:7f:42:4a:70:f3:
d8:98:b1:e9:84:78:85:50:5e:24:b3:43:45:4c:2a:6f:40:f5:
df:f0:c9:93:4d:3a:a6:86:dc:8b:d3:f3:22:52:fa:1e:ab:e6:
23:ff:86:2a:38:6d:f7:7a:69:fa:e5:8d:27:f7:f9:39:9b:36:
b9:7b:21:9e:45:cb:64:58:aa:a3:bf:88:72:4b:5b:b5:a8:7d:
1c:9a:8f:97:29:ce:c9:e9:59:e8:6f:10:2f:a1:49:c5:c0:03:
a7:3a:7b:94:49:8f:46:f6:99:f0:22:8e:ef:f5:d6:d8:12:0d:
da:87:14:dd:1b:44:44:c3:97:f5:20:5d:fd:5f:4a:71:39:08:
28:df:c8:5a:6d:9b:0a:77:53:45:23:6e:49:a8:fc:7d:6a:bf:
24:b7:3e:0f:09:01:ed:d9:b4:6d:c9:bc:bc:b3:24:4b:11:1e:
52:4f:31:43:c8:f4:47:6f:7f:f9:b5:b5:3f:c4:bd:5f:1b:c9:
1c:c7:46:75:90:25:b9:b5:0f:c8:66:28:55:dd:45:98:a0:14:
cb:ea:3d:67:5e:ec:8b:b0:38:b5:2e:c1:62:25:e0:80:c5:a0:
fa:37:5f:26:ba:e6:1c:5a:c1:3c:f5:65:e7:20:b2:34:32:6a:
59:53:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:50:39 2026 by rpki-client