Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NcSz4_ZDS7ftYUFet_wr-MrNx8E.roa
File: NcSz4_ZDS7ftYUFet_wr-MrNx8E.roa (raw, json)
Hash identifier: cpAUBXUwfeY3Aiqtl06ZcpcpcdGQrTVbM3iTXXe5/GA=
Subject key identifier: 35:C4:B3:E3:F6:43:4B:B7:ED:61:41:5E:B7:FC:2B:F8:CA:CD:C7:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C8F4598DA2DA1CE8334BE8DDF27F5C6F7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NcSz4_ZDS7ftYUFet_wr-MrNx8E.roa
Signing time: Tue 24 Feb 2026 10:50:28 +0000
ROA not before: Tue 24 Feb 2026 10:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 213.218.228.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:45:98:da:2d:a1:ce:83:34:be:8d:df:27:f5:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 24 10:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35c4b3e3f6434bb7ed61415eb7fc2bf8cacdc7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:d2:cb:d5:f5:2e:33:0d:8d:d3:f3:71:ec:
68:2a:59:8c:19:ee:69:39:8a:69:51:9f:01:59:10:
14:63:d2:12:77:8a:fa:81:54:49:df:59:99:2f:0f:
17:e3:27:d3:ba:de:7a:6a:56:98:5e:ae:2c:b7:ec:
aa:bb:9a:c1:4c:38:ba:a7:75:0e:de:0c:be:a6:9b:
25:b1:77:73:da:b0:d5:8c:e4:c3:ae:45:7c:a5:19:
98:e7:28:58:50:19:01:de:62:9e:6f:1f:94:f6:39:
60:e1:46:6c:55:c6:6e:b8:db:31:0d:70:9f:52:38:
70:56:1c:3e:dc:91:67:e6:5b:75:a0:ca:6c:f8:7c:
f4:00:93:ba:03:5a:13:78:36:35:1d:f5:82:b4:e5:
33:cb:a4:53:05:f5:55:48:3d:af:f1:2b:ff:02:28:
9a:bb:2c:70:f6:8a:6f:d3:e2:f9:cd:ca:f6:eb:f3:
4c:5c:18:36:8c:8e:34:5c:e1:be:fd:40:03:6c:b8:
ea:c4:eb:af:ce:43:a3:5b:54:2f:e2:00:28:c1:52:
ce:47:5e:ca:d0:d5:df:dd:e0:0a:18:cc:d9:fb:44:
50:28:d9:4b:06:2a:bc:25:bf:b1:23:31:08:c9:48:
e6:87:ed:fd:91:04:77:ed:f1:8b:2a:98:6a:b6:ad:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:B3:E3:F6:43:4B:B7:ED:61:41:5E:B7:FC:2B:F8:CA:CD:C7:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NcSz4_ZDS7ftYUFet_wr-MrNx8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.228.0/24
213.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c4:b5:2e:0b:cd:97:a1:f8:09:71:da:eb:83:e3:e3:1e:97:
5e:7e:bd:e5:76:82:25:eb:2c:3b:6a:16:e1:35:10:ef:8f:b6:
7d:c7:26:e2:66:1f:ed:02:df:a0:65:bb:01:aa:3e:58:ae:f3:
b6:19:9a:bf:68:d5:8e:b9:64:4e:f9:13:30:17:2b:48:ce:f7:
a5:2d:25:6a:c5:8f:ff:1d:88:c2:c3:96:25:6a:19:2b:0a:ba:
dc:0c:27:e2:8b:21:5a:4a:a4:08:13:7c:3c:e2:4d:3b:95:66:
eb:7c:6d:a7:ad:e9:96:24:f8:7c:dd:3b:e3:e4:0a:43:32:fb:
fc:32:c9:dc:5e:67:0b:44:51:a1:0f:71:96:b2:8f:40:ed:4c:
3b:30:bc:33:36:db:69:f5:be:6e:0d:bc:b0:6f:48:d8:79:bb:
13:92:89:a5:1b:66:a3:cb:d6:71:71:2b:47:1d:81:a1:78:68:
24:8c:a8:6c:6d:17:92:a8:9b:ee:20:75:54:51:61:8b:a4:36:
09:e8:47:b4:3b:18:58:83:28:40:b0:dc:79:ba:8a:3b:a8:f6:
1c:40:56:a5:61:f8:2c:42:e6:12:88:71:28:ca:0e:53:b7:37:
8e:b9:54:ff:c6:93:7f:b5:bb:67:ad:3a:f7:80:26:f9:a3:fa:
24:fb:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:03 2026 by rpki-client