Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/nmUEueZ47VwZ2p45WO9IB9LwnHc.roa
File: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (raw, json)
Hash identifier: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=
Subject key identifier: 9E:65:04:B9:E6:78:ED:5C:19:DA:9E:39:58:EF:48:07:D2:F0:9C:77
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019D78D026157C8163D4AC15F2CEEB6CA7E1
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/nmUEueZ47VwZ2p45WO9IB9LwnHc.roa
Signing time: Fri 10 Apr 2026 19:13:20 +0000
ROA not before: Fri 10 Apr 2026 19:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201670
IP address blocks: 132.243.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:d0:26:15:7c:81:63:d4:ac:15:f2:ce:eb:6c:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Apr 10 19:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e6504b9e678ed5c19da9e3958ef4807d2f09c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:f9:27:36:b0:40:e6:11:20:e5:3c:28:82:
fd:d1:c0:ec:98:58:8a:61:dc:4b:bd:fe:cc:88:78:
15:3e:d0:9f:8b:a5:57:25:28:6c:86:cf:84:ec:9e:
05:6c:3f:e3:3d:64:0a:87:9a:a8:dd:c2:13:2d:91:
25:67:fe:92:a5:03:50:6c:bd:e7:99:ba:e2:c9:7f:
09:a0:04:cc:dd:8c:e9:4a:f3:cc:df:3f:3b:a7:a2:
52:41:f2:0b:e3:18:74:13:f3:d9:53:1c:82:99:2b:
61:e6:ff:06:62:4a:bf:06:1a:43:08:11:d8:d8:24:
4a:ce:0c:ca:11:e4:d7:9d:e1:14:ef:be:e7:82:3e:
94:1e:ed:97:bf:58:7c:33:1c:ea:69:97:53:76:7c:
b6:b1:ba:05:ee:5f:90:18:30:5f:27:e8:07:8b:fc:
5f:33:38:d6:95:39:05:85:4d:fb:50:55:c2:10:39:
5d:4d:bd:8a:47:cc:41:c0:a9:1e:42:6f:9c:7c:09:
9a:1f:1d:53:85:e6:fa:b2:5b:0f:c1:ad:83:e3:11:
68:13:e1:89:2b:22:08:89:2e:73:7e:6e:32:3d:dc:
92:3a:2e:15:47:7f:20:d1:50:9c:23:e7:6d:81:1d:
96:67:1b:64:3b:fd:7c:94:ab:41:bd:a3:d6:e9:0d:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:65:04:B9:E6:78:ED:5C:19:DA:9E:39:58:EF:48:07:D2:F0:9C:77
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/nmUEueZ47VwZ2p45WO9IB9LwnHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.164.0/23
Signature Algorithm: sha256WithRSAEncryption
06:0d:ff:ff:f0:06:21:5c:5c:71:6d:08:18:28:85:f0:21:c7:
e5:97:80:ca:ed:26:f6:95:38:3f:b2:f1:b3:53:74:7b:bb:9e:
07:ac:5a:b0:a4:d9:2b:e1:0b:cc:3a:29:16:b1:51:f2:0f:53:
25:97:64:49:28:b8:8d:1b:ec:50:08:a4:95:9b:5d:6c:a4:f3:
92:7e:06:b1:39:9f:81:4c:73:05:e1:f6:2c:a6:f5:6a:dd:96:
0f:71:d2:7f:09:8b:91:a8:5a:ff:33:77:af:fc:84:57:81:bb:
e8:57:4b:05:03:a7:66:8e:42:17:df:87:7c:07:df:fe:5c:7d:
66:8f:68:f8:e5:84:85:0b:a8:03:13:0b:ec:ac:1e:b9:da:b0:
d8:f1:1d:9d:8e:d4:5d:c7:4c:1a:54:fe:2c:b0:c3:a6:09:74:
86:e2:bf:81:2c:ab:6a:4f:bd:12:82:d2:b2:2b:f5:64:b3:e1:
33:85:58:33:d9:80:cd:45:16:82:a0:f7:86:7e:7a:e5:a8:76:
ef:30:42:7c:d7:1d:45:16:0a:ef:71:be:fb:05:45:23:69:c3:
61:a0:f1:7a:0a:06:90:20:91:26:96:86:c8:45:00:6f:8c:ea:
82:7d:2b:25:d5:f1:c1:f1:2a:e6:bb:c4:c6:79:4d:c0:9d:f4:
d7:78:78:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ140CYVfIFj1KwV8s7rbKfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjYwNDEwMTkxMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTY1MDRiOWU2NzhlZDVjMTlkYTllMzk1OGVmNDgwN2QyZjA5Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1n5JzawQOYRIOU8KIL90cDsmFiK
YdxLvf7MiHgVPtCfi6VXJShshs+E7J4FbD/jPWQKh5qo3cITLZElZ/6SpQNQbL3n
mbriyX8JoATM3YzpSvPM3z87p6JSQfIL4xh0E/PZUxyCmSth5v8GYkq/BhpDCBHY
2CRKzgzKEeTXneEU777ngj6UHu2Xv1h8MxzqaZdTdny2sboF7l+QGDBfJ+gHi/xf
MzjWlTkFhU37UFXCEDldTb2KR8xBwKkeQm+cfAmaHx1Theb6slsPwa2D4xFoE+GJ
KyIIiS5zfm4yPdySOi4VR38g0VCcI+dtgR2WZxtkO/18lKtBvaPW6Q3YnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5lBLnmeO1cGdqeOVjvSAfS8Jx3MB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvbm1VRXVlWjQ3VndaMnA0NVdPOUlCOUx3bkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhPOkMA0G
CSqGSIb3DQEBCwUAA4IBAQAGDf//8AYhXFxxbQgYKIXwIcfll4DK7Sb2lTg/svGz
U3R7u54HrFqwpNkr4QvMOikWsVHyD1Mll2RJKLiNG+xQCKSVm11spPOSfgaxOZ+B
THMF4fYspvVq3ZYPcdJ/CYuRqFr/M3ev/IRXgbvoV0sFA6dmjkIX34d8B9/+XH1m
j2j45YSFC6gDEwvsrB652rDY8R2djtRdx0waVP4ssMOmCXSG4r+BLKtqT70SgtKy
K/Vks+EzhVgz2YDNRRaCoPeGfnrlqHbvMEJ81x1FFgrvcb77BUUjacNhoPF6CgaQ
IJEmlobIRQBvjOqCfSsl1fHB8Srmu8TGeU3AnfTXeHhs
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:00 2026 by rpki-client