Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa
File: nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa (raw, json)
Hash identifier: KrRY9bn7xQ6+HYYd/c9njJzJQr8DpPXzGZe5ZanhC8s=
Subject key identifier: 9D:08:02:92:B8:F1:D9:5B:B2:BF:A5:D4:E9:9D:57:FF:1C:83:47:67
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01A0C2B530BE37DFEFAE32851B3CEB03835B
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa
Signing time: Mon 21 Sep 2026 06:44:09 +0000
ROA not before: Mon 21 Sep 2026 06:44:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51411
IP address blocks: 31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
178.236.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:b5:30:be:37:df:ef:ae:32:85:1b:3c:eb:03:83:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 21 06:44:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d080292b8f1d95bb2bfa5d4e99d57ff1c834767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:13:f9:29:79:15:1c:f0:94:8c:2d:74:44:
25:d6:21:15:c9:2b:ba:21:8e:14:7f:fd:a5:79:65:
69:e4:0c:d1:b4:cc:d1:61:cb:77:48:f6:2b:c5:8e:
ed:15:2a:42:2f:60:bd:82:b6:98:9a:b2:28:51:33:
c1:19:67:02:32:ae:ea:11:2f:05:7e:03:6e:7f:cb:
53:7d:8c:73:93:ef:99:e0:60:31:61:8b:e8:b7:63:
37:48:27:02:43:6a:17:a5:ee:7a:3a:99:c4:99:9a:
23:72:9c:43:7c:8b:53:04:bc:1e:73:e0:7a:e8:75:
a0:8a:4e:87:2e:4f:dc:92:d9:1c:c5:f4:db:7d:00:
91:12:c6:19:23:6c:c4:a9:75:ad:e0:8f:f4:9b:fd:
05:81:24:7f:3a:f1:99:37:50:7e:d6:b9:18:1a:3b:
30:51:c2:01:c0:46:1c:79:7e:86:ce:1c:5f:ff:3b:
5a:93:6e:e2:e7:a8:00:6f:97:5e:fe:3d:e6:e2:76:
1b:be:cb:fb:d1:89:12:e6:ab:a8:3a:38:a7:2a:5e:
07:30:08:9b:28:9b:54:44:00:c5:57:1b:3c:22:9b:
cf:7b:c0:c8:13:68:2d:8e:5a:e7:f6:5a:bf:9d:2d:
d8:63:ff:98:4e:cc:2b:78:fe:01:df:e2:3c:ff:91:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:02:92:B8:F1:D9:5B:B2:BF:A5:D4:E9:9D:57:FF:1C:83:47:67
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.33.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d7:29:04:ad:bc:25:0c:2d:57:f6:f8:33:99:12:32:97:75:
79:59:7b:96:7a:5c:55:00:75:3d:89:05:f5:a2:c9:35:9c:f4:
29:27:c6:f6:c3:8d:bd:e8:57:2d:cd:0f:f4:ee:2d:cb:0e:2a:
7e:11:73:9f:35:99:68:5e:ec:f7:89:a0:a8:36:94:2e:1c:53:
43:d0:ba:03:bf:85:b0:e3:b7:81:ba:82:2e:56:62:3a:52:5f:
fd:6d:47:fd:93:fe:ce:d8:34:26:3d:8e:e6:2b:33:38:17:64:
e3:b4:1c:82:05:be:dd:81:83:05:53:e0:38:df:13:d3:bb:e8:
48:74:c7:08:d2:b0:40:7c:ff:15:45:41:af:0c:05:f0:28:38:
a6:80:fe:b9:fa:89:ca:44:95:28:75:48:75:cb:4c:07:29:94:
a9:46:e0:ca:a5:b0:27:f9:80:34:d3:7a:2c:ea:20:6a:0e:fe:
e8:6c:1d:2f:b0:68:46:8c:eb:d5:6b:d0:f1:5b:7f:97:10:28:
8f:07:d3:f2:ef:1c:92:21:5f:60:da:c9:6a:03:cb:a8:9d:70:
ba:09:94:25:dc:a0:42:77:c6:29:a6:f7:c1:fb:bb:7f:58:64:
4d:82:24:f4:61:fc:02:07:c8:6e:75:f4:07:43:e3:3a:e6:0f:
e2:5b:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:37:27 2026 by rpki-client