Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa
File: 1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa (raw, json)
Hash identifier: 8iv62DOUTXS1sb7lp8Qzp9Cwkm97PeNUgrv/Ly0R5Ww=
Subject key identifier: F8:D3:82:2D:9A:07:72:D1:51:C4:B3:3E:AF:98:05:D9:73:4A:98:DE
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019C6622F6987D35A55C7AA60D40BE5597B6
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa
Signing time: Mon 16 Feb 2026 11:08:13 +0000
ROA not before: Mon 16 Feb 2026 11:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212157
IP address blocks: 147.181.0.0/22 maxlen: 24
147.181.24.0/23 maxlen: 24
147.181.26.0/23 maxlen: 24
185.52.4.0/22 maxlen: 24
2a04:9a00:1010::/44 maxlen: 48
2a04:9a00:1040::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:22:f6:98:7d:35:a5:5c:7a:a6:0d:40:be:55:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 16 11:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8d3822d9a0772d151c4b33eaf9805d9734a98de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:c5:69:6c:b9:fb:98:ff:b7:aa:c1:30:21:
1a:7b:61:a2:3f:6c:72:ce:ec:49:39:ba:2a:f7:29:
79:cf:e1:ff:2b:83:f6:57:1a:00:48:68:65:7c:37:
24:f5:1d:57:da:d0:9c:12:f3:c7:b6:85:de:5b:0b:
67:f9:10:a1:8f:04:34:85:53:20:a2:4d:2c:cb:78:
90:83:9c:c9:bf:b5:30:6f:ec:23:b5:e0:7e:95:f2:
77:6e:43:3b:57:3c:0f:c3:55:e7:f1:17:0c:af:07:
3b:06:65:30:a1:9d:50:f6:5f:56:e7:cc:7a:b5:49:
f2:e3:fb:1f:3d:25:e8:9d:b2:0c:60:e5:3c:85:b7:
e0:54:a6:45:af:90:a3:19:87:d8:ef:fe:92:91:57:
95:83:fc:91:e3:b5:02:22:f2:bc:06:21:02:74:5c:
e4:83:44:a4:8d:7f:07:d0:87:89:fc:fb:30:2e:67:
f6:53:92:15:bc:dc:4c:4f:5c:66:47:ed:25:f3:f7:
93:0a:31:c9:0e:c5:f4:2f:5c:46:14:2a:42:74:b5:
a5:d0:c0:54:23:7f:7f:87:c3:c2:5f:02:ff:39:50:
51:20:ed:48:38:60:1a:54:1b:1c:de:62:9a:ad:e8:
7e:67:18:50:89:d2:11:6a:b5:f3:ef:97:c7:1f:de:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:82:2D:9A:07:72:D1:51:C4:B3:3E:AF:98:05:D9:73:4A:98:DE
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.0.0/22
147.181.24.0/22
185.52.4.0/22
IPv6:
2a04:9a00:1010::/44
2a04:9a00:1040::/44
Signature Algorithm: sha256WithRSAEncryption
7a:bb:e2:e0:82:bc:6b:0e:ea:2a:8b:eb:e6:38:c3:68:38:82:
09:6d:b7:e3:f8:9c:0a:5b:0e:a8:cc:48:6d:86:da:cd:2f:15:
60:dd:26:1b:c3:8b:f2:76:93:2d:12:33:c1:9b:6c:25:66:09:
61:93:b0:a1:94:59:9a:08:58:61:f9:1c:5d:88:86:f3:09:0c:
9e:ed:05:81:d5:f3:86:5d:be:e8:7d:95:b1:91:98:ef:bc:50:
a7:25:9e:2f:f1:91:96:a1:f9:a2:ea:f7:ba:7a:07:ef:5e:f5:
0e:62:0c:7a:fb:de:c3:14:6b:32:ab:e3:fd:7c:c2:29:fa:f1:
c1:4b:ad:c4:63:9e:dc:a7:d5:ac:b1:a6:e1:71:53:dd:a6:6a:
88:15:b1:da:c1:93:08:f8:c7:7f:72:95:d9:13:dd:f3:25:3f:
f6:9c:d8:ea:67:1b:e9:cb:d9:e8:41:e6:4c:d8:04:ab:9f:34:
19:23:2e:a1:13:7a:8e:c4:a5:78:27:55:1a:25:fd:7f:91:cc:
8a:cb:84:44:59:91:31:5a:2c:2c:c4:ce:d5:69:63:58:96:2b:
92:b1:05:f7:33:44:dc:96:2d:06:23:82:99:e8:d0:79:e6:81:
a5:d7:3a:85:e4:ee:9b:11:4c:8c:ad:0a:07:e3:3f:14:23:40:
46:cf:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:51 2026 by rpki-client