Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/n4exwERefxehosNF3vrmda7cVQg.roa
File: n4exwERefxehosNF3vrmda7cVQg.roa (raw, json)
Hash identifier: Yi7HEiIp9Gzv2dhWbsT1GkQVLHDCPjnmDLNUTFuloG0=
Subject key identifier: 9F:87:B1:C0:44:5E:7F:17:A1:A2:C3:45:DE:FA:E6:75:AE:DC:55:08
Certificate issuer: /CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Certificate serial: 019B7C11D1A8A4A4058EBBED5EC575BF39F7
Authority key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/n4exwERefxehosNF3vrmda7cVQg.roa
Signing time: Fri 02 Jan 2026 00:18:21 +0000
ROA not before: Fri 02 Jan 2026 00:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52143
IP address blocks: 188.94.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:d1:a8:a4:a4:05:8e:bb:ed:5e:c5:75:bf:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Validity
Not Before: Jan 2 00:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f87b1c0445e7f17a1a2c345defae675aedc5508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:6a:d9:10:56:7c:b8:b6:ff:6e:ed:7c:11:
08:31:42:98:fe:5f:31:c2:1e:09:9d:f6:a1:67:17:
4e:e1:4e:7b:ba:40:50:19:7b:5d:fb:bd:1a:36:c3:
a7:f9:c8:87:80:0a:fa:af:0d:b5:36:5c:55:a2:3b:
45:0c:cd:16:da:bc:4c:1d:92:d3:13:57:10:73:1a:
60:09:4c:bb:30:95:de:e3:ac:3c:07:9c:21:0b:26:
f0:68:d3:df:8d:e8:f2:9d:f4:ba:3d:ef:74:32:46:
61:b7:24:63:db:3f:fd:8e:78:a9:35:26:b3:71:6c:
73:1e:61:47:31:ee:c1:4a:61:22:24:92:c6:92:7b:
8b:e5:1b:b9:7f:e9:5c:d1:8b:4e:f7:37:98:e3:0e:
22:30:e3:08:db:0e:56:38:79:35:05:bd:00:28:62:
fa:a6:77:15:2f:85:58:24:3c:a5:35:32:86:5d:5e:
8d:c8:a7:b3:94:41:d2:fc:de:41:e8:c6:54:7f:50:
28:e1:9d:4d:e6:cc:b4:07:5a:43:1d:2d:45:be:59:
4b:7b:15:6b:4c:34:20:95:00:d9:e6:02:1e:8c:c1:
99:ca:72:76:f3:58:52:c9:53:66:19:3f:15:2c:f0:
4e:c8:c5:45:20:f5:58:5b:0a:cc:a7:25:7d:60:f9:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:B1:C0:44:5E:7F:17:A1:A2:C3:45:DE:FA:E6:75:AE:DC:55:08
X509v3 Authority Key Identifier:
keyid:36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/n4exwERefxehosNF3vrmda7cVQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.0.0/22
Signature Algorithm: sha256WithRSAEncryption
03:18:9f:20:1b:a0:2c:54:43:37:37:63:09:0a:93:5b:be:4a:
19:5e:76:88:e9:10:d3:ea:4d:dd:36:0d:8d:31:72:90:fa:6a:
3f:2b:36:90:3b:9a:f3:9f:4a:f4:d7:6e:e2:9f:9a:fd:68:2f:
fc:5b:66:ca:20:ba:bb:70:94:6f:bf:61:f2:77:b6:15:21:41:
e2:15:8e:48:8e:81:4c:81:e3:2c:4a:db:48:09:b9:ad:d5:b2:
75:1e:c1:92:15:ed:0e:3a:41:b8:52:c2:00:66:a9:2f:c2:a4:
a0:89:35:53:8a:f1:ce:1b:76:84:57:50:9e:7d:e3:dd:0c:b9:
8c:46:9e:7c:07:0c:f0:ee:72:67:1f:a3:4b:d0:37:3b:45:aa:
4f:6c:ae:62:68:af:79:30:c6:c1:b9:65:a7:4b:91:9a:f4:6e:
66:c1:46:6f:d7:06:9f:36:44:2a:84:5c:b9:cb:ce:0f:a0:9d:
19:d0:c8:0b:36:09:86:cc:55:06:44:8e:6e:e9:c3:53:4a:b6:
07:96:6f:5e:47:45:91:61:d3:22:43:e8:cc:59:88:26:13:3c:
18:fd:8d:ce:a4:a5:eb:eb:57:71:ae:38:d9:67:01:44:61:74:
3f:77:74:fb:9d:14:36:1b:0b:82:df:d3:24:91:4f:31:91:10:
1b:85:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:58 2026 by rpki-client