Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa
File: nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa (raw, json)
Hash identifier: pKofBy3cQfkluUFTKQ828uE/AR/hkHrzVvjmkrkzCnU=
Subject key identifier: 9E:AF:5B:81:26:EF:03:44:C1:DD:A2:A8:23:62:D2:6D:DC:66:56:96
Certificate issuer: /CN=3d0876c00e0376f7733db244300120d3140bdbdd
Certificate serial: 01A07B0B684069241856E2DDF08EDF6B1A69
Authority key identifier: 3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa
Signing time: Mon 07 Sep 2026 08:45:40 +0000
ROA not before: Mon 07 Sep 2026 08:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 145.255.128.0/21 maxlen: 21
185.131.24.0/22 maxlen: 22
2a03:e280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:0b:68:40:69:24:18:56:e2:dd:f0:8e:df:6b:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0876c00e0376f7733db244300120d3140bdbdd
Validity
Not Before: Sep 7 08:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eaf5b8126ef0344c1dda2a82362d26ddc665696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:b9:1f:ba:e4:c6:a9:a3:fd:a0:89:7f:7d:
b2:88:ad:f3:44:be:9e:44:6a:60:c3:2f:f7:f1:5b:
de:fb:ec:9f:68:75:db:c4:cb:a9:06:79:fb:24:0d:
3f:ef:72:81:af:fc:35:2c:34:ae:da:84:c3:ad:b0:
74:2d:88:4b:0f:ec:b4:44:ed:9c:e6:01:cf:b3:07:
c9:57:81:9b:e6:52:0a:9d:43:1b:df:13:b9:26:4b:
57:48:7d:f3:10:8a:01:b2:48:3e:68:7d:1c:4a:26:
89:6f:d3:32:b9:a7:c9:c3:69:3f:52:a0:62:5b:0f:
95:b0:f0:33:47:c9:99:cc:6f:1b:ae:3d:1b:95:3f:
59:a5:2b:6f:9b:f3:0a:0e:c0:bd:7d:67:47:9d:60:
10:56:77:f3:94:a0:6c:3d:23:28:0a:66:32:f3:a8:
78:d7:7d:0b:37:b1:07:b3:4f:6f:cd:62:ce:d5:8e:
0f:5b:ad:af:f8:44:4f:c4:a6:38:d6:5a:4f:eb:e1:
c2:d4:a0:6e:c8:d4:a4:d0:dd:c3:d5:b5:0e:ed:b8:
05:09:c1:9f:3d:1b:12:8e:28:02:f2:8b:c8:58:cc:
e4:76:20:67:c9:64:d9:41:31:32:04:c5:11:cf:25:
80:e4:94:a9:07:c5:84:7a:dd:a7:12:74:1b:c8:f8:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:5B:81:26:EF:03:44:C1:DD:A2:A8:23:62:D2:6D:DC:66:56:96
X509v3 Authority Key Identifier:
keyid:3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.255.128.0/21
185.131.24.0/22
IPv6:
2a03:e280::/32
Signature Algorithm: sha256WithRSAEncryption
34:71:e4:b4:ea:88:50:6f:e5:01:e9:49:b3:b0:51:19:59:0a:
10:4a:fd:fe:3b:0f:a0:c0:df:0f:13:98:ad:9e:54:86:3c:41:
25:e4:72:d0:08:9e:20:3a:de:42:01:3a:7b:a7:d8:ca:b4:c5:
23:73:29:38:10:b3:e8:98:59:94:3f:96:26:45:0a:17:3a:43:
b3:57:ec:d2:cb:95:84:2f:63:cd:07:b9:7f:a0:f0:4c:79:00:
5e:c8:bb:7b:7a:69:90:cd:47:5b:ad:8e:f2:7b:61:9b:52:32:
a7:2d:51:a3:2a:b5:18:72:19:bd:2e:b4:33:f8:da:0f:0a:e3:
5b:90:48:b9:8b:d0:aa:b3:19:c4:97:51:0d:fe:49:d3:2b:8c:
02:a1:2f:04:3b:6c:f5:eb:95:a0:7b:b3:a9:bc:0c:c0:a8:d6:
5d:a3:4f:c7:29:1c:fb:70:72:51:f1:ae:9f:58:9c:cd:18:f9:
f6:70:61:4c:d4:c1:72:0e:11:5d:a0:24:eb:bc:12:50:f5:b1:
e4:ec:29:17:1c:e5:db:1a:91:84:10:0e:68:cb:47:93:d8:91:
8c:49:ef:b9:0b:f0:24:23:4b:af:76:ec:07:95:ed:c1:68:b3:
cf:bf:b9:50:b3:38:e8:d1:ba:75:e9:07:d9:b7:32:25:8a:87:
26:0e:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:37 2026 by rpki-client