Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/NRT4C3Pjv2I_O_e87vpe9r63k4s.roa
File: NRT4C3Pjv2I_O_e87vpe9r63k4s.roa (raw, json)
Hash identifier: D1obKpZVoMMUypxjp2MJaz2giSb4WOep13hUdjC2bqs=
Subject key identifier: 35:14:F8:0B:73:E3:BF:62:3F:3B:F7:BC:EE:FA:5E:F6:BE:B7:93:8B
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019CF2DC4BF145DEDA1756AEF5DA5D23A8AF
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/NRT4C3Pjv2I_O_e87vpe9r63k4s.roa
Signing time: Sun 15 Mar 2026 18:57:29 +0000
ROA not before: Sun 15 Mar 2026 18:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215659
IP address blocks: 150.40.117.0/24 maxlen: 24
150.40.120.0/24 maxlen: 24
2a0e:bfc7:1400::/48 maxlen: 48
2a0e:bfc7:1401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:dc:4b:f1:45:de:da:17:56:ae:f5:da:5d:23:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Mar 15 18:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3514f80b73e3bf623f3bf7bceefa5ef6beb7938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:d7:2d:81:44:16:a0:1b:5d:8b:9d:1f:44:
59:07:44:05:33:7b:58:12:bc:8a:1c:69:12:dc:c6:
3c:ca:5b:b3:3b:33:86:ee:39:c9:c6:b8:1a:72:f4:
3f:6d:37:fa:ad:c3:3c:30:8e:dc:ba:98:b1:7e:fd:
a6:16:32:c9:dd:a2:52:3a:1a:1b:61:35:95:03:df:
df:8a:ab:0e:94:95:b0:54:f2:8d:41:d8:31:27:ef:
a5:1b:4c:32:0b:a7:7a:15:d5:4d:de:11:2d:39:a8:
d9:ef:1c:5e:82:a8:b6:65:7a:4e:ec:2d:6e:1d:c3:
8e:a7:56:85:bd:81:37:79:59:00:27:b9:bc:dd:d6:
df:3d:6b:ab:c8:87:45:f4:f2:45:9d:92:53:4c:20:
58:a5:e0:a7:e9:72:89:3d:48:31:c4:8c:e6:7b:29:
8c:4e:5d:db:29:41:58:d8:f4:b9:9b:e3:c5:03:0a:
d8:42:e2:13:82:79:47:38:4d:45:a5:ac:d8:fe:c5:
d1:92:96:aa:a2:1d:d2:1a:20:17:4d:b1:84:bc:43:
25:6a:4e:23:29:c8:37:b8:8d:f6:f4:99:4b:5c:84:
19:d2:14:1b:12:79:d8:1b:32:0d:00:62:cc:6b:a4:
79:c1:38:01:46:1a:6f:8d:17:77:6e:8a:ea:89:73:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:F8:0B:73:E3:BF:62:3F:3B:F7:BC:EE:FA:5E:F6:BE:B7:93:8B
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/NRT4C3Pjv2I_O_e87vpe9r63k4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.117.0/24
150.40.120.0/24
IPv6:
2a0e:bfc7:1400::/47
Signature Algorithm: sha256WithRSAEncryption
1d:f5:27:07:dc:1e:30:86:b9:df:91:40:14:9d:67:3c:9d:36:
3d:5e:4f:8d:a0:d9:e8:28:31:03:3c:92:c6:ac:87:19:39:f5:
19:38:8e:04:e9:9f:06:e8:86:70:9e:df:59:d2:64:6a:31:52:
d7:76:48:51:ed:c6:f4:12:47:c0:1d:ea:0a:32:b2:d5:20:e9:
f6:89:5d:f3:e1:1c:ba:3e:1c:f6:62:73:53:57:47:52:cc:f6:
c6:f8:6f:3e:ee:ba:fb:aa:9e:83:a3:fb:3f:72:3f:5b:86:cc:
ac:3e:64:59:a9:0f:fa:66:92:86:62:bf:17:7f:d9:da:20:48:
79:1d:36:70:1d:9c:96:8a:09:4d:71:6b:8a:bf:50:33:da:da:
a9:2d:83:3d:f3:ce:07:ad:43:bf:8c:cf:7b:89:3b:65:19:80:
b6:73:bc:9e:34:07:55:09:e5:67:14:7c:54:66:4e:59:d4:39:
75:cd:46:fe:16:3c:4d:b6:28:34:e7:6f:44:aa:a2:a4:58:3e:
fc:f0:96:93:b7:3e:a0:16:77:27:17:b2:3e:9b:d3:8b:89:75:
b4:82:fb:53:2a:fe:9d:09:cb:52:15:b5:de:8d:d8:89:8a:e7:
94:8b:ca:d1:ee:5c:b6:9f:ce:fa:6f:86:7a:b4:00:4a:76:6c:
07:b4:d9:79
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZzy3EvxRd7aF1au9dpdI6ivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjYwMzE1MTg1NzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTE0ZjgwYjczZTNiZjYyM2YzYmY3YmNlZWZhNWVmNmJlYjc5MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9nXLYFEFqAbXYudH0RZB0QFM3tY
EryKHGkS3MY8yluzOzOG7jnJxrgacvQ/bTf6rcM8MI7cupixfv2mFjLJ3aJSOhob
YTWVA9/fiqsOlJWwVPKNQdgxJ++lG0wyC6d6FdVN3hEtOajZ7xxegqi2ZXpO7C1u
HcOOp1aFvYE3eVkAJ7m83dbfPWuryIdF9PJFnZJTTCBYpeCn6XKJPUgxxIzmeymM
Tl3bKUFY2PS5m+PFAwrYQuITgnlHOE1FpazY/sXRkpaqoh3SGiAXTbGEvEMlak4j
Kcg3uI329JlLXIQZ0hQbEnnYGzINAGLMa6R5wTgBRhpvjRd3borqiXM4rQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDUU+Atz479iPzv3vO76Xva+t5OLMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvTlJUNEMzUGp2MklfT19lODd2cGU5cjYzazRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAlih1AwQA
lih4MA8EAgACMAkDBwEqDr/HFAAwDQYJKoZIhvcNAQELBQADggEBAB31JwfcHjCG
ud+RQBSdZzydNj1eT42g2egoMQM8ksashxk59Rk4jgTpnwbohnCe31nSZGoxUtd2
SFHtxvQSR8Ad6goystUg6faJXfPhHLo+HPZic1NXR1LM9sb4bz7uuvuqnoOj+z9y
P1uGzKw+ZFmpD/pmkoZivxd/2dogSHkdNnAdnJaKCU1xa4q/UDPa2qktgz3zzget
Q7+Mz3uJO2UZgLZzvJ40B1UJ5WcUfFRmTlnUOXXNRv4WPE22KDTnb0SqoqRYPvzw
lpO3PqAWdycXsj6b04uJdbSC+1Mq/p0Jy1IVtd6N2ImK55SLytHuXLafzvpvhnq0
AEp2bAe02Xk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:40 2026 by rpki-client