Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/nFTF0VkjXRKqCPY796T1GnzkqjY.roa
File: nFTF0VkjXRKqCPY796T1GnzkqjY.roa (raw, json)
Hash identifier: WVddRHUkGr3zZHWqGX5a7FnpsfkXVaD8LmCGuvGSXrk=
Subject key identifier: 9C:54:C5:D1:59:23:5D:12:AA:08:F6:3B:F7:A4:F5:1A:7C:E4:AA:36
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A0AF29CBF4E215683CA5DA78DDCB0D8A95
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/nFTF0VkjXRKqCPY796T1GnzkqjY.roa
Signing time: Thu 17 Sep 2026 11:39:07 +0000
ROA not before: Thu 17 Sep 2026 11:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205820
IP address blocks: 46.53.196.0/24 maxlen: 24
46.53.209.0/24 maxlen: 24
128.140.254.0/24 maxlen: 24
178.163.224.0/19 maxlen: 19
178.163.230.0/23 maxlen: 23
185.183.120.0/22 maxlen: 22
185.183.120.0/24 maxlen: 24
185.183.121.0/24 maxlen: 24
185.204.116.0/22 maxlen: 22
2a0a:f240::/29 maxlen: 29
2a0a:f241::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:29:cb:f4:e2:15:68:3c:a5:da:78:dd:cb:0d:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Sep 17 11:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c54c5d159235d12aa08f63bf7a4f51a7ce4aa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:a7:1e:e5:dd:e3:24:98:e9:cf:0d:00:1e:
07:d8:66:d4:b7:d9:25:77:98:7b:f7:60:db:8b:35:
15:83:48:16:d2:97:fd:d9:c0:23:df:a3:7a:a8:01:
a7:c3:27:d3:29:e0:40:11:f9:97:99:f9:97:40:43:
98:ab:b7:60:3c:8a:57:6d:90:80:82:48:38:11:f0:
06:dd:69:c8:1b:74:23:4f:e5:d4:e8:3e:36:2e:a5:
15:f3:19:dc:b1:54:6b:57:e2:b8:6c:d0:bc:38:67:
bf:af:58:58:4f:ca:0d:34:43:c7:01:b9:f8:f6:0f:
18:0e:5d:55:9c:60:51:f5:f2:4e:be:d2:6c:95:c7:
26:b7:2f:07:ba:a6:d5:9e:64:1f:54:66:c0:9a:d6:
29:f7:39:45:dd:d4:76:04:26:8c:57:02:2a:1e:59:
31:7b:d0:ec:b7:1b:ec:92:cb:b2:a3:50:3f:92:7b:
ea:0e:9e:95:50:ae:91:2e:34:39:70:37:72:9f:f1:
88:de:dd:b2:b5:74:38:24:95:05:9b:16:e4:7e:6d:
6d:a5:a2:0a:e4:8a:1c:f9:e1:fe:67:22:78:90:91:
05:11:35:3e:8f:ce:76:c5:28:e2:6b:17:a0:fe:46:
ae:68:4e:a6:f3:e3:48:7b:17:17:5d:75:bc:67:21:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:C5:D1:59:23:5D:12:AA:08:F6:3B:F7:A4:F5:1A:7C:E4:AA:36
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/nFTF0VkjXRKqCPY796T1GnzkqjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.53.196.0/24
46.53.209.0/24
128.140.254.0/24
178.163.224.0/19
185.183.120.0/22
185.204.116.0/22
IPv6:
2a0a:f240::/29
Signature Algorithm: sha256WithRSAEncryption
b1:15:ac:3f:12:5e:25:93:f1:28:1b:02:a1:ee:f9:d7:f3:be:
88:9e:85:2a:02:78:91:ea:a0:85:6d:46:99:15:64:79:2e:5c:
ad:f3:b9:56:fc:80:96:91:fe:b5:ad:1e:77:79:89:54:45:2a:
35:16:46:dc:a1:c8:99:f1:8d:5a:ab:d3:67:ed:0c:cc:03:4c:
e5:13:35:6f:ec:92:96:64:6f:81:54:4b:20:64:0a:4b:13:dc:
b2:9f:57:7f:a9:56:93:79:ac:62:86:08:ca:04:d1:fc:a0:00:
8c:01:d1:42:18:66:63:77:60:88:b1:dc:40:7c:3e:23:c5:4f:
1d:d2:5b:71:6b:b9:b2:b7:50:bf:a6:77:83:e2:d1:55:a5:4e:
e2:e6:5e:4e:e1:df:92:51:eb:25:a0:e0:2e:3b:15:df:8c:d7:
d4:16:a6:ea:0d:66:01:45:0e:f4:68:a0:f3:7f:2b:98:70:57:
d3:cc:07:c5:ad:43:11:71:5c:33:dc:f4:42:31:01:6e:3f:f9:
76:0c:38:36:13:54:2d:03:e9:b8:50:f5:17:6a:17:b5:7d:9a:
81:c4:06:ad:67:9f:ee:d7:79:35:f4:e3:1d:d4:6a:07:93:87:
30:23:a2:c2:69:0f:ac:d5:fc:f6:45:d5:dd:58:15:66:35:77:
20:e6:ae:43
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAaCvKcv04hVoPKXaeN3LDYqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1
NjliM2MwHhcNMjYwOTE3MTEzOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzU0YzVkMTU5MjM1ZDEyYWEwOGY2M2JmN2E0ZjUxYTdjZTRhYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fanHuXd4ySY6c8NAB4H2GbUt9kl
d5h792DbizUVg0gW0pf92cAj36N6qAGnwyfTKeBAEfmXmfmXQEOYq7dgPIpXbZCA
gkg4EfAG3WnIG3QjT+XU6D42LqUV8xncsVRrV+K4bNC8OGe/r1hYT8oNNEPHAbn4
9g8YDl1VnGBR9fJOvtJslccmty8HuqbVnmQfVGbAmtYp9zlF3dR2BCaMVwIqHlkx
e9Dstxvsksuyo1A/knvqDp6VUK6RLjQ5cDdyn/GI3t2ytXQ4JJUFmxbkfm1tpaIK
5Ioc+eH+ZyJ4kJEFETU+j852xSjiaxeg/kauaE6m8+NIexcXXXW8ZyEadwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFJxUxdFZI10Sqgj2O/ek9Rp85Ko2MB8GA1UdIwQY
MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt
OThhMWQ2NWNmZTZmLzEvbkZURjBWa2pYUktxQ1BZNzk2VDFHbnprcWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm
LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQALjXEAwQA
LjXRAwQAgIz+AwQFsqPgAwQCubd4AwQCucx0MA0EAgACMAcDBQMqCvJAMA0GCSqG
SIb3DQEBCwUAA4IBAQCxFaw/El4lk/EoGwKh7vnX876InoUqAniR6qCFbUaZFWR5
Llyt87lW/ICWkf61rR53eYlURSo1FkbcociZ8Y1aq9Nn7QzMA0zlEzVv7JKWZG+B
VEsgZApLE9yyn1d/qVaTeaxihgjKBNH8oACMAdFCGGZjd2CIsdxAfD4jxU8d0ltx
a7myt1C/pneD4tFVpU7i5l5O4d+SUesloOAuOxXfjNfUFqbqDWYBRQ70aKDzfyuY
cFfTzAfFrUMRcVwz3PRCMQFuP/l2DDg2E1QtA+m4UPUXahe1fZqBxAatZ5/u13k1
9OMd1GoHk4cwI6LCaQ+s1fz2RdXdWBVmNXcg5q5D
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:35:43 2026 by rpki-client