Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/n98z2qle9j9RoGcLrh06bUNoVZY.roa
File: n98z2qle9j9RoGcLrh06bUNoVZY.roa (raw, json)
Hash identifier: CBtwp7UwHlaVOr8fW2fX58/bDbCTIdB1ZHIKVtTlbvY=
Subject key identifier: 9F:DF:33:DA:A9:5E:F6:3F:51:A0:67:0B:AE:1D:3A:6D:43:68:55:96
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D219224214C067247849F012244DEA7A3
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/n98z2qle9j9RoGcLrh06bUNoVZY.roa
Signing time: Tue 24 Mar 2026 20:38:38 +0000
ROA not before: Tue 24 Mar 2026 20:38:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 141.133.140.0/24 maxlen: 24
141.133.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:92:24:21:4c:06:72:47:84:9f:01:22:44:de:a7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 24 20:38:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fdf33daa95ef63f51a0670bae1d3a6d43685596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:58:c8:cb:0e:89:a2:55:d6:fe:95:e8:9b:
5c:34:e4:6f:51:96:af:8c:4f:03:ab:6c:da:a7:8c:
c3:83:23:7c:b5:79:ab:56:47:b9:4c:c4:dd:ce:f3:
f2:d9:aa:f6:88:c3:0a:cc:2c:6e:d8:a9:07:32:04:
1f:21:31:a0:fb:28:b9:ef:b1:fb:5a:82:65:cb:e7:
b2:dc:f9:ef:2d:5f:d9:47:7d:ba:43:96:65:34:db:
d6:35:46:d9:07:aa:03:5c:d4:fc:14:69:44:38:0c:
5e:e2:75:1e:12:95:04:e9:ef:19:77:b8:9b:34:88:
60:f9:07:65:23:46:5a:74:0d:d0:8f:c4:d3:cc:7e:
c1:de:d4:a2:22:e1:ad:71:c3:41:59:79:d6:af:92:
84:b3:e0:b9:39:c9:e2:5d:93:cf:df:cf:19:64:a1:
34:70:31:1d:a3:df:64:03:a8:52:9d:a2:5e:d0:d2:
12:c5:fe:0c:ce:fe:3f:5d:f9:3f:b7:2f:eb:e1:77:
9d:76:38:15:89:a1:2e:b0:0d:36:c5:0c:ed:43:e4:
12:c7:40:1b:3f:e3:dd:a7:cb:58:03:b8:18:d6:70:
e0:5a:7c:3e:e0:05:35:1d:bb:37:58:b8:da:4d:1e:
b7:b8:62:f8:1b:2d:27:a4:a8:5c:b3:73:d5:18:18:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:33:DA:A9:5E:F6:3F:51:A0:67:0B:AE:1D:3A:6D:43:68:55:96
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/n98z2qle9j9RoGcLrh06bUNoVZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.133.140.0/23
Signature Algorithm: sha256WithRSAEncryption
20:87:ec:57:1b:94:52:2e:5b:cc:c6:79:e1:d9:e4:61:98:a5:
96:35:89:66:b4:08:3a:ad:8e:ee:ab:11:6b:78:6e:68:e7:ce:
a9:df:31:ee:53:04:ab:49:20:8a:5b:1e:8f:ec:d0:b9:a1:3a:
fe:e1:23:af:23:f9:dd:5a:36:72:48:08:51:b5:ef:69:9b:c0:
6c:37:63:bf:92:7c:ec:38:33:8b:99:50:d4:f6:01:82:a2:c5:
a9:ee:7a:c1:be:ab:b1:9e:70:9a:61:95:b9:22:3f:97:d9:5c:
14:7f:aa:1d:ad:5a:3e:21:49:13:07:16:cd:8c:5f:6f:90:77:
91:a0:4b:b5:ef:99:e7:27:32:a5:23:de:90:23:dc:75:51:2c:
17:bc:55:5a:cc:a6:9b:8d:4d:48:60:c2:39:15:c2:4f:35:69:
9f:77:cd:ba:5c:f0:a8:05:81:09:86:d2:ec:a7:0d:9f:76:28:
99:87:9d:0e:ed:ed:fc:0f:42:67:f9:29:be:b5:9c:d8:f7:b1:
b1:6a:53:25:47:0f:ac:80:d3:5d:6c:d8:13:b7:7d:73:79:f0:
a4:6a:7b:8a:ed:59:0d:f5:bd:57:3b:9f:ae:52:3a:06:db:69:
ef:8a:a1:df:20:94:b0:94:9b:37:23:56:66:82:8a:71:bb:58:
ec:aa:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:15 2026 by rpki-client