Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa
File: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (raw, json)
Hash identifier: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=
Subject key identifier: 9C:E5:B0:FC:BA:EB:D9:B8:13:F2:A9:4A:B3:20:F8:FD:88:A6:B6:1E
Certificate issuer: /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial: 019F236922F3D10AC90B6DEEB6AC0EB827D1
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 152.71.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:22:f3:d1:0a:c9:0b:6d:ee:b6:ac:0e:b8:27:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ce5b0fcbaebd9b813f2a94ab320f8fd88a6b61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:7e:36:a1:21:d6:26:49:08:97:46:41:4c:
35:74:e7:54:2d:19:36:54:08:d6:cd:20:62:ed:1d:
b1:c9:32:a5:ec:47:ff:ae:59:25:9d:3a:5a:56:33:
cd:19:bf:bd:99:0c:71:a3:0e:d7:bb:e0:c2:70:ab:
4d:0f:71:e3:34:3f:f7:ff:7a:f9:47:c1:a3:db:0c:
46:3b:f6:c1:fc:71:e3:0e:6b:8d:6d:46:f8:62:2e:
90:7a:98:53:60:51:9a:60:cb:a2:e2:9e:93:d7:a6:
4b:4a:69:b2:37:27:b8:49:66:6a:0a:11:be:79:52:
d8:af:d4:71:fa:3d:e1:e7:84:24:e2:32:ef:d6:0b:
bd:31:6b:53:02:65:c0:4b:37:f9:c5:31:3c:4d:30:
76:e7:b8:54:64:48:c9:a4:cc:26:aa:0c:e9:3a:07:
88:23:41:fb:ca:c4:a5:26:eb:21:d0:f2:00:f9:d1:
df:49:88:0d:9e:24:32:d3:e8:9e:a7:d1:69:ee:9e:
da:c0:34:fb:61:18:3f:57:bd:92:ed:75:b2:c1:e8:
b9:c5:08:6b:7d:f5:ed:dc:18:a1:6c:bd:2e:d3:f2:
6d:f6:97:39:1c:67:86:fb:ba:d8:a8:f3:09:27:14:
0a:48:5b:bd:af:49:70:0a:73:e3:20:b6:e3:4f:92:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:B0:FC:BA:EB:D9:B8:13:F2:A9:4A:B3:20:F8:FD:88:A6:B6:1E
X509v3 Authority Key Identifier:
keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.71.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:b2:59:2b:d2:3f:ca:66:3e:dc:66:0f:c9:ab:50:fb:6a:b3:
d8:10:06:d4:97:4f:9a:36:21:9f:6e:7d:24:e3:87:58:38:6f:
83:23:78:10:11:cc:b8:de:1e:9b:3e:b7:a3:cd:a3:b7:cf:21:
4e:9e:75:42:e9:3b:12:03:82:60:a7:51:1a:ef:ff:8e:d8:75:
1d:bb:5f:68:d6:46:06:1a:cc:bb:99:d5:f9:36:57:37:cf:bb:
f5:5e:7e:0a:10:27:d9:46:9f:f7:fa:49:68:3f:3f:f7:8a:da:
ad:d5:88:4d:62:8d:a2:aa:70:77:7b:d2:d0:8c:67:90:d8:06:
26:8f:d7:60:4b:86:ee:1d:fe:39:d9:29:9c:e3:93:30:55:c6:
7e:33:52:a5:30:cf:19:08:4f:61:f7:60:ce:18:f3:2d:32:6e:
7a:3b:49:79:28:da:6a:67:5b:a1:7a:9b:3f:39:46:f9:df:77:
7f:7f:c5:10:49:3f:38:0f:c2:be:74:10:c4:d6:47:68:ae:3c:
26:24:ff:79:57:bd:93:65:1d:4b:4b:4b:e2:89:75:e6:61:16:
24:0f:27:c1:ba:3a:0f:31:34:14:37:66:d2:24:93:aa:e5:9f:
b7:1f:e5:f2:36:81:3a:35:84:e0:96:73:cb:29:5c:b9:09:70:
c5:0d:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:54 2026 by rpki-client