Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/NpS_oD6fm-O5UOaMpkZigJh2nTc.roa
File: NpS_oD6fm-O5UOaMpkZigJh2nTc.roa (raw, json)
Hash identifier: qIFJnleVwqTPPwrUhkvyWblZMC0jHP9X/BrE9rsE/eA=
Subject key identifier: 36:94:BF:A0:3E:9F:9B:E3:B9:50:E6:8C:A6:46:62:80:98:76:9D:37
Certificate issuer: /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial: 019F23689ED8788C4AD587D6C94437A0673B
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/NpS_oD6fm-O5UOaMpkZigJh2nTc.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15717
IP address blocks: 213.30.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9e:d8:78:8c:4a:d5:87:d6:c9:44:37:a0:67:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3694bfa03e9f9be3b950e68ca646628098769d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:bf:b3:ea:ab:6e:ec:fc:a5:2a:21:e2:26:
c4:4a:6f:52:19:80:1d:2e:1e:49:4d:ac:c2:9b:2f:
8a:27:f2:ec:a5:24:a1:b4:ac:db:fa:7e:00:6d:61:
f1:3e:43:b6:f0:44:c8:c6:f5:38:c5:37:1d:6d:95:
99:b9:f6:54:f4:62:fb:ec:72:48:1e:ec:b2:45:e4:
97:4f:d6:f9:77:40:49:3d:4d:52:47:e5:77:9a:42:
8e:e6:15:7b:09:4d:ee:04:c6:95:b0:53:94:0e:d1:
d5:a7:b9:bc:f6:a5:bf:c0:79:86:d0:f4:50:a8:97:
d4:eb:a8:fc:25:2a:aa:81:a5:39:7c:8e:a8:bc:fb:
0b:9d:15:be:6d:c9:8d:b4:2f:69:07:3a:23:25:76:
4d:a6:c0:4b:c4:d2:69:36:39:e2:b8:cf:87:8c:f0:
46:59:8c:a0:7e:ac:c0:3f:43:8b:0e:ab:57:82:08:
5b:ed:a5:89:80:8a:7f:56:5b:0f:0d:37:18:b0:ab:
a6:89:8e:02:55:5f:ce:2a:b8:ba:af:5c:d3:f0:13:
34:c1:eb:52:6c:f8:2e:21:1e:98:b3:fd:82:70:e7:
3a:5e:4f:d7:cd:5f:71:95:04:6e:e4:10:94:08:c6:
1b:72:f4:ba:07:1d:12:64:42:94:2f:c2:4a:54:e8:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:BF:A0:3E:9F:9B:E3:B9:50:E6:8C:A6:46:62:80:98:76:9D:37
X509v3 Authority Key Identifier:
keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/NpS_oD6fm-O5UOaMpkZigJh2nTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.30.192.0/22
Signature Algorithm: sha256WithRSAEncryption
91:98:70:3c:79:64:d9:e4:f7:6f:17:d5:bf:3f:5a:96:26:18:
d4:28:9d:e2:9e:89:f4:82:af:a3:9b:12:5f:8e:9a:42:c1:f5:
b0:d7:f3:6e:5e:4c:36:46:20:eb:3d:ee:51:79:b7:6c:a9:54:
82:ec:16:b5:6d:c2:a6:c4:78:d5:8e:4f:4d:5c:20:21:d8:83:
83:68:cf:9a:73:ea:d2:1a:5a:17:8c:56:5b:db:6c:ae:01:dd:
19:b0:be:e0:0e:d9:7e:c1:7e:55:61:87:55:7d:1c:4b:0b:b0:
17:ca:96:af:b3:9f:5e:d2:5a:07:fd:59:ef:80:ea:2b:97:7b:
cf:5a:3e:21:41:d5:60:ab:1a:53:0a:e0:a3:67:98:38:21:d8:
9d:25:99:66:e6:11:8c:6f:84:b4:38:d7:c5:57:65:d3:47:5e:
20:48:c8:ee:e4:51:4c:4f:3f:f5:52:b6:58:01:72:ac:27:a8:
16:7e:c4:1e:2d:89:5b:00:88:d6:c4:a1:c2:26:ac:dd:da:00:
42:b0:69:d0:23:9d:a5:95:e0:7d:c2:cd:5a:80:52:e4:0e:e6:
37:d7:2f:c0:be:03:72:57:a6:00:f0:d7:d2:e4:b0:10:7b:6e:
37:55:3b:a9:6a:23:02:43:4e:28:17:e9:3b:7a:a5:02:69:46:
9d:04:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:19 2026 by rpki-client