Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/N7MO6XqOxKCkBkX2Uvzz63gTmp4.roa
File: N7MO6XqOxKCkBkX2Uvzz63gTmp4.roa (raw, json)
Hash identifier: JPd84bnuJX0kon78s0DqyhH3PxmEVP+d804SDiGPSW0=
Subject key identifier: 37:B3:0E:E9:7A:8E:C4:A0:A4:06:45:F6:52:FC:F3:EB:78:13:9A:9E
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A111EE82728A445C624938D1DB4DFFAD58
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/N7MO6XqOxKCkBkX2Uvzz63gTmp4.roa
Signing time: Tue 06 Oct 2026 15:56:46 +0000
ROA not before: Tue 06 Oct 2026 15:56:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.242.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:ee:82:72:8a:44:5c:62:49:38:d1:db:4d:ff:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 6 15:56:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37b30ee97a8ec4a0a40645f652fcf3eb78139a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:ab:71:0d:ed:22:8b:0b:c1:da:d6:72:44:
25:7a:9d:0c:51:bd:ca:45:be:1d:73:07:6c:b3:c8:
18:cb:d4:53:12:4d:58:87:e0:3e:a2:7c:a1:27:98:
63:9a:5a:70:0e:fc:25:ac:b6:6f:c6:a5:f8:0c:db:
8e:24:9b:11:df:b5:57:12:c2:e8:bb:12:b0:9b:d6:
0c:89:f9:b9:6e:b0:5a:28:6a:66:35:be:07:09:86:
9e:fe:3c:96:73:94:d4:3f:a1:a5:d7:19:b8:26:52:
6d:18:4d:ac:ae:8f:d7:58:c3:57:e9:31:c9:76:e9:
35:6a:e5:7c:64:af:6a:c3:ce:71:9f:ea:d3:91:db:
a8:f4:bf:fd:51:85:be:0c:43:1b:69:f5:50:f4:6a:
f9:ad:d3:d3:ac:2f:31:f2:c0:4c:f1:f4:49:cc:0a:
da:32:b8:2a:97:9b:c1:7c:f6:ae:8f:2d:b5:82:39:
f1:f5:be:fd:43:dd:a7:d1:99:f6:e0:ea:df:20:73:
ce:4b:6a:da:48:84:c8:bb:2a:35:75:e4:1d:c6:71:
f8:4c:37:ee:29:75:f5:ba:3c:f6:ea:a6:f9:f1:90:
62:91:c5:f4:2c:51:c2:68:11:46:4e:48:d7:69:fd:
60:ee:af:ea:5a:33:ef:38:5b:08:56:85:78:a3:41:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:0E:E9:7A:8E:C4:A0:A4:06:45:F6:52:FC:F3:EB:78:13:9A:9E
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/N7MO6XqOxKCkBkX2Uvzz63gTmp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:16:22:ba:c0:9a:b1:c2:a7:07:43:1f:7a:d0:9f:5c:38:b7:
e8:e6:36:62:05:b1:3f:07:a7:d2:27:da:80:40:31:4f:80:f5:
07:96:d8:00:7a:75:4e:bf:2a:c1:67:66:a4:d9:ca:5f:21:02:
c6:b2:c4:4e:7a:45:61:54:01:c8:c3:c5:ec:df:f9:a2:72:bf:
58:33:29:7c:07:41:58:c6:ed:cc:12:05:7c:70:65:fe:3e:87:
10:c2:f6:a1:b6:cf:75:a7:f4:a9:46:99:e9:b9:11:9f:1e:d0:
9c:0e:a5:28:2f:92:c6:7e:b4:b5:18:98:7f:46:eb:23:9c:14:
2d:41:bf:1e:d1:3d:c3:28:49:f0:ca:2e:f6:e2:0e:ca:8b:75:
d6:76:37:dd:66:b1:ae:36:0c:fd:a1:ce:e3:f4:0e:01:41:9f:
32:64:2c:0f:2c:1d:de:18:f5:b1:88:6c:f0:9e:2b:5e:da:d7:
a4:0b:f6:db:62:90:9c:94:f5:72:b8:34:14:83:73:ae:4a:a8:
cf:f4:57:82:0a:de:90:27:bc:21:21:01:be:82:d5:d7:a8:f1:
15:ad:a5:b3:d8:ae:04:24:1b:1b:93:5f:b6:87:6b:5b:fe:9d:
8f:3c:c6:51:ae:08:3e:8e:7a:3f:31:21:49:2c:65:6b:18:b5:
2e:6b:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:57:53 2026 by rpki-client