Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/npFTFWkQvJEB-uPZw7_yc1bOCYg.roa
File: npFTFWkQvJEB-uPZw7_yc1bOCYg.roa (raw, json)
Hash identifier: +mXvNAxr4u+gG4g9s2iT2e/7Fxy7fLo5N61r3XWKELI=
Subject key identifier: 9E:91:53:15:69:10:BC:91:01:FA:E3:D9:C3:BF:F2:73:56:CE:09:88
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A0CB806F869CB72AC58396EA0543FCA100
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/npFTFWkQvJEB-uPZw7_yc1bOCYg.roa
Signing time: Tue 22 Sep 2026 23:43:07 +0000
ROA not before: Tue 22 Sep 2026 23:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208208
IP address blocks: 84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
2a09:6301::/32 maxlen: 32
2a0c:2500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:80:6f:86:9c:b7:2a:c5:83:96:ea:05:43:fc:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 22 23:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e9153156910bc9101fae3d9c3bff27356ce0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:81:ef:d9:8f:63:02:06:c9:38:99:81:c1:
0c:17:1a:e0:61:7b:4b:8c:64:c3:0a:aa:83:5b:87:
e0:0e:45:d0:7e:87:53:c3:14:90:d9:f9:26:7b:8a:
b5:17:58:19:82:90:3a:14:d3:a2:c5:24:ad:a3:01:
4e:9e:d5:cb:e7:15:b3:3b:4b:ff:38:30:f6:0c:45:
f7:b1:be:6f:b7:99:ef:c9:91:0b:5c:b2:1c:19:32:
e3:67:fa:36:c5:9b:87:35:9a:d4:a3:e2:af:1f:f9:
96:65:a7:b8:1a:3e:4f:6e:8d:39:4f:bd:87:c2:99:
fa:21:8e:61:e1:ad:e3:c2:5e:82:aa:47:00:34:88:
d5:de:e6:39:68:26:be:3d:b5:cc:be:b2:f9:91:50:
30:0e:10:c4:1e:a1:22:21:d1:85:09:ba:ef:4d:19:
27:f1:4a:27:1c:aa:39:2e:54:3f:d7:52:61:f9:b7:
f1:c8:4c:05:ed:ce:9e:3b:44:de:bb:67:d2:20:01:
11:40:f9:40:7d:fc:67:a2:9e:c0:01:e6:6a:96:84:
88:cc:86:1c:cb:f5:0a:1a:f7:91:fd:87:ef:ac:4e:
29:a0:89:80:8d:3b:54:b1:1e:6a:eb:78:be:7a:78:
35:4f:9a:89:11:1a:c6:15:1f:cb:90:ae:c9:68:b7:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:53:15:69:10:BC:91:01:FA:E3:D9:C3:BF:F2:73:56:CE:09:88
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/npFTFWkQvJEB-uPZw7_yc1bOCYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.161.0-185.230.163.255
IPv6:
2a09:6301::/32
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
71:69:e1:c0:4b:37:cd:ed:24:bd:c4:ef:45:30:08:9e:4f:40:
8b:a9:39:d3:af:60:dd:60:f4:e1:05:bd:79:38:52:ce:3c:d5:
e4:4e:25:4f:48:18:68:0c:56:52:f3:79:93:34:6b:31:30:d1:
5c:72:51:de:71:e8:42:eb:1d:8e:4a:fc:35:a8:c7:e2:bb:c9:
29:bc:b3:a5:cc:93:fe:06:02:b2:4b:5f:40:21:6e:eb:88:52:
41:79:fa:46:5b:ba:84:bd:7e:42:2e:6d:f9:dc:fc:23:3f:cc:
c9:04:92:c0:84:0a:bd:75:7b:af:ea:22:5a:bd:3a:da:a6:d8:
b4:1f:83:a0:ea:66:18:fc:97:f1:9e:ae:68:3a:fd:8a:9d:84:
71:3e:53:d2:e9:03:84:7a:ca:ee:2a:01:e9:90:98:29:84:58:
d7:85:df:a7:fc:87:d2:c2:bf:f8:2e:86:60:bf:56:97:c1:81:
de:6a:5f:96:88:88:2a:0d:61:5d:5a:a8:6b:1a:d1:5c:03:00:
b5:c7:4e:e8:b1:85:42:f4:34:6c:bd:ad:fa:5a:9a:c1:69:41:
0d:fd:36:1c:9f:27:ee:2d:a9:80:64:e6:0c:bc:3f:b4:80:75:
34:aa:1e:43:b6:4f:7e:4f:13:7e:24:36:9e:c9:f8:94:1e:8a:
34:29:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:21:04 2026 by rpki-client