Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/NOJhCAp3lNc4qEvAi23STvwAb3o.roa
File: NOJhCAp3lNc4qEvAi23STvwAb3o.roa (raw, json)
Hash identifier: IHSU3ho/CfmMdy/3gp5YA9JXB84XxroiuujqOIas61Y=
Subject key identifier: 34:E2:61:08:0A:77:94:D7:38:A8:4B:C0:8B:6D:D2:4E:FC:00:6F:7A
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 01A0FC80BD1B73F1B151BD764D63887A98C1
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/NOJhCAp3lNc4qEvAi23STvwAb3o.roa
Signing time: Fri 02 Oct 2026 12:04:50 +0000
ROA not before: Fri 02 Oct 2026 12:04:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12727
IP address blocks: 31.24.240.0/21 maxlen: 21
130.185.184.0/21 maxlen: 24
188.64.240.0/21 maxlen: 21
213.166.192.0/19 maxlen: 21
2a03:d600::/31 maxlen: 31
2a03:d604::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:80:bd:1b:73:f1:b1:51:bd:76:4d:63:88:7a:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Oct 2 12:04:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34e261080a7794d738a84bc08b6dd24efc006f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:be:2b:58:8a:f5:31:5f:ab:20:77:a6:5d:
96:26:fc:a4:bb:cb:d6:13:5d:e2:24:ca:63:40:3c:
bf:f0:9d:2c:38:e0:2f:01:4e:24:7d:62:06:d1:9f:
57:02:2d:19:bd:d9:2b:61:3a:14:51:91:ec:58:e9:
09:8d:ff:77:97:06:22:00:04:ca:07:ec:0b:64:6e:
e0:60:c5:82:d3:cd:a7:0a:3b:57:a3:e6:d1:b0:d4:
e6:d6:54:13:4c:8f:c5:7d:89:fe:21:1d:c3:de:c1:
77:af:92:9d:09:5b:86:a3:0c:b7:d9:ce:48:77:82:
ed:24:6a:73:d4:9c:a5:66:d0:cc:42:18:41:a3:02:
57:c5:7c:86:00:be:10:28:59:be:8e:ff:85:17:9d:
4e:8d:5c:12:87:93:85:3b:2a:88:5a:e9:8e:d8:e6:
0b:fe:bb:97:1f:e2:41:db:89:08:39:ef:58:b1:29:
df:8b:33:09:d8:22:7e:cb:d1:f1:94:73:25:ce:e4:
3d:4d:08:9d:4b:03:78:5e:b6:03:50:34:d3:a2:bb:
73:ab:53:db:9e:b3:bb:56:ae:6a:58:87:75:0e:a1:
6d:c1:57:24:0c:3b:d2:3c:3f:95:cd:60:d5:ce:2e:
e1:6d:51:90:ae:a4:53:41:88:c2:e6:9e:b4:ea:d8:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E2:61:08:0A:77:94:D7:38:A8:4B:C0:8B:6D:D2:4E:FC:00:6F:7A
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/NOJhCAp3lNc4qEvAi23STvwAb3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.240.0/21
130.185.184.0/21
188.64.240.0/21
213.166.192.0/19
IPv6:
2a03:d600::/31
2a03:d604::/31
Signature Algorithm: sha256WithRSAEncryption
62:b9:05:61:27:76:ed:f1:d8:9c:5a:4e:87:a3:61:c0:5c:1d:
09:f4:ce:f6:00:f2:9d:2c:b8:a7:55:d5:fd:83:c2:a1:83:98:
84:ae:92:f9:dd:d2:36:9c:38:b2:d7:fc:8a:fa:c7:df:d2:0e:
27:12:be:a5:b2:ad:3e:c7:6a:be:b7:ed:cc:aa:ea:00:68:68:
c7:de:ae:c4:03:d8:28:0e:b7:30:50:38:50:1e:ea:52:61:ca:
74:ba:bf:88:55:d6:37:c8:c3:29:59:d5:0d:e0:1c:5f:b5:b2:
a9:53:c3:ef:c9:a7:f7:f6:34:5e:07:9b:9e:41:51:14:74:b8:
ef:19:e3:18:86:7b:1d:69:2a:7d:e3:d2:b7:2c:93:93:7d:ef:
8d:17:97:bc:16:8b:07:9b:1c:54:d8:59:27:0d:49:54:cf:bb:
16:0a:a9:0e:be:d5:b3:cc:c5:62:22:0c:ff:e2:08:3a:b3:c1:
67:6c:ba:aa:d5:a7:84:6f:81:b4:4a:35:c1:86:d7:62:4e:e3:
c5:26:5c:e8:01:49:b1:ae:1e:70:8c:e2:91:fa:b2:8c:e7:90:
e5:cc:14:8f:1a:17:c4:db:8d:8b:fc:0c:54:8e:34:e7:b1:fd:
f9:c0:ad:85:3f:8d:98:56:19:5e:d7:7c:c9:29:01:36:34:67:
6b:5f:9d:e8
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaD8gL0bc/GxUb12TWOIepjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1
NTc2ODYwHhcNMjYxMDAyMTIwNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGUyNjEwODBhNzc5NGQ3MzhhODRiYzA4YjZkZDI0ZWZjMDA2ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IG+K1iK9TFfqyB3pl2WJvyku8vW
E13iJMpjQDy/8J0sOOAvAU4kfWIG0Z9XAi0ZvdkrYToUUZHsWOkJjf93lwYiAATK
B+wLZG7gYMWC082nCjtXo+bRsNTm1lQTTI/FfYn+IR3D3sF3r5KdCVuGowy32c5I
d4LtJGpz1JylZtDMQhhBowJXxXyGAL4QKFm+jv+FF51OjVwSh5OFOyqIWumO2OYL
/ruXH+JB24kIOe9YsSnfizMJ2CJ+y9HxlHMlzuQ9TQidSwN4XrYDUDTTortzq1Pb
nrO7Vq5qWId1DqFtwVckDDvSPD+VzWDVzi7hbVGQrqRTQYjC5p606tg5/wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDTiYQgKd5TXOKhLwItt0k78AG96MB8GA1UdIwQY
MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk
LWZhYWM5MDgwMjkwOC8xL05PSmhDQXAzbE5jNHFFdkFpMjNTVHZ3QWIzby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJkLWZhYWM5MDgwMjkw
OC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwRwYIKwYBBQUHAQcBAf8EODA2MB4EAgABMBgDBAMfGPAD
BAOCubgDBAO8QPADBAXVpsAwFAQCAAIwDgMFASoD1gADBQEqA9YEMA0GCSqGSIb3
DQEBCwUAA4IBAQBiuQVhJ3bt8dicWk6Ho2HAXB0J9M72APKdLLinVdX9g8Khg5iE
rpL53dI2nDiy1/yK+sff0g4nEr6lsq0+x2q+t+3MquoAaGjH3q7EA9goDrcwUDhQ
HupSYcp0ur+IVdY3yMMpWdUN4BxftbKpU8Pvyaf39jReB5ueQVEUdLjvGeMYhnsd
aSp949K3LJOTfe+NF5e8FosHmxxU2FknDUlUz7sWCqkOvtWzzMViIgz/4gg6s8Fn
bLqq1aeEb4G0SjXBhtdiTuPFJlzoAUmxrh5wjOKR+rKM55DlzBSPGhfE242L/AxU
jjTnsf35wK2FP42YVhle13zJKQE2NGdrX53o
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:30:43 2026 by rpki-client