Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nstnAF_p-oHTmJ6-nJF3pF2luJM.roa
File: nstnAF_p-oHTmJ6-nJF3pF2luJM.roa (raw, json)
Hash identifier: po9Ua+JZ4JPKsT2crlXq9WwynKRdIgpUMOKCYNQ40Tw=
Subject key identifier: 9E:CB:67:00:5F:E9:FA:81:D3:98:9E:BE:9C:91:77:A4:5D:A5:B8:93
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0C47A59FA32497D9398991ED0635A6E24
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nstnAF_p-oHTmJ6-nJF3pF2luJM.roa
Signing time: Mon 21 Sep 2026 14:59:07 +0000
ROA not before: Mon 21 Sep 2026 14:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 267846
IP address blocks: 181.41.158.0/23 maxlen: 23
181.41.158.0/24 maxlen: 24
181.41.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7a:59:fa:32:49:7d:93:98:99:1e:d0:63:5a:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 21 14:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ecb67005fe9fa81d3989ebe9c9177a45da5b893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:00:88:db:f7:ca:90:d4:88:1c:da:fd:91:
78:93:2b:ab:1b:f7:24:55:a1:9b:a8:34:59:72:99:
ed:05:9b:2b:15:b2:41:14:82:ab:64:7a:aa:18:cb:
44:25:f2:5e:fb:52:18:3c:03:43:ff:5a:91:5c:b7:
e0:96:f5:42:6a:90:e0:2f:36:7d:fb:6a:d6:03:49:
9d:70:9b:d5:7c:cd:75:a9:a4:92:4e:9d:65:69:b3:
1d:60:17:4a:59:4c:cd:9f:73:a2:99:cc:d0:f4:81:
09:73:ef:d0:e9:65:4b:fc:5d:29:6a:53:b8:d8:68:
47:63:11:6f:16:33:02:c8:08:38:88:d6:fa:57:10:
a1:10:20:13:af:9d:03:23:d6:94:04:15:88:7c:b6:
47:04:48:aa:24:03:8e:58:a9:40:50:29:59:98:5e:
75:cf:77:ec:e0:e9:85:0b:5c:66:19:aa:91:fe:b0:
4e:2d:73:98:9b:f9:29:66:70:e8:38:88:6b:8a:68:
51:1a:6c:39:f6:8e:d3:8b:ba:c4:5d:48:68:cd:a8:
11:2c:50:9a:9b:45:99:dd:a2:67:18:aa:33:a5:31:
d6:82:b3:25:12:78:28:4f:74:8e:1b:58:85:46:42:
04:2b:fc:b3:c5:96:2d:e6:bb:34:da:c7:7b:93:97:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:67:00:5F:E9:FA:81:D3:98:9E:BE:9C:91:77:A4:5D:A5:B8:93
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nstnAF_p-oHTmJ6-nJF3pF2luJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.158.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:7a:78:e1:3c:a0:da:1a:19:55:03:b5:16:97:ab:3c:52:a8:
e3:64:31:df:3a:21:41:a8:99:b3:e9:cb:4d:b3:5b:08:83:e5:
30:a0:3d:4e:25:dd:28:30:d0:a9:0e:c6:e1:9d:b4:17:b5:cd:
26:6f:05:98:b6:94:50:ad:9f:18:29:6c:2f:d7:82:ca:39:04:
ab:1c:9e:f9:e6:5a:21:09:31:73:6f:55:26:e8:a0:0f:54:ec:
38:e9:62:82:d0:a7:15:18:eb:a3:8b:ef:45:59:51:ee:f3:31:
d3:12:cf:fc:a7:55:76:0d:ca:b9:3c:53:c8:75:c7:20:d9:a3:
60:56:92:c4:96:89:17:d8:7b:cb:95:67:3b:dd:b3:10:ff:8e:
17:4a:6e:cc:f8:8d:0b:94:69:dd:12:ce:7c:21:eb:77:60:be:
83:3b:5a:42:e7:af:65:69:a1:d2:42:34:93:64:b2:e0:99:ce:
50:f2:93:13:f0:05:59:72:10:72:cd:38:2c:c0:c1:79:a5:8e:
22:63:7e:18:a8:50:e9:f6:ee:58:47:87:db:c4:5a:a5:3d:2f:
d2:e4:58:92:46:7f:e4:4e:c4:61:e9:da:ff:3e:07:51:8e:9e:
43:f1:79:5a:b7:57:85:c6:2c:08:f7:0c:8e:ef:77:85:ea:03:
4e:2a:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:08:41 2026 by rpki-client