Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa
File: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (raw, json)
Hash identifier: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=
Subject key identifier: 34:0E:0A:52:76:99:FB:BA:AE:5A:E8:9D:62:4B:8B:27:DA:8B:24:BF
Certificate issuer: /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial: 019F23689572E0380C59AFEBC253D5342E58
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 193.105.30.0/23 maxlen: 23
194.99.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:95:72:e0:38:0c:59:af:eb:c2:53:d5:34:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340e0a527699fbbaae5ae89d624b8b27da8b24bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:17:a6:a4:15:76:b0:e4:98:17:d1:12:66:
15:a3:7d:98:90:a4:37:ff:9b:14:1e:ea:af:ea:20:
43:1e:0f:5a:ae:be:b1:1f:c2:c9:ab:8d:81:e2:79:
fb:c9:c4:99:69:6d:b5:75:40:37:e5:ce:1b:28:18:
a9:a3:f6:8a:c5:f3:27:fc:40:96:1e:3a:15:05:f0:
43:19:dc:97:2f:96:1e:75:ec:d7:29:3b:70:49:62:
56:c2:20:17:0c:7f:9c:39:8f:ef:6c:3b:0d:e7:1a:
c1:23:99:90:f5:ca:8f:e6:19:12:53:9e:2b:34:a5:
b7:24:71:1a:93:b2:37:70:68:a9:68:73:71:31:04:
21:60:2a:9e:54:58:b2:08:38:64:b8:91:e0:32:d5:
2e:58:b1:c7:a8:40:8b:6c:0d:a6:0e:1f:cf:73:fe:
0e:ea:2d:9c:f9:af:bc:84:fc:86:b8:18:34:c7:df:
35:70:4f:74:36:22:f2:02:0d:16:f4:f7:64:0b:08:
97:56:1a:1f:3f:94:57:3a:84:c6:26:54:f0:af:e7:
b3:04:44:2e:d1:58:4b:8d:4d:10:d3:4f:70:88:2e:
1e:cb:9a:2a:5d:90:ed:03:c1:e5:c1:de:a3:0a:5a:
75:f6:e7:38:61:7c:02:3c:b5:fa:cd:00:80:ad:9d:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:0A:52:76:99:FB:BA:AE:5A:E8:9D:62:4B:8B:27:DA:8B:24:BF
X509v3 Authority Key Identifier:
keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.30.0/23
194.99.114.0/23
Signature Algorithm: sha256WithRSAEncryption
42:56:63:34:98:95:66:c8:af:43:68:93:c0:56:2d:ed:2d:47:
79:87:38:24:a7:57:67:39:c6:0f:93:bb:fa:a2:15:42:70:9b:
38:34:b8:b8:0d:7e:3f:0d:3d:a6:9a:01:fb:cd:e6:f9:d0:1b:
30:e5:58:de:95:51:f5:38:30:6b:59:15:4e:be:2e:f6:e8:45:
0e:aa:89:97:fc:7a:b4:22:8a:70:4a:5d:ad:c4:aa:46:8c:a4:
82:1d:eb:cf:be:b8:c6:05:a0:74:8b:dd:71:3c:6d:ea:ab:5d:
b1:a4:3a:d2:6c:b2:5c:64:5c:63:9c:9a:09:e5:d3:91:6f:46:
84:bd:ba:06:b4:c3:16:25:c1:27:94:b9:c5:8c:24:14:c6:24:
d6:34:6b:24:c6:42:1d:db:2e:57:20:6a:8d:c2:82:99:eb:19:
ee:16:00:40:39:58:e4:88:96:27:35:35:b6:b5:3a:c5:5e:c9:
a0:99:f0:14:14:3c:76:5a:fe:01:b7:03:1b:4d:0d:85:5e:b8:
d8:18:09:e4:88:71:9b:8d:c9:69:09:c8:80:3c:b6:ef:ab:91:
48:af:65:ba:e1:bc:70:2b:d9:c0:19:a9:10:c6:13:d7:98:9d:
8d:a2:3c:98:37:e7:17:62:3d:33:11:ca:c0:da:8f:19:67:3e:
6b:3c:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:41 2026 by rpki-client