Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/njRZmYeTtk1LFMDT2CPOEAmO7JY.roa
File: njRZmYeTtk1LFMDT2CPOEAmO7JY.roa (raw, json)
Hash identifier: 1TrGYeX0+QQHofYJlSL0F/AXE9FWCBYhe7x8uIKyABw=
Subject key identifier: 9E:34:59:99:87:93:B6:4D:4B:14:C0:D3:D8:23:CE:10:09:8E:EC:96
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019CFAE9266283445D85AF012F6A5B110E59
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/njRZmYeTtk1LFMDT2CPOEAmO7JY.roa
Signing time: Tue 17 Mar 2026 08:28:29 +0000
ROA not before: Tue 17 Mar 2026 08:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 185.205.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:e9:26:62:83:44:5d:85:af:01:2f:6a:5b:11:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Mar 17 08:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3459998793b64d4b14c0d3d823ce10098eec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:3f:f3:e0:4c:29:ab:fe:a4:17:79:bb:f8:
da:4e:6e:c5:2c:48:94:40:42:19:4f:27:11:92:01:
48:e5:b9:23:6a:e5:1c:6c:e7:05:6b:2f:f5:9d:24:
c5:34:55:7a:5d:6a:7f:1e:6f:00:b4:37:0e:3c:0d:
df:60:de:41:f0:82:17:cd:ae:7c:f8:f2:4d:79:ef:
2b:91:34:29:66:ab:30:dd:44:b1:72:bb:49:ec:8d:
d1:98:48:5a:89:7a:46:ae:9b:dc:c9:91:9b:59:a8:
5b:69:73:42:9b:95:3c:12:70:ff:14:b0:56:e8:ca:
27:4f:79:c7:f5:68:12:67:e7:07:4a:74:ef:fd:56:
2e:28:f5:ca:ff:90:11:dc:a8:b7:6e:9a:4b:54:48:
9b:5a:b0:e2:0b:5a:c3:59:27:54:c4:a1:57:35:e9:
00:2b:5b:d6:4f:06:03:6b:78:eb:40:80:2d:00:4c:
62:59:5e:ab:3d:e7:ea:f5:fb:ef:b9:39:f3:3e:0c:
4c:11:61:d1:23:1f:8a:12:c3:42:b4:0c:66:b5:ff:
57:75:c5:a7:c4:13:9f:b0:73:13:69:e3:f1:56:c6:
aa:c3:ac:f0:63:d8:23:a4:86:e6:9a:2b:80:5b:9a:
86:04:ef:d3:cb:60:b5:8c:7a:33:62:97:78:c6:7c:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:59:99:87:93:B6:4D:4B:14:C0:D3:D8:23:CE:10:09:8E:EC:96
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/njRZmYeTtk1LFMDT2CPOEAmO7JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cb:1f:e7:97:f4:69:85:7f:54:03:75:6f:e3:74:ef:5f:20:
f2:df:7a:3d:b6:2e:b7:81:ab:8a:45:82:ed:55:59:63:2b:b7:
37:c6:8d:68:af:df:71:0d:a8:42:43:04:22:e5:49:0e:d9:e7:
a6:2b:db:7b:ad:62:81:21:d6:24:d0:52:4c:fd:dd:d9:12:f7:
3d:ae:a1:c8:94:35:1f:42:89:a1:7b:12:d6:e8:da:98:02:d6:
8b:60:77:2c:a7:75:8b:9a:77:98:99:16:25:ab:e6:6d:84:8d:
6f:9d:39:96:d4:5e:a9:b0:b0:22:c0:6e:51:ca:29:70:73:87:
53:bc:28:16:18:9d:05:d2:11:5a:88:c8:25:30:bd:ea:79:98:
cf:e2:9e:d3:16:c2:24:68:16:4e:41:bc:2d:3c:6c:99:56:63:
08:13:db:3e:8a:98:aa:ac:87:9a:83:b4:39:74:51:91:be:66:
13:5d:b3:ea:df:0a:70:60:5f:32:df:b3:e1:43:e7:95:4e:a9:
f3:85:c2:64:2b:a9:b9:54:64:21:b0:1c:b0:bf:4c:18:a1:3c:
c1:dd:76:ca:37:a9:ad:cd:ab:2a:f4:c4:c8:fc:4d:b0:72:d7:
70:c4:30:c1:8a:70:a8:26:d6:00:91:a0:66:00:68:bc:7c:8d:
1e:03:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:45 2026 by rpki-client