Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/nDBWMVAEYABPmwRQUfdrYuE6rGw.roa
File: nDBWMVAEYABPmwRQUfdrYuE6rGw.roa (raw, json)
Hash identifier: GU7opyYf2/XqFKUDoqP4OkYoUQ4kZmYzVcLepgnMjpc=
Subject key identifier: 9C:30:56:31:50:04:60:00:4F:9B:04:50:51:F7:6B:62:E1:3A:AC:6C
Certificate issuer: /CN=b70eb645370be970f9627fb6a74ff394225a7a59
Certificate serial: 019F23693544EFE3DF0B49C9999197CEA73D
Authority key identifier: B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/nDBWMVAEYABPmwRQUfdrYuE6rGw.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1103
IP address blocks: 194.104.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:35:44:ef:e3:df:0b:49:c9:99:91:97:ce:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70eb645370be970f9627fb6a74ff394225a7a59
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c305631500460004f9b045051f76b62e13aac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:b5:7d:d0:91:40:60:32:c6:41:aa:91:31:
90:2c:25:7c:ea:1e:0b:e6:f4:bf:b8:f5:5b:2e:11:
48:a2:1d:d1:cf:08:eb:1f:29:e1:e9:43:03:0d:52:
4c:99:08:25:9d:79:6d:fb:56:b5:9f:83:ca:cd:8f:
03:1d:1d:cf:80:0b:e2:33:1a:7e:55:5b:d6:e3:93:
09:f8:ac:26:50:dc:0f:f8:82:9e:30:a2:3a:b8:c8:
49:15:98:64:99:18:a6:75:2e:8d:91:5b:35:13:3c:
46:66:1b:c2:c0:38:05:24:2a:5b:ae:83:7c:69:36:
c1:c9:f2:ad:5c:a9:c8:75:28:ee:c0:67:f0:61:29:
46:d8:b0:47:83:19:65:76:65:5f:05:98:ad:a5:33:
78:cd:6e:fd:91:07:48:99:80:63:28:4b:d3:57:56:
d3:1d:76:d8:f8:34:c9:91:e6:83:68:44:1a:39:ed:
f7:f9:d7:85:41:bf:fc:91:25:ce:e0:70:a3:eb:1c:
e9:28:82:2d:b2:43:78:3a:9a:fc:5b:99:90:d5:21:
b1:8e:02:61:c4:fe:69:4a:d9:5b:1f:8f:f1:a2:99:
91:48:8d:d5:ce:71:ec:a0:bd:7e:ce:36:ad:dc:b8:
fe:eb:57:41:3e:a1:e8:2f:d2:65:70:91:f2:da:4a:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:56:31:50:04:60:00:4F:9B:04:50:51:F7:6B:62:E1:3A:AC:6C
X509v3 Authority Key Identifier:
keyid:B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/nDBWMVAEYABPmwRQUfdrYuE6rGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:63:08:69:7b:73:d1:ab:f7:49:e7:e7:70:81:24:d3:d8:48:
ed:4e:d8:be:84:3c:52:5d:43:a8:2f:7b:54:00:dd:64:b1:83:
05:b2:ce:3f:99:0f:eb:11:d7:62:46:89:a6:f8:d2:fa:ea:3d:
52:03:84:5f:78:c5:32:e0:f1:e6:30:a9:c3:bf:77:dc:35:13:
52:88:5a:02:62:37:0e:30:a6:63:23:2b:a3:97:fc:96:fe:2e:
60:27:74:8f:67:ec:1c:89:a6:b9:26:3f:4c:94:36:8c:14:6f:
fd:8a:ec:ce:f4:00:1d:4b:87:16:3a:fb:46:fe:88:bb:07:b7:
70:92:cd:c3:d1:d7:af:0c:f5:3f:55:59:ab:4f:e3:07:d5:ae:
ce:da:5f:55:8f:02:0c:a4:62:da:92:62:c4:fa:c6:eb:13:2f:
06:2c:d3:ce:02:9e:42:aa:f2:dc:25:06:68:ea:38:36:db:42:
c4:cb:42:44:a2:9c:ef:2f:90:9d:18:e9:ee:d6:c0:8e:0f:39:
44:fe:29:f3:b7:50:20:8d:aa:70:23:b6:99:2d:60:e7:3f:2b:
d6:18:37:c6:81:82:f3:b0:68:8d:5e:ed:26:31:26:0f:4a:00:
6c:84:29:cb:14:bb:88:48:72:b7:4b:69:1c:dc:82:28:e8:8f:
e1:12:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:06 2026 by rpki-client