Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NrCEvDQrgNKl89z22hhdPcy6whw.roa
File: NrCEvDQrgNKl89z22hhdPcy6whw.roa (raw, json)
Hash identifier: x0V3wIO+rB6hueaqolqvB3vu1miv40FFIflSv4LAU/Q=
Subject key identifier: 36:B0:84:BC:34:2B:80:D2:A5:F3:DC:F6:DA:18:5D:3D:CC:BA:C2:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DFBE4453C4FE2EFF99C41C304F9FA81C8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NrCEvDQrgNKl89z22hhdPcy6whw.roa
Signing time: Wed 06 May 2026 06:05:34 +0000
ROA not before: Wed 06 May 2026 06:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47272
IP address blocks: 151.243.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:e4:45:3c:4f:e2:ef:f9:9c:41:c3:04:f9:fa:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 06:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36b084bc342b80d2a5f3dcf6da185d3dccbac21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:06:ed:35:15:ad:8f:22:13:be:91:8a:03:
a9:b7:e5:c4:a7:dd:1e:3f:79:f3:52:f2:88:74:a5:
93:25:32:a5:a4:f7:68:3c:d1:17:3b:cf:eb:0d:17:
38:9d:b7:21:1d:04:56:e0:b1:10:af:88:f3:75:c2:
55:0b:4b:d8:67:18:23:78:9c:56:5b:5e:f8:5c:69:
26:e9:c9:df:28:cd:60:86:79:93:40:15:ea:f2:8c:
a4:63:78:77:f1:49:fd:ce:3e:7e:4c:6f:bd:91:60:
92:19:31:3b:f0:bd:24:37:cb:11:99:8d:32:b1:e4:
22:30:1a:ac:b9:40:12:e4:cf:a0:3c:70:f4:00:16:
40:f1:5b:92:65:e5:97:d7:47:b6:34:e4:c4:20:c9:
53:52:e8:5d:5a:9f:6e:82:c2:72:cd:43:9d:20:f9:
a3:91:29:0d:c2:f0:c6:55:9a:6f:40:91:aa:7e:01:
da:d2:ac:ef:ba:f6:58:6f:4b:95:45:82:71:89:57:
92:32:ae:60:b2:42:f5:d4:46:37:94:cd:4c:e7:63:
2f:f2:74:36:54:34:eb:01:62:13:20:28:44:7f:e3:
a5:52:77:24:5d:a2:20:27:50:fe:98:d1:80:b2:15:
8a:b4:a7:22:b4:5a:35:86:aa:8b:51:ec:33:cb:18:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:84:BC:34:2B:80:D2:A5:F3:DC:F6:DA:18:5D:3D:CC:BA:C2:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NrCEvDQrgNKl89z22hhdPcy6whw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7e:fd:8f:71:c7:49:61:8d:14:c1:6b:d9:ce:cc:98:61:c9:
c5:d7:91:a0:77:df:5c:08:12:e6:5f:d3:aa:e8:c3:10:6f:77:
47:fb:1a:4d:45:5f:03:82:d9:da:1b:3b:cf:c8:38:4c:99:1b:
2c:e1:4b:ce:6c:40:53:a6:63:b2:8a:e6:1d:ac:aa:78:3b:a1:
c3:af:94:19:87:90:cf:77:5d:c6:20:fa:1a:6b:f6:ae:48:0c:
5a:66:f6:fa:c5:f8:42:64:fc:26:57:cd:f4:33:6f:36:8d:8c:
51:fb:bf:f7:46:8d:09:e1:57:9b:77:5f:ce:83:e5:ea:e4:63:
3c:62:5a:a5:1d:c9:bb:24:da:11:ba:a6:8f:bf:e6:07:4b:12:
29:c6:81:5b:71:93:6c:e1:a4:4c:b6:2e:1b:c8:63:2e:1a:97:
20:68:e9:84:5b:84:38:8f:73:5e:fa:bf:43:8b:05:83:24:ea:
ba:4f:91:04:2a:37:6a:03:6b:08:34:69:8a:5d:73:fc:4e:01:
cb:cc:ab:d7:48:34:9e:1d:da:d0:5f:fd:a9:21:58:c3:1e:44:
69:cc:9b:51:15:46:32:54:cb:a9:a9:3e:68:1b:90:b3:10:72:
ac:40:e4:72:9e:04:ea:f1:df:a5:2f:85:3f:84:ff:9a:dd:63:
aa:bf:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:18 2026 by rpki-client