Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nbLNzN448VkPRAkhpgSYr-FhpvI.roa
File: nbLNzN448VkPRAkhpgSYr-FhpvI.roa (raw, json)
Hash identifier: 1xxHlbk1WLqLboTn1YZQDqZeCVkvj2jA/rNUwSsdvN0=
Subject key identifier: 9D:B2:CD:CC:DE:38:F1:59:0F:44:09:21:A6:04:98:AF:E1:61:A6:F2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CD759CE67763133E04977175163DA4F78
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nbLNzN448VkPRAkhpgSYr-FhpvI.roa
Signing time: Tue 10 Mar 2026 10:45:12 +0000
ROA not before: Tue 10 Mar 2026 10:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204765
IP address blocks: 151.247.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:59:ce:67:76:31:33:e0:49:77:17:51:63:da:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 10 10:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9db2cdccde38f1590f440921a60498afe161a6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:2b:e7:76:60:8d:2b:12:63:f2:12:bc:9c:
02:6b:a7:c8:4f:b7:60:c9:e4:28:d1:cf:db:c0:b5:
34:cc:50:05:bf:09:ff:37:aa:6e:89:b2:9c:92:aa:
11:41:35:b3:11:10:ee:63:e9:ed:ac:6b:1b:6e:4b:
8e:87:2f:db:88:6e:37:0f:32:09:45:82:82:29:ec:
1a:ad:d4:1f:d2:43:f8:80:f3:31:06:2b:28:e3:f6:
e6:0f:ff:22:67:26:c5:2c:df:23:81:83:f6:86:a7:
4c:62:af:af:79:93:4d:ae:62:fc:bd:d0:b0:e1:6b:
58:05:4e:38:d9:ce:ac:5f:2f:ce:cc:40:60:e7:a2:
84:fd:0e:e5:be:90:7a:d8:b5:67:1b:81:5c:57:4d:
27:82:32:1b:26:8c:5d:9a:2a:c7:1f:4d:9d:1f:40:
ae:18:dc:4e:37:25:c4:76:9e:d8:c8:ed:88:49:7e:
e4:21:47:95:ea:cc:f6:b1:f6:a6:91:2c:40:c5:2a:
8e:75:ce:27:a0:9a:82:93:de:e4:94:00:10:41:25:
82:0c:ee:e2:17:6d:a9:18:57:b3:fc:c9:a4:eb:28:
0d:e1:72:8e:76:75:0d:fb:12:a7:9e:11:80:f3:ff:
77:d7:77:fc:48:88:85:c2:62:b4:c8:6b:c3:03:ee:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:CD:CC:DE:38:F1:59:0F:44:09:21:A6:04:98:AF:E1:61:A6:F2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nbLNzN448VkPRAkhpgSYr-FhpvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:22:ae:dc:b9:99:bc:37:1e:a7:45:8f:e5:15:c8:44:de:5a:
bb:52:19:ae:94:00:38:6c:c5:60:51:71:12:96:e1:04:00:dc:
65:e1:38:55:db:04:83:24:7c:0f:b5:6f:d5:ec:30:e6:cb:b8:
a1:aa:0f:9c:8b:a6:69:16:04:a1:95:42:8e:53:f5:b1:b9:cd:
c3:91:ee:15:d5:75:50:55:b3:d8:0c:19:f9:bf:28:09:67:91:
d5:5d:ee:47:ab:cd:37:1a:9c:4e:8f:58:66:de:0d:45:2e:f9:
b4:09:ce:e1:32:1e:b8:8d:a1:90:81:bc:03:b7:74:7a:f5:74:
aa:93:d6:b7:1b:7d:ff:11:a2:60:df:e0:9a:60:40:69:aa:78:
ad:a7:6e:42:2c:30:b4:06:e9:2a:7b:f6:b9:0e:07:af:d9:76:
0d:fd:c5:0f:1f:ed:0b:85:ac:93:34:3e:76:8f:e3:98:85:02:
c5:82:7c:cc:33:0e:05:ef:58:7f:87:32:46:0b:e3:4f:63:5b:
6e:1f:6b:ea:93:1b:69:d9:63:ae:be:0f:99:ce:10:59:14:f0:
ed:25:a0:50:4c:c9:50:5d:57:e6:57:5a:1e:66:49:d0:70:a0:
09:d2:ff:a0:67:71:8f:16:c8:64:cc:2f:9e:18:43:89:cf:cf:
63:d3:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:22 2026 by rpki-client