Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/njrb-7C_nv3dFIQO96zAJMx_5Nc.roa
File: njrb-7C_nv3dFIQO96zAJMx_5Nc.roa (raw, json)
Hash identifier: kbVQP9aDy9kqLl/AsE3QmLQBsjugoKBY+7x+IegF6QU=
Subject key identifier: 9E:3A:DB:FB:B0:BF:9E:FD:DD:14:84:0E:F7:AC:C0:24:CC:7F:E4:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D00717E19B9ADE80B4C1F0608404BF2EF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/njrb-7C_nv3dFIQO96zAJMx_5Nc.roa
Signing time: Wed 18 Mar 2026 10:15:30 +0000
ROA not before: Wed 18 Mar 2026 10:15:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59253
IP address blocks: 151.246.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:71:7e:19:b9:ad:e8:0b:4c:1f:06:08:40:4b:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 18 10:15:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3adbfbb0bf9efddd14840ef7acc024cc7fe4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:58:5c:54:20:80:ab:12:f3:c4:3e:a6:af:
78:44:e7:dc:06:a6:96:60:d4:5f:e5:b4:07:7a:86:
78:cb:41:41:ff:1c:c5:3b:80:eb:88:c5:db:85:a4:
37:9f:08:61:6f:57:b9:f3:36:67:d7:85:fc:8c:22:
fc:48:6d:bc:31:03:f8:a4:f8:db:e9:70:40:59:67:
ea:e0:ce:92:96:d7:7a:b6:04:f1:1b:68:f5:84:55:
f4:91:e8:c1:02:32:3b:72:88:98:1c:6e:e6:d8:ec:
ce:9e:55:0d:4e:3d:ac:59:02:4f:03:88:f3:8b:c4:
0c:37:c9:0d:7a:14:85:b2:12:70:60:2f:13:af:05:
26:5b:51:20:af:80:33:8b:26:51:de:dd:27:fc:92:
78:a5:08:67:f6:a5:3e:3d:35:5a:76:ee:54:ca:82:
79:bb:d3:c1:69:69:17:36:2d:30:43:ac:17:51:26:
60:23:b0:e5:5e:45:21:94:e2:54:61:2c:7c:5d:65:
47:14:f9:62:ee:7c:1a:dc:26:60:74:e9:8b:34:05:
03:44:22:ad:87:26:74:d3:a4:0a:b9:a0:50:23:1e:
8e:1d:90:b9:e8:63:3b:62:91:a2:79:14:77:a3:14:
10:53:08:3e:dd:5c:68:cf:3a:45:0b:79:40:f5:88:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:DB:FB:B0:BF:9E:FD:DD:14:84:0E:F7:AC:C0:24:CC:7F:E4:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/njrb-7C_nv3dFIQO96zAJMx_5Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:56:f2:ec:f6:6e:99:c8:cd:91:1c:eb:7d:da:3b:d5:bf:49:
b5:73:1d:6d:f8:de:5f:ee:36:31:8e:3f:62:15:61:9e:64:1d:
9a:da:50:c4:e1:cd:ba:3b:db:b0:ff:a4:f7:04:c6:fe:86:c5:
71:7b:be:48:65:1a:6d:28:33:fe:b1:fc:7b:4d:29:3f:2d:3b:
8d:ea:38:13:04:44:51:5d:95:60:9f:0e:59:c9:c1:1f:ce:5f:
34:a4:ce:d1:b0:9f:41:26:5d:2b:93:69:ed:3b:f6:34:c8:ce:
05:17:4a:62:b7:f8:29:8e:0b:c9:d5:c8:3b:30:5d:c6:19:d4:
01:86:d7:c6:c5:65:fe:8b:7b:31:3a:d8:e7:39:52:de:55:32:
07:57:ca:ae:31:42:fa:2a:35:8b:4e:90:24:ac:7a:30:ed:f0:
83:03:8b:d3:05:52:90:90:7f:65:2d:28:f9:ed:19:36:a6:c7:
71:00:20:b5:15:ad:4f:cb:99:e3:02:9e:c7:4a:18:67:59:01:
af:c7:9a:83:2e:9d:48:73:7f:ba:01:b8:9c:66:22:00:ca:8c:
a2:b9:20:39:4d:b2:b0:ca:5d:ea:b3:02:1b:0e:19:13:11:fd:
83:47:64:0d:fa:d9:ca:d6:26:98:1b:28:bd:a1:87:e1:d0:af:
fd:83:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:28:11 2026 by rpki-client