Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ntAvNzpSsuII62ooO8mZRC17BCY.roa
File: ntAvNzpSsuII62ooO8mZRC17BCY.roa (raw, json)
Hash identifier: iHc+Hfl+dZn6D6u6b9JhoFpIm7XECSwXvc86HTgRApw=
Subject key identifier: 9E:D0:2F:37:3A:52:B2:E2:08:EB:6A:28:3B:C9:99:44:2D:7B:04:26
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01A0CD19ADD9D2D32217DDA9263687AF32F6
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ntAvNzpSsuII62ooO8mZRC17BCY.roa
Signing time: Wed 23 Sep 2026 07:10:07 +0000
ROA not before: Wed 23 Sep 2026 07:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48529
IP address blocks: 130.49.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:19:ad:d9:d2:d3:22:17:dd:a9:26:36:87:af:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 23 07:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ed02f373a52b2e208eb6a283bc999442d7b0426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:96:21:b2:b4:09:42:4e:40:c0:5a:f4:3b:
b9:e3:09:b2:1f:1a:27:46:df:d1:9c:ce:13:ca:69:
83:21:04:01:a1:d2:65:36:40:c9:12:04:96:51:f2:
e7:09:c1:04:3a:da:a6:4f:20:27:a8:3f:60:66:70:
9e:02:fa:28:38:fd:33:66:33:bd:82:16:e2:0c:f6:
c9:4e:18:6b:bc:cc:4b:94:61:d3:5a:aa:c4:ca:ad:
be:23:40:0c:b9:05:3e:50:79:9f:8b:55:59:f0:c0:
8d:d8:79:4e:b7:36:f6:1d:1c:b8:4f:8d:ed:e2:9d:
f3:d1:33:e6:61:55:b2:9f:1c:4d:73:17:a4:9a:3c:
13:7c:d4:84:7e:48:5f:95:b3:88:07:c3:cb:db:b8:
70:b4:8c:b6:61:45:fd:54:da:e2:e1:92:29:b2:5a:
f3:16:1e:1b:22:41:78:e4:ad:60:3c:7d:ee:79:85:
66:ea:1e:1e:30:58:a0:10:54:f1:36:0a:f8:1e:c2:
d7:83:c2:d7:af:6e:05:49:4a:29:b0:50:42:2a:df:
3a:5a:df:52:30:70:c7:bd:8f:c7:c6:23:03:fa:c1:
43:8c:3a:44:5f:81:55:6a:45:4a:c7:91:cc:72:e4:
1d:8f:97:c9:eb:cf:6d:ec:b0:bd:58:ad:08:4d:a2:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:2F:37:3A:52:B2:E2:08:EB:6A:28:3B:C9:99:44:2D:7B:04:26
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ntAvNzpSsuII62ooO8mZRC17BCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.180.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4e:b7:18:09:e5:cb:41:e0:23:75:d2:df:e2:14:17:14:7b:
2f:ea:6c:a4:bd:6b:42:c1:48:f9:f8:8e:51:2a:70:1f:ae:fa:
07:b0:cd:94:db:10:0e:6c:2d:a5:25:fc:d1:a1:35:ec:d1:3a:
90:05:19:08:0f:6b:a5:d5:4f:72:5d:79:71:69:66:20:bd:8f:
76:57:6c:e3:58:92:c1:c0:d0:28:62:fb:a4:51:53:e9:3f:1e:
05:11:0d:6b:0f:4a:7c:7b:56:27:da:9b:88:cb:dd:b2:e7:a0:
08:73:2f:1c:e4:c8:37:f4:2f:6d:1b:12:70:7d:8b:76:c9:39:
d0:36:2b:32:9a:ec:ea:92:b7:2d:6c:85:57:22:b0:98:e5:17:
24:64:da:3e:2e:24:91:55:8e:4e:bb:d6:9c:87:97:c8:6e:5a:
62:15:cf:28:0e:d0:f3:fe:4e:35:16:55:86:34:c8:b8:e1:9d:
e8:4f:8b:2f:27:64:63:fd:ea:79:53:4a:3c:8f:4e:1c:ea:74:
38:dc:0a:bc:40:22:73:92:37:b9:b8:b7:83:ab:6e:42:4f:49:
73:af:b1:44:28:a4:3d:8f:31:c6:21:31:ce:33:75:a4:51:c5:
64:79:a8:11:73:c9:f3:9b:cb:80:51:ad:c1:18:95:d1:f0:cc:
e3:91:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:38 2026 by rpki-client