Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/nSN_TxFmfcT8L5gLifH_p7D8Uow.roa
File: nSN_TxFmfcT8L5gLifH_p7D8Uow.roa (raw, json)
Hash identifier: f+VYcizYIR9tVcbLfUBSMkoEKluNmLVYbPCJ6VRSkPU=
Subject key identifier: 9D:23:7F:4F:11:66:7D:C4:FC:2F:98:0B:89:F1:FF:A7:B0:FC:52:8C
Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Certificate serial: 019B7F832E61AC9A4FD6586970EF37A974D2
Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/nSN_TxFmfcT8L5gLifH_p7D8Uow.roa
Signing time: Fri 02 Jan 2026 16:21:02 +0000
ROA not before: Fri 02 Jan 2026 16:21:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214863
IP address blocks: 194.106.204.0/24 maxlen: 24
194.106.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:2e:61:ac:9a:4f:d6:58:69:70:ef:37:a9:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Validity
Not Before: Jan 2 16:21:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d237f4f11667dc4fc2f980b89f1ffa7b0fc528c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:09:08:54:92:1d:8f:a4:63:e3:7e:14:8c:
7b:dd:d1:d1:9a:cc:1a:5e:7b:64:68:8e:f1:0a:1b:
5d:7e:d7:2f:8e:8b:52:07:12:02:04:83:8e:b9:2b:
e0:34:80:9c:b2:b8:cd:60:80:e5:3f:15:37:4f:ab:
21:44:2c:ca:70:1a:4a:2a:bb:f6:63:c3:f1:cd:fb:
53:9d:82:bf:49:fc:ba:7b:2c:19:f2:26:1d:23:11:
99:65:a5:67:47:dc:bf:ad:cf:d4:98:f0:0e:80:f7:
0f:af:43:62:27:58:89:08:a5:b5:29:e6:36:10:be:
12:3b:e9:2e:18:be:17:c4:cf:27:94:8d:2b:4f:92:
86:ff:66:68:38:0e:e1:91:78:a0:1e:40:93:d5:c9:
8e:94:78:be:5e:9b:7e:2d:0e:65:a2:5d:1b:c4:7c:
42:91:14:28:5a:ae:f7:03:43:38:86:25:13:2a:b4:
b4:88:c0:33:cb:25:8e:78:14:6c:73:9c:94:78:f0:
d9:2e:d4:ff:a2:69:48:be:24:90:ba:3f:39:62:d8:
c0:30:7d:4d:2e:88:10:36:1a:7e:16:00:05:7a:c0:
34:65:24:0b:79:3d:e9:54:92:de:44:59:12:b6:2c:
31:54:aa:59:06:3f:86:be:45:cb:08:f7:94:c8:47:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:7F:4F:11:66:7D:C4:FC:2F:98:0B:89:F1:FF:A7:B0:FC:52:8C
X509v3 Authority Key Identifier:
keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/nSN_TxFmfcT8L5gLifH_p7D8Uow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.204.0/23
Signature Algorithm: sha256WithRSAEncryption
65:93:bc:8e:c8:6e:1c:31:30:8b:9e:39:c7:dc:bc:59:c7:bc:
84:29:21:46:56:37:e0:75:fe:57:73:76:6f:af:76:1d:54:83:
a4:3d:5e:72:86:b3:01:d6:de:1e:0a:30:f5:fc:9a:f5:8e:e6:
6b:a8:4c:07:1f:ed:38:94:43:5b:e6:37:d1:14:c2:a4:3f:77:
24:23:0f:36:ef:08:65:57:38:65:0c:9d:ec:b2:21:e2:0f:86:
8c:8e:88:92:1d:48:0f:9a:ae:5c:e3:62:ed:28:28:93:f2:42:
a6:05:70:77:3d:60:91:7c:fc:ad:24:2d:a6:3a:3f:40:48:64:
bb:a9:c5:ec:06:44:e6:45:91:72:7a:99:7d:19:25:9f:b6:ef:
80:3f:da:65:cf:2e:6b:2d:69:ae:36:dd:b3:59:6d:71:40:e9:
62:47:8b:ed:00:5f:2e:2e:15:05:d4:75:26:42:4b:50:0d:4b:
9e:47:b6:c3:39:9e:a6:e1:74:c0:d8:f2:b6:48:65:7f:94:a8:
73:1d:5c:e9:e5:c8:a4:d8:64:58:f3:8a:10:a9:03:bc:1b:ce:
99:03:35:00:1b:ab:c0:06:bf:c0:9d:b0:17:e9:2a:56:39:a3:
85:1e:4f:b8:a6:e3:33:29:20:3a:59:50:f8:72:8a:d4:32:84:
80:48:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:33 2026 by rpki-client