Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/N2OatwOOlKKioT0NRltvF2MW-2A.roa
File: N2OatwOOlKKioT0NRltvF2MW-2A.roa (raw, json)
Hash identifier: AtT0Hq5M6f320Q4NS840MNR01KALlUtkbsCAVvpe4jQ=
Subject key identifier: 37:63:9A:B7:03:8E:94:A2:A2:A1:3D:0D:46:5B:6F:17:63:16:FB:60
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019F7162E4AD0EFE1F484D6DD0A47B5151EB
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/N2OatwOOlKKioT0NRltvF2MW-2A.roa
Signing time: Fri 17 Jul 2026 18:42:14 +0000
ROA not before: Fri 17 Jul 2026 18:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 195.82.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:62:e4:ad:0e:fe:1f:48:4d:6d:d0:a4:7b:51:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jul 17 18:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37639ab7038e94a2a2a13d0d465b6f176316fb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:9c:50:d0:24:f1:8f:8d:e3:73:ce:ed:ca:
b7:64:2d:57:5b:5e:47:7a:61:ed:c5:b2:7c:9b:7b:
a1:44:b4:1f:69:60:56:17:fd:4a:48:62:83:45:0b:
3b:6f:50:71:c5:a0:c5:74:70:6f:bb:97:18:8a:4c:
35:1f:1a:06:62:3c:c3:23:ff:1c:63:dc:a1:35:3c:
1d:aa:53:7d:3d:8d:5d:b1:4d:fa:21:d2:02:22:5b:
d7:f0:5f:57:8c:bd:0d:b8:db:a6:4e:4e:28:23:55:
d3:d6:c1:05:d3:06:70:26:00:da:8b:50:00:6d:7e:
94:c9:9d:71:b9:30:50:22:7d:9c:d9:cc:18:31:3d:
a7:7c:52:0f:bd:ab:51:e0:7e:99:99:4e:4c:5e:01:
94:27:27:d0:65:a1:e4:a7:db:2a:5e:a4:de:92:4b:
ec:c0:a6:cd:4a:e5:e4:8e:23:68:6a:73:ef:01:b1:
94:07:b9:75:bc:29:3e:03:1a:92:95:e5:d2:4d:e7:
c8:c5:19:bb:d8:7f:60:9a:6d:a8:a7:3d:c8:12:c4:
c5:2e:0c:3c:ac:4e:f1:78:d5:b1:b0:01:f9:a6:94:
6c:08:e2:a3:34:64:e4:ad:d2:0f:cf:52:2b:81:db:
31:71:27:6d:9e:2a:b0:84:e9:4b:2d:89:c2:ed:ad:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:9A:B7:03:8E:94:A2:A2:A1:3D:0D:46:5B:6F:17:63:16:FB:60
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/N2OatwOOlKKioT0NRltvF2MW-2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.146.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fe:02:40:22:39:a4:81:95:70:34:8a:35:22:a5:91:2c:e5:
41:bb:89:e4:1a:b0:38:cf:bd:2d:c8:8d:9b:cc:cf:04:f1:23:
71:3d:70:06:36:7f:b1:0d:06:ea:a8:8f:cc:56:5d:7d:8f:38:
36:86:50:fd:f8:d4:ed:44:b6:1e:30:8b:f9:26:27:57:95:5c:
cf:b5:0e:ed:b9:2f:5c:49:ff:59:d5:98:e0:18:e0:a3:09:11:
99:b9:03:ad:89:f4:84:de:99:17:bf:72:40:32:31:97:59:8b:
03:88:6a:f0:28:3b:bb:e0:f9:2f:b6:dd:65:2e:e4:36:7f:89:
7b:50:02:2b:2c:fa:e8:97:b4:27:48:fa:cf:db:f5:c3:fe:50:
b2:0d:b0:7b:8b:b0:27:e2:17:12:68:34:a4:f9:1f:36:40:65:
e2:50:9a:26:4a:ad:d5:a0:13:4a:0d:38:9a:0c:0d:ce:cf:bf:
23:3e:fb:51:6b:a4:af:bd:b8:96:f6:b1:b5:e1:ce:a3:a7:57:
12:2b:71:a8:e7:40:88:c1:9b:2a:39:85:43:2f:23:c8:51:63:
ab:2a:70:36:3e:ec:1a:63:3d:51:b6:18:8b:b0:4f:ab:6a:3e:
3e:8b:ab:c8:72:e2:21:36:c3:6f:59:d2:b5:a3:c8:61:6c:f4:
e6:39:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:12 2026 by rpki-client