Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/1NUWXpfeKx0vRJ7W8ogpNV41960.roa
File: 1NUWXpfeKx0vRJ7W8ogpNV41960.roa (raw, json)
Hash identifier: 9JS+La/T01/6+T7nA2BAGzeWrsvulpV2YjF982PI0a0=
Subject key identifier: D4:D5:16:5E:97:DE:2B:1D:2F:44:9E:D6:F2:88:29:35:5E:35:F7:AD
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 01A0C36B5824CBE5BB7583BC4DABCDE64B5A
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/1NUWXpfeKx0vRJ7W8ogpNV41960.roa
Signing time: Mon 21 Sep 2026 10:03:07 +0000
ROA not before: Mon 21 Sep 2026 10:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 194.36.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:6b:58:24:cb:e5:bb:75:83:bc:4d:ab:cd:e6:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Sep 21 10:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4d5165e97de2b1d2f449ed6f28829355e35f7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:82:a0:04:54:c2:be:60:41:2e:10:40:cc:
77:ed:f4:d0:9d:c6:7a:aa:4b:f3:50:4d:c5:4b:00:
ff:d8:5f:2b:19:a3:56:5f:15:c3:b5:98:8b:d8:39:
be:7a:c9:28:2d:3a:24:5c:14:8e:c3:91:b8:f4:5d:
2b:7f:19:4a:4d:e6:64:26:b5:18:ba:4b:63:f2:b1:
09:0d:bb:ec:d6:f8:d2:06:75:55:a4:d5:39:7c:38:
b9:9d:d4:54:69:6a:2e:75:10:b1:61:53:e1:af:87:
d4:1a:72:b9:1f:07:81:da:fb:13:60:94:4a:08:95:
4f:5f:b7:e2:2e:ba:52:c2:87:0b:a9:c1:35:52:58:
83:09:73:98:32:49:c5:0f:7d:75:4b:93:02:d0:92:
54:62:d0:b5:5f:55:2d:f7:be:56:b5:87:88:2f:ae:
7a:8e:d4:51:e4:ff:66:7c:65:91:b0:60:28:c4:25:
8b:9a:56:9b:ab:da:69:60:e9:67:4f:c0:15:a2:d2:
c3:08:89:d0:f3:c8:5f:b0:81:5c:66:f0:ac:34:c3:
6d:18:5d:21:9f:99:25:ab:6e:10:dd:3a:b1:87:aa:
1a:b7:d4:0d:a9:db:12:27:80:3e:b5:3a:c4:57:1a:
1f:ac:f2:01:1a:00:16:f6:93:95:8d:be:8f:3d:1e:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:16:5E:97:DE:2B:1D:2F:44:9E:D6:F2:88:29:35:5E:35:F7:AD
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/1NUWXpfeKx0vRJ7W8ogpNV41960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.152.0/21
Signature Algorithm: sha256WithRSAEncryption
32:ae:8e:fc:4e:13:b5:88:a9:de:fc:d4:dd:c9:28:93:41:e3:
b8:bd:23:e4:e6:4c:75:7f:b9:e9:0c:f0:6a:59:60:de:46:34:
06:3c:0d:2d:78:fb:99:9f:a5:55:dc:ec:36:37:8d:23:56:bb:
d7:8c:ee:99:f9:af:33:25:50:ad:01:76:94:68:3e:21:c6:63:
82:f1:8d:0e:4a:5c:db:26:d6:99:6d:81:b6:ab:5a:39:f8:a7:
22:2c:ac:08:91:1d:52:a9:34:25:22:4a:05:4b:db:cd:07:b9:
dd:92:de:4f:24:b1:74:38:4e:b0:7a:8a:25:5e:07:71:87:1f:
19:fc:01:bb:5d:ac:b0:0b:3d:7e:ab:01:ee:a6:45:7d:d3:c3:
92:67:c0:0c:d4:00:6b:a4:7f:31:6c:fe:ac:0d:53:57:7c:b9:
e5:51:cf:97:a2:a3:e8:cd:01:18:d0:08:ca:06:cc:10:94:37:
9e:3f:a9:b3:33:4f:f2:32:7c:90:e8:21:c7:9a:64:90:76:88:
a3:17:9f:49:35:9f:10:9c:e8:22:e5:68:d2:8a:33:09:60:20:
a3:d3:04:55:6e:45:0d:49:42:65:7f:1a:4f:5f:00:ad:64:65:
f7:9d:6b:39:0a:d8:92:5e:a8:18:ec:11:39:c0:b4:34:eb:e2:
ca:e0:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:05:06 2026 by rpki-client