Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa
File: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (raw, json)
Hash identifier: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=
Subject key identifier: 9D:D5:ED:11:78:5A:42:C0:95:DC:57:4C:AD:76:6C:EB:02:6A:D1:FC
Certificate issuer: /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial: 019F2368CEEF0639177417C80119B15109FF
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209495
IP address blocks: 141.98.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:ef:06:39:17:74:17:c8:01:19:b1:51:09:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd5ed11785a42c095dc574cad766ceb026ad1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:a1:17:e2:60:4e:d6:34:52:71:70:e9:25:
19:37:c5:57:33:bf:a7:ba:ba:af:8d:11:a5:34:8c:
1f:68:8d:98:e6:71:f7:15:68:e0:19:0e:38:5c:f6:
55:ce:9a:ad:df:ef:55:9f:2b:9a:e3:5e:5c:d8:66:
50:ae:09:6f:52:4d:d3:a0:40:ed:db:a9:c6:8c:23:
1a:c5:bf:a5:e7:dc:64:84:8f:82:10:2b:bd:42:21:
87:a4:59:0b:eb:cf:b6:a5:5c:ad:d0:f1:96:8f:cc:
7b:06:30:44:a0:89:a7:34:a6:0b:10:ec:1f:06:af:
fc:e8:9a:a5:2f:31:1e:80:d1:9c:5e:30:65:6c:89:
89:18:c1:5c:d3:a4:f0:ad:20:2d:66:6f:ab:3e:f4:
ce:c8:b7:a6:ab:4c:ec:82:26:2a:17:50:e2:4e:3c:
60:8b:ee:d3:81:d3:c3:a0:00:73:bf:59:ca:70:02:
f9:92:55:97:b0:90:26:85:19:cf:26:aa:d9:5b:48:
ca:b7:3f:b2:f6:a7:3a:da:2d:79:8b:44:c1:f3:2a:
d7:46:b1:0d:49:a2:d7:5c:c8:78:5b:e7:03:19:d2:
bc:35:25:6c:32:dc:1a:9f:2b:ee:00:29:88:34:e0:
34:1b:e8:cf:d7:46:49:c5:2f:bf:ac:0c:b9:e1:94:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:ED:11:78:5A:42:C0:95:DC:57:4C:AD:76:6C:EB:02:6A:D1:FC
X509v3 Authority Key Identifier:
keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.228.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:9b:cc:24:be:70:34:9c:20:39:6f:1b:df:a8:04:58:01:b8:
4c:b3:95:5d:b5:6b:33:b1:66:4a:76:2d:0f:87:1c:af:dc:e9:
17:e2:07:c5:38:e1:00:4c:b1:c7:7a:5a:1f:dd:87:90:67:aa:
be:e8:21:36:25:cc:47:d5:bb:df:8e:a0:a1:49:0c:b2:cc:18:
8d:21:1e:c0:ae:80:cb:d5:eb:82:58:9b:a1:bf:cf:7f:3b:10:
e5:5c:52:2f:bb:ab:d3:6b:38:91:c3:18:34:79:6c:19:1f:0e:
39:b7:7b:02:ee:b6:77:ef:fe:e4:b4:0e:f8:76:71:ce:3a:24:
b8:c0:61:3f:d9:44:56:25:41:5b:a6:3e:f7:1d:d8:61:d3:dc:
d4:b3:64:32:2b:3e:1f:07:ed:1f:43:38:12:54:ce:6f:cf:65:
ac:87:42:b2:ec:17:41:e7:73:12:d5:a1:de:72:af:62:01:3c:
ef:69:92:05:50:c5:9f:7f:f3:b8:b3:fa:e8:3a:20:09:c8:3d:
df:cd:cf:1a:c0:b0:a4:29:07:fb:04:b6:d0:a4:5a:a6:c1:0e:
59:a7:51:a8:d1:14:5f:ea:ce:bd:62:c2:93:fa:0b:88:c4:58:
3e:13:d8:59:b2:8f:dc:81:83:f9:3d:43:02:58:aa:ce:a7:8e:
57:b7:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:06 2026 by rpki-client