Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/NDgwosBivtCUmwad7BnUzyplX_s.roa
File: NDgwosBivtCUmwad7BnUzyplX_s.roa (raw, json)
Hash identifier: h9sJO1cL1WjjsyTMIzDoRge4x7q6d7oaPPovlZY343s=
Subject key identifier: 34:38:30:A2:C0:62:BE:D0:94:9B:06:9D:EC:19:D4:CF:2A:65:5F:FB
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0C866ACDE4E8E7CB1EF952348639D40FB
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/NDgwosBivtCUmwad7BnUzyplX_s.roa
Signing time: Tue 22 Sep 2026 09:16:07 +0000
ROA not before: Tue 22 Sep 2026 09:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214794
IP address blocks: 103.146.118.0/24 maxlen: 24
195.226.88.0/24 maxlen: 24
195.226.89.0/24 maxlen: 24
195.226.90.0/24 maxlen: 24
195.226.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:66:ac:de:4e:8e:7c:b1:ef:95:23:48:63:9d:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 22 09:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=343830a2c062bed0949b069dec19d4cf2a655ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:cb:10:70:be:84:7f:54:bd:ba:cf:05:50:
d3:51:ef:fb:1e:98:21:84:0a:aa:e9:33:8b:ba:5d:
bf:3a:a5:6f:55:f1:52:d6:a7:c3:81:69:46:ef:19:
34:4f:d0:b3:93:29:7e:69:6a:22:9d:f4:a6:c9:01:
5d:d8:39:cb:63:74:27:b0:9a:59:3d:3f:50:1f:6e:
fc:a1:63:0f:8d:d9:31:a9:a2:9b:3c:8e:d1:c9:26:
80:d0:d9:61:55:6f:58:23:f2:c4:aa:aa:63:84:33:
bc:54:45:cb:b3:13:d8:de:ba:62:4a:d9:46:11:6e:
6a:08:08:28:26:c7:fb:b1:7c:2e:bf:85:cf:4b:9d:
95:94:36:b9:93:98:86:03:64:74:cc:db:fe:50:7d:
f6:c0:e8:96:f8:d4:4a:9c:63:49:be:d0:b3:73:a8:
7d:fb:95:83:ab:9b:21:ab:7e:e6:e8:1b:c8:45:80:
79:e4:f5:9e:23:21:2d:62:b6:cf:f9:10:1b:70:2f:
78:18:48:8c:8b:71:b7:16:04:3a:18:95:64:8e:0e:
b8:49:ce:51:4a:e6:af:89:58:36:7c:af:c1:65:df:
6e:21:54:83:ac:d9:bf:fb:7f:9a:56:87:81:17:d4:
78:8e:92:2a:fc:02:e1:b5:59:d4:1e:b5:26:5c:4b:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:30:A2:C0:62:BE:D0:94:9B:06:9D:EC:19:D4:CF:2A:65:5F:FB
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/NDgwosBivtCUmwad7BnUzyplX_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.118.0/24
195.226.88.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d5:36:ab:02:cc:17:5e:bc:61:8e:57:cd:e3:32:82:2e:69:
8b:5e:06:0a:fd:51:e6:c5:34:d0:bb:96:3f:b5:9d:54:0e:ab:
5c:2e:d7:5c:a7:12:de:52:18:92:96:60:c7:ee:9d:c3:28:ca:
76:36:03:3e:36:f5:77:30:b5:aa:f8:b2:03:55:6a:a8:22:d9:
b2:68:dc:d8:bb:aa:89:17:f0:a0:93:de:90:e6:6a:98:30:5b:
fb:a3:b0:32:56:27:c2:e0:cb:db:72:f2:9b:6a:e0:13:84:80:
f1:10:98:50:cc:99:27:b7:87:7c:dc:4e:c1:78:4b:54:07:3f:
c2:f4:0d:3a:ea:ab:87:4e:e0:9c:63:91:05:e8:74:8b:0c:a1:
46:ef:3b:96:57:ab:ca:b7:4c:54:3a:c1:42:00:d1:a3:95:d0:
3b:00:f6:49:0d:1a:a5:da:e6:42:f6:29:a1:af:41:13:c8:92:
53:61:29:65:ca:a6:60:0f:f7:8b:d3:81:e9:74:4e:af:96:42:
f6:6d:71:ac:81:f8:a3:22:77:04:8b:aa:13:41:76:87:4e:64:
30:7b:fa:b7:21:ce:2b:16:35:e2:9a:57:9f:89:ff:a1:63:d2:
95:ea:f3:73:b4:78:61:c2:cf:f5:3d:db:2f:4c:f0:41:f1:10:
ed:f3:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:09 2026 by rpki-client