Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/nOzHdVSVFT8iIJGyLic0u7u7NaE.roa
File: nOzHdVSVFT8iIJGyLic0u7u7NaE.roa (raw, json)
Hash identifier: t+CYzdrBmRUf/7FA3kXnfrrXfCtsfJ6AG3z7TQG7WKE=
Subject key identifier: 9C:EC:C7:75:54:95:15:3F:22:20:91:B2:2E:27:34:BB:BB:BB:35:A1
Certificate issuer: /CN=5d9c8677efd6131b4eb84b42ce5f3c547b757892
Certificate serial: 019CE88DC040379069DB10AD71FC1C8AB21D
Authority key identifier: 5D:9C:86:77:EF:D6:13:1B:4E:B8:4B:42:CE:5F:3C:54:7B:75:78:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZyGd-_WExtOuEtCzl88VHt1eJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/nOzHdVSVFT8iIJGyLic0u7u7NaE.roa
Signing time: Fri 13 Mar 2026 18:55:29 +0000
ROA not before: Fri 13 Mar 2026 18:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200101
IP address blocks: 203.26.132.0/24 maxlen: 24
2001:678:1200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZyGd-_WExtOuEtCzl88VHt1eJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:8d:c0:40:37:90:69:db:10:ad:71:fc:1c:8a:b2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c8677efd6131b4eb84b42ce5f3c547b757892
Validity
Not Before: Mar 13 18:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cecc7755495153f222091b22e2734bbbbbb35a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:ae:2d:6c:9f:10:29:e1:e4:24:0a:cb:89:
98:ee:81:87:ff:0b:60:e3:e1:ba:49:fb:b5:25:eb:
f6:6b:9e:65:4e:23:78:c3:b7:43:b6:7e:f6:2a:7d:
12:5f:02:af:32:f9:f3:e8:41:7f:2b:6e:b5:fd:d4:
b0:b0:48:8e:ce:16:d9:23:77:e6:34:7b:8d:79:1e:
d7:f8:93:2a:15:1a:c6:b2:0a:33:c0:5f:a6:d4:a7:
b4:a8:e3:54:fb:0c:ff:08:07:0a:83:a6:8e:6f:84:
da:ef:d3:a0:17:24:5b:6d:bf:1b:1c:ac:9f:b4:25:
84:fc:e0:50:c5:20:07:a6:f6:6c:58:55:df:c0:2f:
37:60:ff:4c:7c:d6:c2:b8:13:3e:d1:da:c9:21:5f:
9c:6f:9b:ff:3a:6c:ea:43:63:db:e8:dd:a2:2b:5d:
1f:5b:d1:c5:5b:35:5f:95:78:63:e6:3d:29:fc:65:
6b:3c:df:e3:e3:5d:3f:1e:b6:5e:42:a7:66:a6:af:
bf:a2:c4:45:f6:51:75:b6:7e:0b:b1:ac:62:68:ad:
b7:42:f6:fa:35:8c:21:10:5c:91:b7:1c:93:b4:c0:
13:d0:50:68:85:75:80:52:b7:97:3a:fc:3c:47:d3:
ce:8a:ac:35:89:fc:1a:23:74:40:4d:d4:1d:7a:04:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:C7:75:54:95:15:3F:22:20:91:B2:2E:27:34:BB:BB:BB:35:A1
X509v3 Authority Key Identifier:
keyid:5D:9C:86:77:EF:D6:13:1B:4E:B8:4B:42:CE:5F:3C:54:7B:75:78:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZyGd-_WExtOuEtCzl88VHt1eJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/nOzHdVSVFT8iIJGyLic0u7u7NaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.26.132.0/24
IPv6:
2001:678:1200::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ca:1a:f5:f1:ce:1f:d2:a4:bc:62:fb:8d:21:ff:b3:c1:8b:
9b:ca:d2:00:29:b0:57:89:75:a0:3c:ae:ac:55:74:98:0f:39:
82:1f:28:13:54:b8:19:51:7c:c6:8b:d5:38:95:76:46:f5:51:
2d:3e:a6:77:e9:63:dd:66:9b:fd:57:33:78:b0:5a:f8:74:fd:
b6:aa:00:d9:b8:69:23:6e:7e:e1:10:7b:4a:7f:1b:07:bd:e2:
c8:2e:bf:e7:2b:d4:d1:b2:5f:cb:54:4a:f2:86:6f:d9:ae:cc:
42:20:58:73:28:75:3a:36:10:4b:c4:90:42:69:05:0e:49:a5:
fc:51:74:37:7d:f7:4c:25:94:a4:e7:0b:a5:82:f3:02:be:7f:
bd:26:25:a5:8e:bd:b2:7f:a1:7a:36:4a:69:ea:09:c7:28:1e:
e5:8d:f2:5f:e1:45:52:9c:96:85:e9:7f:1a:95:d9:43:ed:79:
4e:a2:c0:8a:58:48:12:b9:24:3b:50:a8:b9:2a:4d:72:f6:7c:
66:1f:cd:71:7e:69:4f:08:c8:b4:c1:08:5b:17:92:c3:38:55:
35:9e:1a:ad:ff:b6:ba:6d:69:e0:7d:4a:0f:57:33:48:a7:86:
59:04:c5:9c:ac:fc:14:76:30:4e:6a:9a:1e:b5:33:25:61:82:
ee:6b:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:42 2026 by rpki-client