Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/NStI2c33ELu1MdgMNr4ASro5yxg.roa
File: NStI2c33ELu1MdgMNr4ASro5yxg.roa (raw, json)
Hash identifier: DGIV6y9JcITViqGIDqZJzNdiLNbdNYRRHPqeCBc+BJY=
Subject key identifier: 35:2B:48:D9:CD:F7:10:BB:B5:31:D8:0C:36:BE:00:4A:BA:39:CB:18
Certificate issuer: /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial: 019F236929A781D22123337FAE31F94EA18B
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/NStI2c33ELu1MdgMNr4ASro5yxg.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 147.252.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:29:a7:81:d2:21:23:33:7f:ae:31:f9:4e:a1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=352b48d9cdf710bbb531d80c36be004aba39cb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:d0:39:49:b0:55:77:28:bf:90:cc:b5:7a:
53:42:45:48:78:ab:64:e9:6f:16:67:38:01:cf:b9:
1d:bb:7e:38:98:b5:a9:b2:71:7c:91:7c:32:ab:ee:
e8:56:ec:1b:5d:1c:ab:e9:6c:19:c3:04:50:31:f0:
d2:aa:51:9a:b2:f0:c4:39:9a:6e:6c:cf:2e:12:b8:
35:73:92:91:1b:03:f0:b9:ee:2c:60:be:56:4d:20:
75:a2:22:c5:c5:84:2f:12:7f:7c:54:3f:91:3a:6a:
03:e1:4d:f5:38:9e:c8:a0:38:21:4b:25:8b:64:c1:
e0:ea:c2:98:d7:8b:b7:b1:a4:8b:39:7e:61:5b:50:
d4:b5:29:2f:6d:dd:53:fb:fd:f1:a3:9f:60:73:f9:
f8:ce:52:7c:e1:0a:3e:a9:02:2d:4c:8b:81:33:f8:
6e:64:70:e4:5d:bc:11:34:bd:2e:f0:5a:e7:ba:bb:
38:e3:5f:6d:d7:bb:78:47:4c:27:3a:3b:7b:ee:82:
5d:d7:5d:d4:86:45:66:2a:80:da:e3:1c:7c:e2:c9:
40:b4:3c:2c:3b:77:ba:3e:23:07:4d:88:4c:c3:81:
d7:58:b7:28:64:8a:ee:f8:cc:01:c2:4b:47:d0:5b:
af:b8:90:05:6f:30:14:1d:1a:66:45:be:cd:71:81:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:48:D9:CD:F7:10:BB:B5:31:D8:0C:36:BE:00:4A:BA:39:CB:18
X509v3 Authority Key Identifier:
keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/NStI2c33ELu1MdgMNr4ASro5yxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:27:61:58:9b:0e:53:68:94:81:8c:60:93:65:52:3e:ba:06:
a6:c7:36:0f:00:c1:19:2e:0c:34:15:48:9f:13:c8:35:57:ac:
9a:3d:80:00:ad:18:4d:63:d5:21:44:61:02:4c:3c:ce:01:ec:
61:59:ed:7b:20:75:11:1b:9b:de:1f:6f:56:47:17:c0:50:f3:
bc:63:a3:92:0c:08:f9:6d:71:ad:86:20:f1:5b:53:46:20:39:
3f:cc:9f:39:64:83:37:82:c0:73:60:5a:a9:7b:a1:0f:0f:10:
ca:49:02:79:37:7b:ee:a8:d8:82:eb:1d:70:a5:0f:cd:0e:5d:
6f:33:40:c2:b7:6c:35:7b:ec:4d:78:50:2d:0e:b8:46:05:da:
ff:3f:73:23:1d:b5:6c:31:23:2b:94:f8:8e:30:f4:2a:dc:80:
ae:b1:38:6e:2e:0e:6f:99:79:6d:7f:79:86:a9:7b:d1:66:f7:
0a:ac:ce:c8:8b:40:16:2d:c1:aa:8a:e5:00:16:c5:01:9b:cb:
46:0c:34:f1:6e:2e:2d:d1:3e:58:12:2c:f5:da:7d:76:22:ed:
dc:6a:5b:1a:1d:d0:c7:75:80:0c:fb:e3:0e:de:fb:ee:8b:f8:
e3:db:b9:5b:f0:75:8b:42:d8:08:98:66:64:aa:02:03:b5:45:
e4:f8:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:33 2026 by rpki-client