Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/NlaRCtnGhRU48H7rnMoCG-n2Vtg.roa
File: NlaRCtnGhRU48H7rnMoCG-n2Vtg.roa (raw, json)
Hash identifier: WoFtLOFPIK4OzmeDLCfSbLUu4qRcVqPIUb7UyvDh4yU=
Subject key identifier: 36:56:91:0A:D9:C6:85:15:38:F0:7E:EB:9C:CA:02:1B:E9:F6:56:D8
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01A1C101D01E1779A8E5D1AB8494AC595316
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/NlaRCtnGhRU48H7rnMoCG-n2Vtg.roa
Signing time: Mon 09 Nov 2026 15:51:23 +0000
ROA not before: Mon 09 Nov 2026 15:51:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 146.247.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:01:d0:1e:17:79:a8:e5:d1:ab:84:94:ac:59:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 9 15:51:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3656910ad9c6851538f07eeb9cca021be9f656d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:c7:bf:59:95:73:3d:62:f5:17:2d:40:06:
11:3e:ef:fc:ae:df:15:51:0c:04:a7:46:e7:e3:22:
65:a5:55:45:1f:19:8f:9a:03:75:98:95:92:95:01:
fd:5b:35:e2:f9:eb:3f:8a:f7:a8:14:ee:0f:41:26:
df:77:b8:37:e1:40:ac:30:be:44:1f:84:ee:13:60:
80:4e:19:b0:70:6f:00:80:a7:6f:95:93:50:0d:68:
3d:eb:6e:c2:be:c9:b6:c9:30:ac:98:48:fa:42:45:
ee:bf:32:40:ab:99:a4:24:4c:47:41:48:31:e7:95:
61:42:62:3b:ca:f0:40:a5:e2:a5:33:db:e6:bf:a0:
bb:74:d2:ae:a3:0a:d3:bf:7c:dc:de:48:38:2b:55:
3d:6f:13:a5:08:03:a7:2e:b5:99:7a:66:54:de:99:
5c:a8:15:b5:7f:6e:37:33:82:ed:3e:8e:ab:a1:4b:
c9:43:bd:c2:c4:96:e0:9a:47:61:fc:d9:0c:86:20:
a6:f9:a7:5a:2f:2f:6b:64:a5:b2:7f:8a:07:d1:38:
67:1d:4c:61:e7:fb:7c:18:90:d8:c9:b4:fc:fb:72:
7e:56:c4:9d:b3:e5:4d:ad:b3:bd:72:2f:8c:bd:d8:
ab:93:cf:49:1f:71:00:93:7b:53:48:a3:02:29:0c:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:91:0A:D9:C6:85:15:38:F0:7E:EB:9C:CA:02:1B:E9:F6:56:D8
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/NlaRCtnGhRU48H7rnMoCG-n2Vtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ff:d4:d6:ca:28:f4:c5:03:ba:db:41:13:70:67:df:a7:83:
fe:5e:98:04:12:61:e4:4f:59:e1:8c:65:c4:d1:27:fa:02:22:
9f:a4:1d:0e:24:fe:21:f0:b3:77:84:4a:b9:e2:66:1d:be:5c:
c8:31:cb:ff:2e:bc:00:73:e3:07:74:15:d2:c1:51:ba:91:f9:
94:24:5d:10:f3:4f:87:fe:ef:7c:89:92:10:57:62:0d:5f:40:
21:5b:09:28:c1:f2:3b:c2:8b:9e:fa:13:40:26:ba:ee:d8:c3:
69:4a:5e:2e:3a:9b:ec:b3:d5:1a:b2:07:5f:75:1b:8f:6e:44:
e9:a9:3d:c4:84:1a:44:45:33:17:7d:4b:ca:38:dc:39:01:2f:
e0:53:be:d4:a0:d0:5a:03:47:81:44:b3:1f:cb:dc:22:52:84:
24:81:39:61:75:ea:74:99:9e:04:35:13:72:df:e3:ab:8a:85:
d2:9f:ea:b5:c7:db:ee:1e:1d:b1:75:3c:00:18:6c:14:94:8d:
ce:5e:95:6e:eb:92:f1:c8:c8:c2:d3:5f:b6:bd:e7:4f:e2:37:
a7:4b:63:fe:10:00:84:d8:3e:fe:33:fa:c9:0f:98:36:4c:11:
ef:37:ef:20:b5:64:f4:27:29:98:4d:33:5f:e4:23:65:6f:20:
bc:82:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:05 2026 by rpki-client