Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa
File: nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa (raw, json)
Hash identifier: pyPCsxzb7EcyMnd9eFCWZ2gNgE3Dkb4SSpOIKliViJ8=
Subject key identifier: 9D:91:EA:42:19:40:51:FA:62:FB:1C:90:40:89:4B:9D:3F:F9:CD:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 01A0CA41D5A19BC145FFCF05C90319633CF5
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa
Signing time: Tue 22 Sep 2026 17:55:07 +0000
ROA not before: Tue 22 Sep 2026 17:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393960
IP address blocks: 213.178.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:41:d5:a1:9b:c1:45:ff:cf:05:c9:03:19:63:3c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Sep 22 17:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d91ea42194051fa62fb1c9040894b9d3ff9cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:a0:a8:8f:33:d5:6d:de:fe:5a:ee:15:97:
e6:cb:5c:23:d0:14:12:22:4a:bd:16:4f:a5:f8:f9:
93:99:0c:9c:e0:1a:e6:7b:40:68:42:13:a5:01:30:
8b:80:f9:c6:1f:32:28:d0:b9:4d:cf:79:19:7a:10:
2b:b2:42:ec:90:f3:b3:e7:5c:12:38:dc:0f:78:19:
9c:09:46:b9:aa:0c:05:5b:1b:37:96:f7:83:a4:ca:
56:06:49:3d:f2:ea:96:b9:4f:23:35:1e:9c:cb:ae:
fe:d2:27:68:34:0c:c8:6b:9f:53:ec:e9:6b:ed:d9:
8a:3c:ae:0e:11:eb:cc:fb:c2:e2:6a:8a:8e:42:54:
0b:2f:60:8e:0f:24:22:ff:2a:6b:93:c1:8b:45:8c:
22:4f:e8:b9:2b:9a:5f:2c:c2:3a:33:f2:b2:52:c0:
8d:7b:fe:b0:97:7f:fb:88:01:0d:96:37:55:3a:42:
b6:f5:33:61:78:82:6f:0d:ae:bf:3d:c4:45:9b:b8:
f1:cf:0e:65:bf:b5:12:9b:f0:3f:5f:a7:df:77:3b:
85:8d:71:22:64:03:ec:80:76:9f:a1:ec:9f:85:95:
2f:27:87:2a:c2:20:90:36:e9:52:a6:23:26:bd:a2:
71:71:03:6f:6b:6a:fd:e1:e2:de:dd:86:2d:b6:37:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:EA:42:19:40:51:FA:62:FB:1C:90:40:89:4B:9D:3F:F9:CD:56
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:17:df:a5:3b:3e:7c:76:16:ad:84:f1:b5:2a:cd:72:8d:15:
48:b2:0e:3b:fd:24:91:c1:88:13:9c:7e:a1:34:12:a5:dd:b8:
1d:d3:11:1d:e8:4d:1e:47:65:6d:b3:88:af:4f:7c:bf:c0:99:
e2:ec:9c:4c:43:cf:19:03:ba:04:b4:49:9a:e5:e5:4a:06:b3:
58:7c:1f:57:47:01:01:65:32:b7:60:7e:ab:80:ef:e3:5e:7e:
d6:b2:5f:56:30:ea:da:8f:57:9d:0d:ea:dc:c8:83:cb:65:13:
0a:0c:2b:67:71:2b:e7:74:ae:4c:ab:dd:9a:47:24:ff:46:5e:
46:4c:3e:5d:42:9a:4d:1c:ce:67:ea:41:b5:40:c8:c4:3c:5b:
7f:37:2f:d4:75:72:9a:8a:46:6c:49:e7:24:d2:fb:0a:74:fd:
08:1c:4e:21:be:0b:3c:73:2e:02:69:49:7f:f5:1e:17:88:8c:
ab:15:9b:70:22:f1:fd:1c:0b:0f:f5:29:8f:af:85:49:81:b7:
5a:4d:35:b1:10:15:8c:ed:f1:23:7a:a8:16:72:dc:82:f9:51:
de:2f:e1:fc:b6:6f:11:b0:38:8f:5c:44:ee:c3:06:44:00:0e:
a5:1c:31:4f:75:37:c7:71:2e:12:87:99:ba:8d:54:9c:ef:78:
84:a5:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:17:50 2026 by rpki-client