Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/nWay-kjM-uXQonlEIzksgPJ2hIY.roa
File: nWay-kjM-uXQonlEIzksgPJ2hIY.roa (raw, json)
Hash identifier: QNv+cuZE5AYtfPUCgiQFK8fsilnJCXuMMkCSBo7INTo=
Subject key identifier: 9D:66:B2:FA:48:CC:FA:E5:D0:A2:79:44:23:39:2C:80:F2:76:84:86
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019F7659A51547F7413E9F5427B4ED5DB96A
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/nWay-kjM-uXQonlEIzksgPJ2hIY.roa
Signing time: Sat 18 Jul 2026 17:50:14 +0000
ROA not before: Sat 18 Jul 2026 17:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.42.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:59:a5:15:47:f7:41:3e:9f:54:27:b4:ed:5d:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 18 17:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d66b2fa48ccfae5d0a2794423392c80f2768486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:09:aa:ff:e2:44:e3:1b:af:1f:cc:83:94:
9a:22:c6:4f:54:86:4f:06:f3:fb:90:fb:23:2d:69:
b9:6f:05:4a:74:3b:d3:0a:d5:8b:f1:34:58:4e:16:
fb:a0:73:60:c0:cd:a4:a8:38:4e:82:3c:bc:cb:75:
79:ca:30:9a:38:63:d1:9a:62:6b:ea:a6:6e:8e:69:
96:39:36:18:79:16:12:c0:85:60:36:16:d6:83:7d:
84:d4:ab:c5:54:0a:a0:e4:ad:9e:42:83:b2:5d:b5:
ab:94:06:b3:86:2e:4e:ea:af:8a:cf:9a:90:80:89:
67:72:dd:4a:5f:0f:f6:33:51:c4:60:63:e3:b4:73:
f0:21:c7:0e:e8:05:a7:fc:cc:7d:7c:a3:24:fd:6e:
11:1b:df:cf:e9:98:62:55:ee:33:81:2e:fa:e5:84:
35:21:1a:0c:22:e6:a8:af:17:c1:46:f1:db:ae:3a:
70:aa:25:39:a6:fc:47:85:3a:65:11:b9:1a:b5:3c:
d3:80:04:cf:e7:3f:c5:39:7c:1b:a5:d5:98:75:ef:
29:0d:9a:33:52:4a:5c:65:39:c4:82:bb:46:56:81:
d4:b7:57:a3:fc:d5:a5:3f:80:d7:91:2c:ab:cc:af:
89:c2:54:42:eb:d1:db:21:28:b2:5d:85:5e:ee:01:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:B2:FA:48:CC:FA:E5:D0:A2:79:44:23:39:2C:80:F2:76:84:86
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/nWay-kjM-uXQonlEIzksgPJ2hIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0/23
94.154.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:01:04:12:5e:69:13:55:13:12:9e:ca:3d:35:ea:29:92:6a:
e3:d3:dc:9a:76:90:1c:c5:d7:db:5e:72:19:cd:d2:df:6a:19:
29:3a:5d:1c:45:a7:cf:b1:70:9b:ed:b7:d4:04:2b:5e:1c:1d:
b1:bc:98:15:4c:a1:5c:d6:bd:75:c8:8f:02:29:11:f3:ae:b6:
a5:4b:0e:a2:93:63:d6:9b:b4:99:5f:80:8b:a1:b4:00:58:5a:
ff:a4:1e:dd:52:4b:c2:bd:8a:4d:07:7b:bd:0a:3a:66:35:f7:
8a:06:ad:9b:b0:9a:7d:69:9f:fd:1a:3d:78:f6:5d:9e:7f:ad:
dd:67:31:1d:d1:71:a8:8d:38:34:f4:f9:eb:ca:6f:4d:66:d7:
6f:b3:27:35:ec:cc:5f:20:57:f3:98:5b:ee:8e:34:ad:06:cc:
e2:05:10:00:05:96:bc:1e:66:a7:f9:9a:4b:43:cc:92:96:de:
f1:14:84:ec:47:1c:ed:c0:57:8c:5c:e2:ad:26:cf:90:4e:82:
32:69:f0:64:2c:b3:99:5e:3e:21:2e:9a:6f:38:19:c3:2d:7a:
9a:fa:18:0b:e3:5a:52:2b:bd:2a:02:5c:c1:5e:50:e5:cc:2b:
06:ab:74:04:92:38:1e:69:45:8a:bf:3b:b3:df:96:1d:25:3e:
56:8d:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:03 2026 by rpki-client