Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/nfeUx9_uQdTXEUedvn5FMkt6AIU.roa
File: nfeUx9_uQdTXEUedvn5FMkt6AIU.roa (raw, json)
Hash identifier: EU+TkvyM5nsvnk885XKH0d9je4qaR8Qx4ANcG5mboyM=
Subject key identifier: 9D:F7:94:C7:DF:EE:41:D4:D7:11:47:9D:BE:7E:45:32:4B:7A:00:85
Certificate issuer: /CN=deceda98c164c705cc46a8bab74510164a4e5443
Certificate serial: 019F2368B6FEF7CEE95F42A9D165C57F2FC6
Authority key identifier: DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/nfeUx9_uQdTXEUedvn5FMkt6AIU.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44456
IP address blocks: 89.162.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:fe:f7:ce:e9:5f:42:a9:d1:65:c5:7f:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deceda98c164c705cc46a8bab74510164a4e5443
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9df794c7dfee41d4d711479dbe7e45324b7a0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:ac:b5:79:4c:af:7d:13:74:27:64:c8:aa:
bd:22:ca:94:0b:b0:69:ad:ed:42:ab:c7:df:f7:b3:
9a:2a:c5:eb:39:25:ba:bb:d5:69:e2:75:9e:17:bb:
28:37:0f:23:f8:aa:ff:e2:d2:25:c2:c1:57:ae:6c:
5a:ac:3a:ae:25:eb:db:c3:d3:d0:fc:c7:b8:5f:a8:
38:a1:ae:5a:b1:d1:33:8d:d5:6f:c6:0c:be:4d:e4:
ea:01:0a:79:14:3c:33:8a:c7:e5:f5:8c:ad:1c:da:
71:14:75:da:b1:cb:74:cb:a2:23:eb:4a:ca:94:86:
5f:95:49:70:24:3d:c0:5a:e6:e6:a2:8b:bb:39:fc:
be:67:6d:19:f2:ef:3c:53:03:60:6c:a9:0d:ed:7a:
67:00:49:7d:37:fb:7f:d0:0e:09:77:79:b7:60:3b:
07:08:38:33:6e:91:cc:13:87:e9:98:64:92:34:4e:
0d:9e:e9:ee:c0:49:d7:bf:93:9d:23:29:a9:a5:38:
5c:6e:97:1e:eb:49:08:cf:bd:b9:91:f7:99:24:f9:
32:01:32:ff:d7:d6:f0:20:a9:1b:dd:f3:04:89:cc:
32:41:9f:95:e1:f1:e4:25:62:a1:e1:8b:00:d6:4c:
28:34:3d:03:d6:c7:91:8e:d0:d7:4c:d4:05:ca:d7:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:94:C7:DF:EE:41:D4:D7:11:47:9D:BE:7E:45:32:4B:7A:00:85
X509v3 Authority Key Identifier:
keyid:DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/nfeUx9_uQdTXEUedvn5FMkt6AIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.162.191.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e2:c9:99:5c:c6:36:c3:ff:6e:a9:e0:a0:d4:93:5d:05:b1:
70:ae:4e:cf:eb:c5:b9:60:a5:d2:28:dd:d4:20:62:db:78:be:
51:bf:9a:8b:29:7d:39:80:f6:76:a7:64:85:bc:e3:45:d5:79:
43:00:22:d6:b1:f6:cd:df:95:38:0f:79:0b:be:2c:8a:1d:c7:
65:a1:a6:ba:9f:53:97:8a:fd:96:1c:e1:a9:cc:cb:ec:ce:ff:
ad:56:e6:4f:5b:06:db:50:08:17:14:6d:ec:49:fe:a8:e7:e4:
e3:1c:97:4f:11:3a:1d:e2:c3:27:6b:f4:6a:0a:56:49:75:32:
49:15:22:29:e9:4a:74:9d:ac:e3:f9:90:ff:0d:de:81:c3:ac:
cd:4b:72:9f:eb:cd:fa:19:b1:39:8d:f2:88:53:41:27:93:6d:
15:9c:58:76:6d:81:6e:f8:15:34:84:7a:10:b5:78:1d:61:7c:
0a:2e:69:50:0a:98:6b:28:02:22:5c:9e:80:3b:fe:5d:c2:e0:
ff:94:6d:c1:e5:ac:21:34:12:96:12:4d:5e:18:8d:96:09:8e:
9a:82:9b:69:8b:3b:06:ec:b1:ac:e5:36:ae:9c:41:1b:ab:61:
2e:c9:30:3d:32:20:48:62:c2:32:a1:ee:2c:da:bc:20:50:b8:
f3:07:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:06 2026 by rpki-client