Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/FqLIW4PnSegriGAsoUoWOvj-rbM.roa
File: FqLIW4PnSegriGAsoUoWOvj-rbM.roa (raw, json)
Hash identifier: dDwi3hCzr+TxX3FHNgKuGsM5T5Ly/+2qiRSAz8HLBnk=
Subject key identifier: 16:A2:C8:5B:83:E7:49:E8:2B:88:60:2C:A1:4A:16:3A:F8:FE:AD:B3
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 019F2368A89A2EE73A54A71D258BD9212EF4
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/FqLIW4PnSegriGAsoUoWOvj-rbM.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35074
IP address blocks: 80.89.176.0/24 maxlen: 24
80.89.177.0/24 maxlen: 24
80.89.178.0/24 maxlen: 24
80.89.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:9a:2e:e7:3a:54:a7:1d:25:8b:d9:21:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16a2c85b83e749e82b88602ca14a163af8feadb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:df:f5:fc:b1:ae:69:4b:f0:6a:d3:1d:2a:
1b:27:de:cd:5c:e7:43:7e:63:0b:f8:87:55:71:3a:
c4:1b:14:1d:2e:c4:41:04:ba:c4:e4:56:49:26:6b:
14:ef:f3:a7:63:ca:3e:72:f8:2c:31:a6:62:12:ac:
77:4d:5b:7a:ea:80:18:76:9d:ff:ce:cf:eb:e5:58:
dd:e1:89:62:78:6b:e9:54:d7:be:a0:41:71:78:e7:
c4:90:dd:ef:ad:1b:ce:2d:2a:73:3c:90:e0:3d:a4:
84:9e:1e:9c:eb:91:75:12:6c:d0:a5:bd:1d:60:ff:
5c:5c:8b:a6:44:ef:57:e3:1a:0b:22:4a:a4:aa:39:
6e:90:03:1c:ae:97:21:8b:7d:08:e1:9e:40:ad:4b:
18:c7:f6:5a:c2:b4:44:05:59:37:61:6d:54:3b:9d:
f9:d8:b1:bc:42:a9:f9:e8:18:f2:24:52:6b:4b:0e:
98:e0:7e:89:66:70:79:46:1d:40:33:63:51:e5:62:
7d:f6:83:b0:61:bb:4d:77:43:0c:a0:28:22:49:ec:
e0:d8:5f:15:18:8d:e4:f1:1b:78:16:44:38:07:f9:
e9:0d:fe:33:05:ab:e9:d5:ac:30:de:8c:ff:60:da:
cf:e7:7b:0f:d8:43:ab:a0:3d:45:f1:5f:a8:3d:81:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:C8:5B:83:E7:49:E8:2B:88:60:2C:A1:4A:16:3A:F8:FE:AD:B3
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/FqLIW4PnSegriGAsoUoWOvj-rbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/22
Signature Algorithm: sha256WithRSAEncryption
54:c2:d2:7b:f1:f5:28:f5:0e:89:52:c7:b0:53:86:58:41:a1:
77:85:3e:bb:1c:3a:61:4a:d7:47:8e:7a:99:e0:53:ce:cd:33:
79:ab:56:67:f6:f5:32:80:6d:3c:e2:ae:c2:bf:57:c6:2e:e0:
f4:9a:4c:2a:12:cf:3b:be:86:5f:f5:66:f4:7d:5c:31:10:fc:
40:c0:4c:5b:2b:c7:12:cf:29:46:91:86:2e:50:a9:22:63:4b:
52:19:48:05:7b:ac:20:c1:72:cd:22:5f:00:31:2b:40:24:26:
c9:45:14:3e:ac:a7:d3:65:43:60:40:c8:e4:3b:e1:1f:da:d0:
41:42:10:fe:d0:da:39:5f:74:62:bd:33:f4:11:9e:ce:6d:59:
7b:fe:dc:c9:b9:2c:89:86:d6:06:4d:15:0f:75:64:31:2a:ad:
43:14:cc:73:93:04:42:aa:20:5b:b1:b2:0b:58:6f:a4:f3:e7:
4c:72:09:ad:aa:c0:72:6f:d4:07:a7:86:42:de:a4:e3:db:4a:
38:73:10:b9:a6:38:c4:7b:1c:f8:72:24:31:fe:de:18:06:b2:
7c:5f:00:35:13:26:a9:8f:f9:72:b6:b8:3d:32:31:ea:5d:fc:
d3:3c:2b:27:ea:19:eb:88:37:54:44:11:cb:f0:06:13:6d:19:
77:f9:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:51 2026 by rpki-client