Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NPr-5u9U7MIX2e3OzT8_NjH1C1Y.roa
File: NPr-5u9U7MIX2e3OzT8_NjH1C1Y.roa (raw, json)
Hash identifier: hvp4xpUmUXIpTIFPYu9ycp7DTNcdBCtnVxsDXG4ZOd8=
Subject key identifier: 34:FA:FE:E6:EF:54:EC:C2:17:D9:ED:CE:CD:3F:3F:36:31:F5:0B:56
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BDB541D7E1DB4F10FE5044DB833239A3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NPr-5u9U7MIX2e3OzT8_NjH1C1Y.roa
Signing time: Sun 20 Sep 2026 07:26:07 +0000
ROA not before: Sun 20 Sep 2026 07:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 194.77.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:b5:41:d7:e1:db:4f:10:fe:50:44:db:83:32:39:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 07:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34fafee6ef54ecc217d9edcecd3f3f3631f50b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:d9:9d:c8:3d:1b:41:9f:28:9a:7a:3f:54:
5e:b3:39:ae:23:53:21:2a:1c:64:4b:a2:25:28:e7:
34:a2:4c:34:f1:e8:77:71:00:1a:aa:54:17:5a:12:
cf:6d:9c:12:c7:92:27:a1:36:ca:b7:bb:a1:77:7e:
c3:39:dd:00:93:8b:f8:be:0f:d4:25:cd:a4:1a:a0:
f7:e0:32:25:88:92:49:7d:af:b5:44:8b:b2:dd:ac:
20:1f:2e:32:0b:e1:db:57:d3:9f:91:30:5f:aa:a2:
d0:4f:c1:e7:d3:25:a4:61:1a:32:e2:3a:5b:02:89:
b4:da:50:d6:ae:df:03:9d:f6:3b:6c:02:95:a2:34:
37:f8:4f:dd:d3:e8:91:93:ad:51:b4:f1:32:6a:5e:
5a:78:25:ff:e3:c1:53:bd:21:d9:9f:09:7c:01:9d:
6a:4d:fa:cc:c8:06:4a:73:35:34:d4:58:2e:8d:2a:
56:e9:d0:04:db:3b:76:08:e9:4d:2a:c3:46:e6:a8:
a7:93:4e:4b:9b:03:76:20:a2:9e:31:02:9c:20:a6:
cf:5c:e7:13:54:86:74:2f:63:d5:84:49:fa:98:2e:
e3:3b:b9:65:a9:97:1c:8f:e9:e0:17:94:7f:ed:7a:
75:14:12:3a:b9:cb:e5:18:64:0d:b0:75:a3:27:8d:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:FE:E6:EF:54:EC:C2:17:D9:ED:CE:CD:3F:3F:36:31:F5:0B:56
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NPr-5u9U7MIX2e3OzT8_NjH1C1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.92.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4e:36:ba:14:26:ba:f0:21:92:36:0b:60:ef:99:88:eb:f1:
40:36:fa:19:23:d6:0b:48:c9:75:0e:ec:f3:bf:7d:45:df:d1:
ad:bf:07:f7:a2:39:eb:e1:fd:a0:24:bd:43:6d:27:95:5a:86:
16:dd:d7:8a:08:d8:8a:cc:88:3d:6b:fb:19:1d:1a:42:86:ef:
8c:87:7f:18:50:f8:68:c4:5c:2a:2f:a1:57:c8:e8:75:ea:a2:
85:cf:25:81:17:ca:5c:6d:05:89:9f:ec:35:51:76:b8:50:8a:
e9:ba:41:c7:a4:c8:b1:36:51:17:d1:23:eb:b5:07:e2:e0:68:
bb:12:de:ce:47:a3:a6:6e:42:68:f8:3c:a4:2a:5a:9b:e3:e7:
d4:bf:e3:30:6d:a7:54:25:d5:7a:a6:3f:77:a4:c0:31:c2:38:
33:93:db:a2:97:71:d1:1d:6b:0e:5f:77:ef:fc:93:48:a4:b7:
25:03:b6:a2:33:dd:d5:b7:ea:87:00:59:17:72:09:e5:de:4f:
16:6f:b2:13:0d:33:7a:db:fc:22:5f:38:fa:78:44:22:d4:b3:
8a:de:37:0b:e1:60:f0:28:fc:22:00:b3:06:47:45:40:2a:f3:
06:6d:da:a7:f2:bc:56:66:8d:e7:e2:eb:56:4f:98:08:36:55:
fe:0e:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:05:43 2026 by rpki-client