Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NsmOmeaN_FBkgEDyXsDfXKnTds0.roa
File: NsmOmeaN_FBkgEDyXsDfXKnTds0.roa (raw, json)
Hash identifier: rDuzUGMbDsMoU7Fz07Z+cZZqQjyPNEb0S1XJLfXoa9o=
Subject key identifier: 36:C9:8E:99:E6:8D:FC:50:64:80:40:F2:5E:C0:DF:5C:A9:D3:76:CD
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F78C836F51924468EFB86AE27E0B9C623
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NsmOmeaN_FBkgEDyXsDfXKnTds0.roa
Signing time: Sun 19 Jul 2026 05:10:14 +0000
ROA not before: Sun 19 Jul 2026 05:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:78:c8:36:f5:19:24:46:8e:fb:86:ae:27:e0:b9:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 19 05:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36c98e99e68dfc50648040f25ec0df5ca9d376cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:f9:35:ff:f7:f5:ec:b9:5f:e1:d7:4b:ef:
d5:79:31:d2:74:2d:39:70:87:9f:8a:08:fc:ba:d2:
3a:1a:54:b9:64:c9:83:7e:c1:45:78:2a:77:9c:b0:
ea:e8:f5:75:99:a6:50:3a:00:a7:de:7a:96:cd:6d:
09:8d:7c:a5:09:14:de:01:76:79:47:52:49:41:ac:
f3:bc:e8:b6:9f:27:fe:4e:62:d0:fe:de:27:87:78:
26:8f:91:1d:2e:d2:0e:a5:80:12:2f:45:20:c9:7b:
c2:7b:3f:55:4b:75:b8:f0:2b:8c:1d:dc:8c:5b:dc:
e5:91:3d:ac:17:0f:a3:d1:ac:ab:e1:2b:51:42:6e:
82:53:0a:a1:3a:40:95:2a:df:d3:e5:18:c2:42:06:
3f:c2:bc:0a:86:72:ad:b9:64:59:23:a7:d3:50:d6:
08:7d:52:97:ab:ed:df:2f:a0:c5:45:03:3c:8f:0f:
00:13:3d:f8:6d:96:81:34:4c:ed:9b:e3:f3:27:b8:
0a:81:c6:84:92:14:ae:64:45:c4:c5:00:91:26:79:
fa:3f:f9:52:4e:28:03:89:89:92:f2:9c:5e:85:09:
c0:f0:b7:58:27:cb:1a:59:c0:e7:00:6d:e9:c8:5f:
1e:a2:e6:a4:4f:a5:1b:9f:81:87:ce:12:f7:07:ed:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:8E:99:E6:8D:FC:50:64:80:40:F2:5E:C0:DF:5C:A9:D3:76:CD
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NsmOmeaN_FBkgEDyXsDfXKnTds0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:ed:05:81:58:4a:d7:e1:6f:9e:a0:8b:ff:93:9f:bd:8c:3d:
85:6b:91:3b:96:ff:2d:c5:0c:3b:72:fc:0b:65:25:6e:84:fe:
ab:17:64:36:98:89:ce:53:72:13:e9:e5:86:27:8e:4c:47:24:
38:9a:b4:f5:a1:3e:32:d3:d3:e2:d2:13:cc:75:db:d4:c2:74:
cd:0f:44:d6:23:67:c8:77:77:65:8f:76:cf:2e:c0:f0:c6:56:
ff:dd:05:5f:df:38:4f:6b:c0:ae:fb:2d:e6:3b:5f:3a:ba:39:
1e:d6:23:5b:c8:3e:7e:bc:65:4b:ad:8e:ac:e4:15:e0:40:d0:
5b:3c:35:b8:4a:0d:c2:0d:91:d2:d0:0a:6b:96:23:2a:10:4e:
2a:9e:b0:bb:21:56:91:dc:4d:42:5a:97:73:f6:04:37:e4:a8:
0d:52:9f:d2:ed:f5:b4:b9:a9:ca:04:95:31:ff:88:f0:9e:9c:
cf:90:2b:34:44:34:17:2f:b2:48:7e:67:1c:0c:69:0d:18:3d:
6a:26:b5:40:a0:e1:76:b1:f2:bb:b0:e6:7d:13:80:16:4a:e4:
bc:42:40:a7:cc:df:4c:45:44:71:1f:6e:75:1f:b3:0c:e5:5d:
4f:fd:56:a7:59:ee:25:f9:3a:68:c8:ec:fb:72:a8:85:ef:da:
45:e9:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:24 2026 by rpki-client