Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nWjEacEc1Um9FjNYlofGKwao_Nk.roa
File: nWjEacEc1Um9FjNYlofGKwao_Nk.roa (raw, json)
Hash identifier: LJXlCU1qxu+WcMFb9Wy4XstY1xX4FkWR1n0VthvubD0=
Subject key identifier: 9D:68:C4:69:C1:1C:D5:49:BD:16:33:58:96:87:C6:2B:06:A8:FC:D9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0EC10319C3F22F0D805DDBC05F1BC5C7B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nWjEacEc1Um9FjNYlofGKwao_Nk.roa
Signing time: Tue 29 Sep 2026 07:27:59 +0000
ROA not before: Tue 29 Sep 2026 07:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219447
IP address blocks: 212.189.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:10:31:9c:3f:22:f0:d8:05:dd:bc:05:f1:bc:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 07:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d68c469c11cd549bd1633589687c62b06a8fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:2e:25:37:19:fd:20:d8:65:a5:5e:12:a1:
0e:57:e7:a6:c6:fb:46:e0:b6:81:11:9b:9a:ab:4c:
c8:17:a0:bb:ca:95:14:bf:ed:22:e1:f5:db:f4:e9:
9f:4c:ce:8a:a3:22:d0:c4:59:26:f7:34:aa:6e:68:
52:03:1a:99:a8:ee:68:12:97:8c:53:c9:78:5c:da:
bd:3b:f9:35:0d:8c:63:48:26:c9:be:59:6b:3c:5e:
b1:a2:2b:19:8c:d9:a0:35:11:f4:33:ca:eb:fc:3b:
f9:fb:58:bc:ed:16:2f:3c:ce:bc:30:f7:5b:6e:69:
da:bc:2e:a0:36:ae:3a:0c:da:aa:8e:b9:90:26:3c:
20:1e:13:d7:9c:a6:48:bf:71:d7:f5:3a:b0:d5:37:
31:50:4e:ca:3d:d2:98:90:3d:ba:b0:81:47:e8:a0:
0f:85:7a:68:34:bc:2e:ae:11:8a:0d:2e:73:60:62:
d5:85:aa:06:53:97:5c:92:ea:49:34:5e:e9:15:8d:
a0:e1:32:18:29:f5:52:b8:ab:69:f3:a5:7c:9d:35:
62:8b:84:ae:3e:51:79:a3:45:b2:fe:31:89:b4:d1:
dd:97:16:d2:b7:9f:e4:3d:76:12:3f:38:90:fa:a2:
ee:52:dc:39:f7:de:96:51:33:5c:b5:f0:ad:84:2c:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:C4:69:C1:1C:D5:49:BD:16:33:58:96:87:C6:2B:06:A8:FC:D9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nWjEacEc1Um9FjNYlofGKwao_Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:15:1e:03:d9:fc:78:18:d2:a9:ac:87:88:7c:fa:0f:2b:37:
93:71:c8:1f:ba:ab:ee:a0:3f:81:bc:06:ba:f1:ac:02:ca:05:
b5:7a:7a:4c:c5:c2:9f:4d:a9:92:e5:c7:bb:14:6f:8b:d4:fb:
8e:98:cd:36:b5:a0:0d:50:53:95:9a:28:d3:cd:d1:60:7d:da:
b7:2b:2b:e6:f0:6f:7e:f2:b7:86:cc:20:a8:5f:9a:52:99:72:
f0:15:38:de:4d:83:ff:0c:29:03:ab:4e:6d:bb:98:ee:80:9e:
ff:b0:7f:32:8e:17:71:36:b8:32:31:3f:18:4e:a7:99:69:a0:
36:fe:a7:b4:37:b4:a0:8d:b5:66:56:a7:47:fd:89:27:fe:22:
70:ac:26:2f:8e:fd:bd:de:ba:7f:c1:ff:7c:7a:22:4f:6f:61:
0f:2c:73:68:50:3b:59:bf:75:e2:72:10:12:84:07:30:a8:c2:
89:82:4c:63:1a:c4:cc:d2:16:2d:ab:1c:3d:da:e0:af:45:b2:
b5:d6:be:9d:b4:63:c2:3a:da:64:f5:e1:9c:6d:7b:b6:c0:c2:
56:e6:ab:32:25:de:77:bc:a7:b2:57:a7:02:3b:8a:c4:e2:86:
fd:6c:37:45:2d:cc:24:0a:54:ee:ac:1c:f6:cc:4e:29:1d:f0:
15:b2:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:44:50 2026 by rpki-client