Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nj0zLQYExCxFt5wWeoVi7_ZmyzY.roa
File: nj0zLQYExCxFt5wWeoVi7_ZmyzY.roa (raw, json)
Hash identifier: AkgLJkPOIOj2fAEAjX1LvkDB7vqF19fZDn1nLYmZFGI=
Subject key identifier: 9E:3D:33:2D:06:04:C4:2C:45:B7:9C:16:7A:85:62:EF:F6:66:CB:36
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10D5107C171040AB3DD8415D80E7E484E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nj0zLQYExCxFt5wWeoVi7_ZmyzY.roa
Signing time: Mon 05 Oct 2026 18:26:16 +0000
ROA not before: Mon 05 Oct 2026 18:26:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 77.67.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:51:07:c1:71:04:0a:b3:dd:84:15:d8:0e:7e:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 18:26:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3d332d0604c42c45b79c167a8562eff666cb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:cd:75:4c:23:6d:54:2f:fa:dd:0e:bd:20:
d1:40:85:ce:ae:d2:c1:cd:0d:2c:2c:3d:26:01:3e:
a6:0b:b9:fa:b6:56:01:96:73:25:71:2c:36:e6:8a:
b5:5f:71:19:5d:8d:90:32:7c:d5:88:65:c5:7f:56:
a2:d6:1e:0d:2a:25:e7:44:be:2b:88:22:3a:e8:10:
92:f0:9f:e5:c1:5d:6f:68:8a:ef:74:06:ec:ac:bc:
70:7a:4d:70:dd:05:2f:27:08:0e:4b:d8:d1:cc:cc:
8b:72:d0:d5:05:5d:a8:a8:cb:f6:46:ec:87:20:c8:
32:41:86:2a:fe:fd:38:c6:a4:54:d5:b4:c0:4b:c5:
ba:ec:18:e4:00:d3:b8:67:3d:82:a3:5b:d5:dc:ed:
93:f9:7d:b8:aa:28:6c:f7:b5:34:a2:f2:f6:94:7f:
0b:c1:ca:9e:de:0a:6e:ac:67:60:46:f4:5a:3e:97:
a3:e9:68:37:dd:82:cb:7c:b1:c2:89:c5:e9:6d:30:
e0:1b:d1:65:74:2e:9b:e3:32:32:9c:fc:0e:5e:be:
3a:a1:9f:54:78:c8:ca:de:72:b3:0b:65:7e:55:b8:
b7:53:24:30:3e:b3:fc:4a:7b:81:5b:97:af:b6:2c:
03:7c:0e:08:26:90:71:2a:50:63:ae:fb:d1:88:0b:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3D:33:2D:06:04:C4:2C:45:B7:9C:16:7A:85:62:EF:F6:66:CB:36
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nj0zLQYExCxFt5wWeoVi7_ZmyzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1b:3f:22:87:07:54:24:27:1c:f7:cf:dc:9b:9e:43:a0:f1:
cb:51:98:9c:7a:b4:94:75:5b:1a:29:d2:ca:88:ec:3c:ec:0f:
2a:f4:c5:1a:3a:a3:2e:f7:68:53:04:57:87:03:a3:f8:04:67:
13:87:05:2c:8d:ea:47:f2:d1:8e:4a:7a:77:33:b6:67:9e:39:
6b:7e:1c:c6:3a:b5:de:25:f5:a0:71:a3:80:1b:c8:ed:83:00:
0c:73:09:47:a4:f0:ac:ba:6b:5b:93:c9:8a:56:b8:de:95:ac:
53:fb:74:cb:7f:1d:83:17:a0:cc:67:1a:31:59:2c:60:b4:22:
49:78:ab:7d:04:76:8c:02:dc:48:9b:59:25:d3:7a:1d:dc:bb:
cd:cb:c0:cb:e8:76:a9:55:b9:da:d9:28:9a:d2:3f:16:94:c9:
34:f9:98:ae:b2:c0:0e:f5:a6:ad:fb:44:60:79:1a:ab:95:4d:
c9:1a:41:9a:31:c5:79:23:f8:be:e4:11:a0:8d:66:eb:57:60:
af:37:ca:57:1a:2a:29:b9:a5:0f:39:dd:57:a1:7c:c9:90:6e:
f0:34:0e:b4:2b:d0:5f:e2:7c:da:77:28:40:d8:61:19:f5:44:
1c:27:b3:cc:11:24:00:e6:d2:26:0e:11:fb:95:97:37:22:54:
44:eb:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:59:08 2026 by rpki-client