Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/nmYhqDzscOD4WXJul6VqdubZXuE.roa
File: nmYhqDzscOD4WXJul6VqdubZXuE.roa (raw, json)
Hash identifier: NXKrupN7UtGQb1J9RMrCPRHescON/MpPuAeIS3YOdGg=
Subject key identifier: 9E:66:21:A8:3C:EC:70:E0:F8:59:72:6E:97:A5:6A:76:E6:D9:5E:E1
Certificate issuer: /CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Certificate serial: 019F2368358601F9E87A7CDBE43B798A9870
Authority key identifier: FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/nmYhqDzscOD4WXJul6VqdubZXuE.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209985
IP address blocks: 193.160.92.0/22 maxlen: 22
193.160.92.0/24 maxlen: 24
193.160.93.0/24 maxlen: 24
193.160.94.0/24 maxlen: 24
193.160.95.0/24 maxlen: 24
2a0d:ed40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:86:01:f9:e8:7a:7c:db:e4:3b:79:8a:98:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e6621a83cec70e0f859726e97a56a76e6d95ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:43:f4:e1:15:c4:5d:34:c0:ca:e2:e9:3e:
7e:48:e5:71:7b:39:79:63:75:77:88:fe:45:be:44:
aa:b4:b7:c1:51:13:96:96:bd:3b:65:90:a2:f1:10:
d9:7a:0c:74:34:93:8e:59:b2:7f:1a:1a:b3:b3:a5:
ed:77:4d:2c:32:d7:f1:dc:fd:9f:a3:2f:ea:a1:d4:
fc:ee:51:62:bf:98:6a:73:14:9f:05:d1:54:b3:6c:
d3:51:e5:dc:51:6e:f0:7a:37:5e:75:c6:e2:eb:3d:
c9:ad:8b:36:9d:e1:34:70:34:5a:a9:32:bb:2e:5e:
6e:2f:cb:de:bc:41:a0:bf:87:3f:9a:21:6d:e1:96:
af:0b:1b:b4:a7:f5:0c:c7:7a:68:3f:85:16:80:42:
ba:2a:f3:75:f2:90:ca:22:9e:eb:00:2a:9e:fc:a4:
ae:0e:e9:ec:01:fe:cc:fc:47:50:c0:02:38:5b:34:
b4:75:54:d6:7c:25:05:44:2b:16:fe:d8:6e:df:0c:
36:1d:77:9e:2d:4e:ee:a3:fc:d7:97:be:83:e9:6e:
80:72:f9:3e:58:92:64:8a:53:f0:88:96:22:e7:5f:
f4:1a:6d:40:5e:75:6d:46:d9:88:50:c7:93:ad:4e:
eb:52:23:ad:2e:53:87:26:4b:60:24:c0:01:c2:fb:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:21:A8:3C:EC:70:E0:F8:59:72:6E:97:A5:6A:76:E6:D9:5E:E1
X509v3 Authority Key Identifier:
keyid:FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/nmYhqDzscOD4WXJul6VqdubZXuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.92.0/22
IPv6:
2a0d:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
1a:02:c6:22:19:c1:28:dd:a5:fe:f4:02:ad:bd:2e:f0:f6:ac:
18:f4:bd:cd:6d:80:f0:14:62:a4:82:90:46:9c:c7:60:34:69:
f5:55:c8:8d:a8:0c:77:2d:f2:85:ed:5f:66:23:a5:3a:7c:70:
e0:09:74:cd:2e:b2:e5:f4:9d:c0:96:82:41:55:3c:ef:20:5a:
a8:92:15:1d:28:04:da:1d:40:ff:41:20:42:f7:e7:b8:3e:9e:
d6:d8:9e:d2:33:71:44:f3:d2:04:c6:35:9d:ea:27:5f:d6:3a:
3e:98:dd:49:c2:fe:06:c1:06:c7:fe:cf:3c:1e:a9:bf:97:fd:
48:6f:96:d8:fd:2e:e0:9c:f7:cc:ec:42:ef:0d:4f:99:55:30:
fc:58:d4:28:07:23:a6:8a:52:5e:19:1b:56:bb:98:94:84:82:
8b:e8:0c:9d:01:a8:14:cc:3d:2b:b5:1c:94:cd:55:25:ab:e2:
a3:29:cb:28:01:3f:e9:8d:2d:df:52:5b:7a:02:c9:ec:ef:4c:
e2:69:dd:b9:53:38:85:88:18:b6:66:17:17:4f:1c:11:be:05:
9b:0b:48:8b:cf:d7:72:32:6c:32:ba:85:79:94:a7:3b:69:ab:
bb:e9:74:10:4a:58:8b:87:c4:ef:cf:16:37:77:0d:91:af:c4:
66:a9:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:26 2026 by rpki-client