Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ni321Mar-ni3Fng6sRVQrZYJFJE.roa
File: ni321Mar-ni3Fng6sRVQrZYJFJE.roa (raw, json)
Hash identifier: kQmfkuMhd35mY7SEXHcSPmCi04npAfw+HLHIprCZrEA=
Subject key identifier: 9E:2D:F6:D4:C6:AB:FA:78:B7:16:78:3A:B1:15:50:AD:96:09:14:91
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019F6B1ACDA028F09BAB83A5A5F2AF16D194
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ni321Mar-ni3Fng6sRVQrZYJFJE.roa
Signing time: Thu 16 Jul 2026 13:25:46 +0000
ROA not before: Thu 16 Jul 2026 13:25:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48760
IP address blocks: 195.62.12.0/23 maxlen: 24
2a07:1cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:1a:cd:a0:28:f0:9b:ab:83:a5:a5:f2:af:16:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jul 16 13:25:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e2df6d4c6abfa78b716783ab11550ad96091491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:f4:50:e1:fd:a0:78:b3:5b:dc:ce:2e:73:
7a:93:49:c1:0a:aa:f3:a3:a0:30:e3:47:58:d9:34:
d4:93:bd:17:55:06:83:7b:78:bf:1f:ad:fc:b1:e1:
23:0f:52:60:c2:65:31:db:3a:13:e2:16:69:d9:3d:
69:8b:f9:be:78:41:4c:44:7b:11:fc:84:17:47:d6:
3a:fb:f2:fc:97:26:2c:95:95:f6:5f:2a:12:97:9d:
6f:07:06:71:bd:f0:7f:2c:32:03:e5:2e:b8:e5:e2:
af:46:94:3f:25:42:5d:de:57:62:c4:40:f3:13:12:
56:ce:ad:1f:fd:e5:a8:ab:19:bd:7e:7d:6d:eb:e9:
62:de:e7:05:e5:69:ad:36:e7:70:48:04:a2:7a:60:
86:8e:79:d8:2f:b7:06:c5:75:7f:a6:8e:b2:41:23:
f0:ff:53:a1:19:fb:5b:0e:5e:fc:31:9f:55:65:85:
10:98:d7:3d:24:64:52:98:58:33:c2:44:5c:69:d8:
e7:1c:c8:f9:b9:93:ec:11:63:26:27:01:43:80:53:
4a:df:a2:95:db:60:b7:06:a2:14:e5:6c:c6:e7:97:
cf:63:5e:7d:21:a0:bc:f3:b5:74:86:1e:00:43:ed:
ef:c3:00:54:b7:f2:ba:d0:98:8b:7c:0d:a9:df:1c:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:F6:D4:C6:AB:FA:78:B7:16:78:3A:B1:15:50:AD:96:09:14:91
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ni321Mar-ni3Fng6sRVQrZYJFJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.12.0/23
IPv6:
2a07:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:10:07:91:24:53:18:77:a9:13:36:4b:d5:b8:cc:9f:c5:5e:
b2:b1:ee:d8:8f:0f:7c:64:13:5c:bf:89:f3:bf:5e:57:a8:ec:
50:28:20:e5:f8:18:eb:88:3a:99:a6:32:ff:80:85:66:e4:64:
54:06:35:ec:a8:e5:fd:e1:26:10:90:5c:15:68:7e:f8:f4:01:
07:e7:a9:80:42:06:c5:c4:81:1b:4d:e6:07:20:b1:d6:f5:eb:
0c:fc:80:c0:3c:44:bb:9f:22:97:5b:63:93:7f:4d:23:e6:78:
8b:ed:ca:5e:5a:df:e1:dd:2a:0f:67:10:16:81:81:e4:8f:ee:
e0:59:30:bc:cc:b6:b8:49:ff:5f:38:19:63:a3:d0:82:30:88:
ba:19:a7:4e:a8:d8:12:20:85:73:43:55:a1:d4:c2:66:df:f9:
73:5f:86:f1:df:6c:5c:40:fa:1d:54:2a:8c:d8:5a:cb:a9:67:
69:df:06:6e:d1:42:1c:aa:8b:e2:aa:85:16:eb:03:75:08:16:
fd:85:ab:5b:fe:4b:04:4e:b0:d0:66:e0:64:cb:ab:27:75:35:
0b:45:28:97:27:53:e1:12:5d:8a:ac:02:82:01:17:0c:8a:12:
44:cc:62:3b:e5:4a:a4:79:22:b2:7d:99:79:1c:dd:e6:fb:cb:
78:7e:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:40 2026 by rpki-client