Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa
File: nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa (raw, json)
Hash identifier: M2JpoqgSEwe8aT8p0RazfqJDidhqU12O5Avd9SXsRGE=
Subject key identifier: 9D:33:7E:0E:03:B9:56:95:1E:68:F7:94:CA:61:4D:A4:72:DD:14:B4
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F58A6A42C82B6CC0963A014AF65CC52C9
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa
Signing time: Sun 12 Jul 2026 23:25:43 +0000
ROA not before: Sun 12 Jul 2026 23:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153174
IP address blocks: 222.167.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:a6:a4:2c:82:b6:cc:09:63:a0:14:af:65:cc:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 12 23:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d337e0e03b956951e68f794ca614da472dd14b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:bb:99:c3:d3:45:db:e1:1c:4b:a7:de:62:
10:45:22:c7:8e:9b:6e:b2:2c:8c:fb:d2:f3:87:91:
cc:72:d9:d6:72:31:f7:83:10:b9:f2:3c:89:d7:ca:
a8:f3:21:ce:ba:48:f6:40:f7:c2:f7:2d:a1:61:fc:
31:bc:ea:26:89:4f:45:b3:d1:34:98:87:1e:78:d5:
c0:2d:a9:93:28:b7:36:0a:44:df:16:49:17:2c:ca:
00:82:3f:f1:10:a6:c9:ec:83:c9:0a:50:47:51:c1:
82:ab:dd:3a:71:05:72:a6:44:a0:e1:98:05:32:ac:
59:37:64:d4:71:17:64:60:a8:d6:72:a6:b9:14:36:
1a:77:9f:0d:1c:2a:30:06:cb:ed:86:36:e1:96:26:
cf:2f:a9:21:59:3a:39:5b:39:74:dc:1a:e7:25:17:
26:81:d4:32:64:c4:34:6c:e1:12:9b:04:67:53:2d:
22:e4:9a:92:df:79:10:94:65:11:bb:8d:94:5b:a8:
8e:34:90:dd:26:14:a4:04:19:df:a0:11:e1:26:e7:
3e:67:9e:97:20:04:72:b5:e1:90:b8:c1:a2:70:7a:
71:29:cc:0c:a5:0f:6a:e0:a6:50:8a:6e:79:e2:b8:
57:c2:97:ca:fa:cd:fd:47:20:15:b5:6b:81:41:a1:
91:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:7E:0E:03:B9:56:95:1E:68:F7:94:CA:61:4D:A4:72:DD:14:B4
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.240.0/24
Signature Algorithm: sha256WithRSAEncryption
74:11:3f:a4:af:15:bd:bc:23:b1:fb:17:ce:b9:ae:27:bc:57:
59:cd:6b:3f:65:d5:b2:1a:9b:5e:c5:7e:3a:21:f3:7b:f0:01:
27:29:1d:52:fb:e9:66:93:72:20:ec:a3:4f:45:0b:74:5e:a0:
45:a9:64:03:c6:53:33:82:7f:d1:d3:cc:68:77:2e:06:1a:4d:
f7:ed:fc:24:24:4f:fa:5c:7a:d9:4a:a2:23:2e:af:d4:2b:1c:
8a:c5:c6:a7:60:41:12:16:8b:4c:60:a9:e1:9d:62:44:cd:dc:
06:2e:f2:dd:29:4d:f2:5d:aa:7a:65:d9:96:ef:c6:7f:25:0e:
4e:a2:a9:63:53:69:82:88:b1:ca:e8:b8:88:38:8e:48:46:50:
5e:b4:40:9b:14:b5:da:c3:0b:b9:95:e1:05:d4:b6:6b:3d:27:
fb:bd:ba:15:95:48:3e:d6:82:c3:9a:b8:2d:79:cb:26:e0:7b:
9e:72:0b:a4:11:19:17:09:36:9f:30:9e:e6:fa:13:78:27:ff:
b3:f0:00:80:c2:a0:c6:c4:4d:08:f3:42:38:17:75:05:0a:fc:
75:c1:7c:46:8f:2a:f4:87:e1:70:68:f4:2b:46:a6:ee:44:79:
ba:89:c0:30:81:98:40:0f:f0:6f:ce:61:7f:aa:2a:00:85:e0:
65:f3:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:49 2026 by rpki-client