Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/NjhjTKawIenVH3d-r5iLAxjav8U.roa
File: NjhjTKawIenVH3d-r5iLAxjav8U.roa (raw, json)
Hash identifier: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=
Subject key identifier: 36:38:63:4C:A6:B0:21:E9:D5:1F:77:7E:AF:98:8B:03:18:DA:BF:C5
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 019D21A9F2428EAB903912CB1E934EB9F76B
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/NjhjTKawIenVH3d-r5iLAxjav8U.roa
Signing time: Tue 24 Mar 2026 21:04:38 +0000
ROA not before: Tue 24 Mar 2026 21:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199439
IP address blocks: 107.6.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:a9:f2:42:8e:ab:90:39:12:cb:1e:93:4e:b9:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Mar 24 21:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3638634ca6b021e9d51f777eaf988b0318dabfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:19:b4:e3:dc:bd:34:d6:04:e4:12:8e:18:
51:f0:32:19:a5:1b:7d:99:0c:08:23:18:d5:14:9c:
f1:6c:6c:5c:a7:83:1a:e7:05:40:de:f2:5c:05:4d:
84:ed:42:f4:13:e4:16:2b:1c:30:a8:9e:9a:c8:e7:
55:2d:c3:17:82:43:ef:ea:d9:0a:5b:5c:f6:94:9b:
51:e8:7d:64:c7:3c:f9:03:31:93:5c:30:a1:04:0f:
2e:71:46:9a:36:3f:b8:a8:f2:b4:08:a8:0b:1d:0f:
42:b5:71:fa:2d:c7:6e:23:1c:a7:ef:6e:51:e5:da:
c5:3b:b9:22:15:06:0d:ea:fe:cb:e3:c2:cb:9b:89:
18:f6:f6:3e:b9:bb:18:93:fe:bc:22:bd:90:9f:d9:
fe:00:a3:7f:e9:52:53:6e:04:57:de:3e:da:29:ad:
99:bc:8d:4d:bf:24:81:ee:8c:2f:30:60:5d:9b:72:
50:68:2f:a2:b4:04:5c:e6:9c:81:78:1b:46:18:55:
56:ad:2e:bf:d8:56:cf:9f:a8:b4:ab:1e:42:a5:e4:
5c:56:f1:22:d0:31:c5:36:a6:e0:06:c6:29:6e:71:
01:2a:54:20:0a:37:1a:40:87:79:5a:22:28:d0:a6:
70:c2:29:fd:d5:7c:5b:4e:f7:17:aa:94:00:50:2c:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:38:63:4C:A6:B0:21:E9:D5:1F:77:7E:AF:98:8B:03:18:DA:BF:C5
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/NjhjTKawIenVH3d-r5iLAxjav8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.6.104.0/22
Signature Algorithm: sha256WithRSAEncryption
14:46:ba:42:dc:9e:8b:7a:41:d7:c8:f5:6e:06:71:f4:a9:85:
70:a5:92:ca:02:43:ad:49:fa:e5:a4:eb:ee:a9:ea:94:be:cb:
8a:46:ca:a7:b2:5a:b1:a4:87:28:65:95:f5:15:fb:14:ce:36:
2f:83:8b:c8:57:4b:51:85:df:ad:2f:8e:fb:17:98:fd:41:ae:
2f:4a:f1:9f:a0:54:ba:38:2d:5c:dc:34:ec:50:60:b0:6b:54:
ef:c9:41:75:1c:e2:74:52:ca:04:3a:9d:8a:d0:1d:e7:85:c3:
83:78:a3:f7:b7:3d:61:d3:44:a5:01:5b:21:c9:70:d0:db:5c:
2a:1e:3b:75:ff:b2:af:05:14:9a:ef:a3:99:ed:d7:d4:ec:ec:
14:ce:3d:c3:8e:6a:b7:9b:2e:93:df:7a:b0:d5:27:6b:20:49:
ac:31:3a:0e:6e:fc:3e:b3:36:1a:55:61:93:e8:a3:a0:ec:db:
3d:a7:ce:0c:c0:e2:64:59:49:06:a7:09:0e:bb:9e:9c:f4:a7:
d0:89:64:99:23:02:0d:35:df:9f:c6:50:33:af:7d:fe:b4:1e:
50:9b:f9:ce:32:b4:68:e6:db:3d:d0:14:13:14:b4:74:e7:33:
16:54:94:2c:bc:d1:70:d2:9e:41:05:c6:0a:3c:64:2d:96:44:
65:87:7e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:44 2026 by rpki-client