Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/NwwaWXozHy71mbpAU3P6llyB78Q.roa
File: NwwaWXozHy71mbpAU3P6llyB78Q.roa (raw, json)
Hash identifier: NiQ4zMwsxxv5Pd5CC5l/iVQxZM/r14qUwT9CwKCLn7A=
Subject key identifier: 37:0C:1A:59:7A:33:1F:2E:F5:99:BA:40:53:73:FA:96:5C:81:EF:C4
Certificate issuer: /CN=d49a09804f4a971da86020fec31b77b6ce785a50
Certificate serial: 019F2368430425F573FDB65B6AE5562EAAF6
Authority key identifier: D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/NwwaWXozHy71mbpAU3P6llyB78Q.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209842
IP address blocks: 94.154.144.0/22 maxlen: 22
2a09:c500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:43:04:25:f5:73:fd:b6:5b:6a:e5:56:2e:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49a09804f4a971da86020fec31b77b6ce785a50
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=370c1a597a331f2ef599ba405373fa965c81efc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:f8:bb:ad:9f:44:df:db:42:4f:b1:af:37:
77:75:cc:e7:5c:d5:e7:2f:90:d0:d4:4d:b0:ad:4d:
5b:df:36:b1:16:51:d7:df:18:c2:70:a5:56:f9:5c:
03:99:b2:92:6e:75:69:b9:4d:08:a7:e7:11:80:ec:
ab:7b:5c:d9:31:8f:f6:5c:18:1d:8a:44:89:37:cc:
30:a6:e0:3c:03:f0:ce:89:7e:2b:18:18:ab:51:fb:
d7:61:4b:df:17:81:a9:ff:f4:d9:ba:50:e4:90:9d:
a2:78:ef:77:4d:88:ae:f0:db:3c:ba:49:7e:a8:cd:
9d:79:93:6d:62:a9:3b:a1:16:bf:c9:c1:5e:5f:c0:
7a:b9:0d:e4:6e:28:87:da:26:dd:5b:11:87:29:97:
65:4f:c5:59:5a:8a:5f:6e:07:5a:92:d7:e7:51:61:
4b:ac:cd:c3:77:bc:95:56:5d:5f:0d:12:f2:b3:0a:
30:32:07:b1:2d:c0:84:61:d4:5d:9f:d6:8f:f1:41:
01:4d:e4:b3:e1:9c:79:33:d5:a9:2a:ab:27:04:13:
12:59:a9:d8:33:29:17:1b:8a:85:f6:18:f0:1e:b0:
26:c6:2b:80:e5:62:81:fa:91:f0:17:ba:f2:c6:aa:
9e:dd:2b:b0:7f:60:f0:58:78:ff:e6:ef:3d:a7:01:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:1A:59:7A:33:1F:2E:F5:99:BA:40:53:73:FA:96:5C:81:EF:C4
X509v3 Authority Key Identifier:
keyid:D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/NwwaWXozHy71mbpAU3P6llyB78Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.144.0/22
IPv6:
2a09:c500::/29
Signature Algorithm: sha256WithRSAEncryption
3a:cf:3d:9c:7b:98:73:b7:5e:93:3f:67:08:32:20:5a:12:23:
44:67:70:a1:24:3e:e3:cb:70:dd:c6:39:fa:46:96:4e:1d:a9:
68:65:ca:9d:e9:5c:6b:7e:df:8a:25:ca:02:ab:98:93:39:c2:
df:98:17:cf:bd:0e:80:c6:e5:f1:f3:93:3e:12:95:fe:1e:0d:
e5:de:1e:0c:c2:e6:81:f2:65:27:c3:f6:cf:0e:ab:62:24:fb:
ed:eb:35:6e:ca:56:16:13:f9:ef:9a:7b:55:ce:17:6c:d6:b4:
09:c0:a8:35:ea:e9:b0:53:ce:d6:74:f9:9c:ac:f7:ec:55:db:
23:ab:c7:cb:db:73:11:47:85:a0:ce:f7:8f:9e:9d:48:e3:ba:
d9:a5:a9:04:00:e5:73:e6:b5:a7:46:2f:82:87:c3:08:e3:76:
f0:42:39:81:15:eb:3f:c3:dd:d8:99:0f:e5:34:3c:8e:48:fd:
62:89:37:ba:a8:d7:60:87:4b:fd:82:3e:44:a9:77:5c:20:0b:
8d:3c:4b:ff:f2:e2:3c:e2:f2:5b:45:9d:67:ea:59:12:16:56:
a4:67:ce:bb:b5:a9:2e:d8:31:ca:bf:5b:0c:22:fa:4b:f3:7b:
7e:c9:76:fa:83:ab:49:de:5f:16:5e:cb:b1:86:07:05:d6:02:
19:19:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:00 2026 by rpki-client