Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/nQkuoz9oj88p_EUHOGBiBs-ywwo.roa
File: nQkuoz9oj88p_EUHOGBiBs-ywwo.roa (raw, json)
Hash identifier: XGPbRO9fIGk+7VDYvm/L4eH129NYaoRSzSyNp6r5HbQ=
Subject key identifier: 9D:09:2E:A3:3F:68:8F:CF:29:FC:45:07:38:60:62:06:CF:B2:C3:0A
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 019F7063DC9D4333474F344B4E26A08B24F5
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/nQkuoz9oj88p_EUHOGBiBs-ywwo.roa
Signing time: Fri 17 Jul 2026 14:03:40 +0000
ROA not before: Fri 17 Jul 2026 14:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202225
IP address blocks: 167.104.64.0/21 maxlen: 21
193.93.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:63:dc:9d:43:33:47:4f:34:4b:4e:26:a0:8b:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: Jul 17 14:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d092ea33f688fcf29fc450738606206cfb2c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:fd:1b:63:4d:e3:ac:0b:28:9b:b4:85:32:
e3:1b:68:d3:c5:fa:5a:c2:77:7d:14:b0:33:0b:16:
a9:f4:63:28:3f:99:1e:6e:eb:63:d3:62:cb:a9:2f:
18:84:53:9f:0b:0c:40:c8:00:23:74:87:62:03:7a:
37:e1:65:e5:62:b8:ef:ed:36:29:84:9f:eb:49:7e:
e1:97:4a:fa:de:ea:85:c0:39:fd:f8:d3:4a:05:9d:
b0:bb:8f:53:f4:9a:fd:c2:b8:e0:53:ff:59:3d:f3:
64:a1:89:81:36:3e:3a:a2:7c:42:36:c7:6b:ad:53:
c3:a8:36:56:fb:a9:8d:70:df:9a:34:df:c3:7c:76:
56:48:dc:ec:f3:fb:b5:eb:b4:3d:31:81:51:ad:7f:
f1:f9:99:7b:70:29:f8:5b:d9:92:6a:4c:40:fc:50:
0c:05:5f:32:59:75:d0:fe:b2:39:a0:f8:dc:8e:ae:
6e:9e:3b:82:9d:e8:3d:a6:88:82:6d:5a:8c:42:60:
09:da:e9:74:d9:80:27:5a:98:fa:c7:cc:4d:d0:c6:
41:df:0d:03:2f:50:a7:be:71:f9:73:5f:23:c0:66:
36:d5:18:6e:e9:a7:01:de:ff:f5:6f:31:1b:fc:0b:
d8:2b:8d:f4:be:ba:c3:3f:c4:a7:53:d3:03:ff:43:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:2E:A3:3F:68:8F:CF:29:FC:45:07:38:60:62:06:CF:B2:C3:0A
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/nQkuoz9oj88p_EUHOGBiBs-ywwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.64.0/21
193.93.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:52:da:78:e8:13:55:b3:ab:00:c6:42:7a:8e:e3:09:70:82:
27:3d:40:f6:05:78:f4:26:b4:17:00:c8:ea:8d:60:10:0a:fc:
ad:00:60:cf:bc:21:5c:71:ae:74:9f:fd:83:3d:f2:1c:ab:fb:
30:01:76:97:97:04:1d:74:f1:e7:08:8d:85:d7:a2:ab:42:4c:
ab:24:b4:56:4e:fa:2c:f7:94:9c:d3:16:6a:b8:7b:8b:86:6d:
61:43:ec:d5:94:94:e1:63:c9:c5:8c:05:c6:f4:9a:71:4b:fb:
b8:79:19:ac:e7:ba:24:17:fb:04:4e:c0:dd:2e:eb:e2:dd:07:
b5:94:e2:42:fc:e6:20:4d:74:12:22:4c:e7:f7:6e:dc:ac:23:
a4:b6:c6:35:03:ba:55:63:5f:bc:84:d8:f5:ca:22:95:b2:6d:
92:f4:b3:b2:00:ba:ca:81:73:b4:87:fd:9b:f3:64:eb:10:a3:
03:e6:9c:0a:54:3e:39:0f:c9:a6:92:1a:9a:dd:15:f0:ee:56:
a4:80:2a:5a:83:13:76:89:c9:b3:65:f9:02:95:d7:10:56:9e:
c3:df:e0:dd:d6:ef:fa:62:b4:61:17:6d:97:cd:05:b2:bb:20:
22:f5:da:3a:15:15:c7:8e:71:b8:53:35:8a:c3:87:19:be:4a:
80:8d:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:06 2026 by rpki-client