Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nzPO6s6RBNn5vjEC99qktVIknsA.roa
File: nzPO6s6RBNn5vjEC99qktVIknsA.roa (raw, json)
Hash identifier: l4UlvIDngXIsPCTbQz9TvNLwYipIwtur/VPfJDziiXA=
Subject key identifier: 9F:33:CE:EA:CE:91:04:D9:F9:BE:31:02:F7:DA:A4:B5:52:24:9E:C0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019D00E87F08D7CC8AB268F41C7BCB8BB8D0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nzPO6s6RBNn5vjEC99qktVIknsA.roa
Signing time: Wed 18 Mar 2026 12:25:30 +0000
ROA not before: Wed 18 Mar 2026 12:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208959
IP address blocks: 103.212.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:e8:7f:08:d7:cc:8a:b2:68:f4:1c:7b:cb:8b:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 18 12:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f33ceeace9104d9f9be3102f7daa4b552249ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:1f:f1:e3:86:a0:cb:b2:63:26:c7:2c:46:
a2:45:27:4a:f8:19:e9:ca:a0:11:a4:a5:ad:9e:01:
48:d8:13:da:23:fc:8f:5e:82:cd:29:c8:9c:56:77:
b0:85:4f:5d:bf:95:a7:ed:4d:9e:52:3b:c7:0d:da:
b5:11:ad:8e:0b:4a:74:b0:d7:88:68:87:9b:a1:ac:
e1:df:0c:a8:f8:a5:84:57:f0:61:00:ff:6d:9e:c7:
40:a9:dd:34:92:31:c7:09:1e:8d:32:d6:00:82:8c:
5d:46:09:32:80:3e:00:bf:f9:e1:e8:e8:bf:dd:9d:
6a:30:65:c1:48:cb:22:20:e3:f5:b0:15:07:d2:de:
14:c3:b0:06:c2:6a:cb:85:22:6c:75:67:1f:e0:3c:
51:d7:5a:36:8c:bb:d7:2b:a5:3c:1b:02:f2:99:7f:
de:1e:f9:02:12:12:db:25:77:39:0d:58:a1:0e:3e:
66:4b:b2:86:13:68:6b:e8:ab:9a:33:54:2a:23:de:
f8:8c:f7:eb:f9:5e:5d:40:3e:d5:34:e6:42:2a:59:
fe:52:12:bb:4f:3e:64:92:92:54:5f:20:47:df:0f:
ba:9e:cd:86:a2:58:5c:bb:44:98:e7:33:a4:df:d2:
bc:79:2b:bc:df:ff:be:ef:f4:4c:66:0d:82:6f:00:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:CE:EA:CE:91:04:D9:F9:BE:31:02:F7:DA:A4:B5:52:24:9E:C0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nzPO6s6RBNn5vjEC99qktVIknsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5d:53:e0:1b:e8:fd:d7:e1:a8:06:a7:fe:64:f7:9c:05:5f:
8a:d8:b7:a1:3c:65:c9:08:0c:1b:10:a9:e7:b9:2b:bc:d9:88:
48:7f:04:8c:dd:3f:4f:be:e3:1f:07:ab:5e:30:ea:3d:1b:b5:
c4:f9:87:8a:9e:c5:fb:10:e8:49:ab:c7:63:52:f2:cf:35:46:
86:80:d4:c3:58:4b:36:b1:f8:c0:05:1b:63:6d:26:4f:9e:ab:
b6:e6:b9:2d:96:39:f8:9e:98:d2:92:d1:7c:fb:4c:53:b9:46:
8b:a6:33:8d:c7:4e:6d:06:e9:cd:aa:6e:be:03:df:73:c5:6f:
3f:73:c3:3b:36:7a:80:d8:d6:c6:58:4b:bd:65:19:fa:37:7b:
a0:fb:a8:69:0c:d9:e5:84:c5:7c:45:c0:3f:22:bf:9e:fb:29:
ce:d6:d3:48:eb:f3:31:3f:4b:3a:a2:cc:65:a6:a5:b5:52:01:
f5:18:31:8d:1b:ed:eb:b4:5d:43:d5:b5:f6:a5:79:cf:db:9f:
19:76:91:2b:fa:c4:4f:5e:e5:ec:24:f8:c9:93:7b:1a:cd:85:
e4:e8:e8:c7:d0:f1:fa:fc:28:15:75:ca:ec:0f:43:f3:88:c1:
95:a3:2d:74:95:ca:5f:24:68:8b:df:6e:c8:52:d0:a9:32:bb:
3a:2a:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:00 2026 by rpki-client