Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/NzEbjZMTTNc2f7hUh_DfDiEmK50.roa
File: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (raw, json)
Hash identifier: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=
Subject key identifier: 37:31:1B:8D:93:13:4C:D7:36:7F:B8:54:87:F0:DF:0E:21:26:2B:9D
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 019F2368FC7DEE6BC47137D7772789670486
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/NzEbjZMTTNc2f7hUh_DfDiEmK50.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:7d:ee:6b:c4:71:37:d7:77:27:89:67:04:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37311b8d93134cd7367fb85487f0df0e21262b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:72:93:be:a6:8e:1e:63:e4:dc:9a:c5:ab:
d4:ac:8a:3e:16:9d:fb:d6:3e:df:82:02:3e:af:3c:
0e:a7:2a:c8:78:69:b1:d4:35:a7:c4:31:54:6f:b5:
65:ce:fe:41:48:ff:3f:51:3c:4f:34:77:b1:41:3d:
9e:ca:48:0d:f4:96:eb:6a:1c:66:e7:92:86:5d:38:
a2:bb:3d:b9:c9:3a:33:98:28:1a:8b:db:9f:34:0e:
ae:12:94:1c:a6:8a:38:55:87:d8:18:33:5a:0f:ba:
47:de:34:bd:76:cc:23:1d:71:45:60:db:da:47:31:
fb:67:c4:d2:06:d6:e5:9a:32:9c:74:08:6b:e7:df:
3f:30:e6:b7:41:1b:a0:c5:73:6a:84:e3:a3:e2:d0:
4f:5e:a2:84:e8:ba:7a:b9:49:dc:2b:c9:58:d7:d2:
68:d7:7e:6d:8e:ba:64:55:a8:55:ab:d6:66:04:cf:
00:de:be:50:19:e4:b3:74:5c:6d:6e:96:ca:95:92:
11:13:59:43:7d:53:04:ea:5b:8b:cd:59:c8:17:c9:
b4:21:18:fe:b4:63:8e:80:fb:eb:ae:a3:e7:36:87:
55:8c:61:9f:17:aa:5c:dc:3e:f2:9b:ca:18:5a:20:
27:7c:be:98:a4:5c:86:0a:aa:ad:9d:93:39:b9:ec:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:1B:8D:93:13:4C:D7:36:7F:B8:54:87:F0:DF:0E:21:26:2B:9D
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/NzEbjZMTTNc2f7hUh_DfDiEmK50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.8.0/21
94.247.48.0/21
Signature Algorithm: sha256WithRSAEncryption
77:13:c5:9a:34:1c:c3:2b:9a:5e:a5:21:03:4d:cb:b6:52:7e:
3a:7b:28:74:54:d2:e6:fd:f4:50:66:4e:88:6e:30:3c:e7:89:
04:b9:14:29:7e:0c:f0:ff:a4:dc:b7:da:49:2b:a2:98:fa:34:
2e:11:fe:e3:b5:c6:7a:eb:27:a4:5b:79:a3:fa:e5:03:78:0b:
ef:55:18:27:2b:f2:6c:ce:91:42:d1:99:9a:6d:88:ca:c6:45:
d8:36:90:13:92:38:07:d6:27:7d:38:37:cd:4a:28:6e:33:09:
43:ca:bb:2d:c5:38:d8:f7:a1:f7:a9:04:cd:ea:b8:6e:b2:e1:
04:a2:c9:22:4d:70:2b:8e:04:71:06:97:41:2e:d8:35:dd:f1:
37:bd:a9:fa:7a:d3:76:21:40:85:9e:b3:60:72:d2:84:df:a5:
1b:36:b2:cf:e9:47:61:ce:cd:36:64:2f:25:4b:04:7d:99:08:
87:0f:89:ff:dd:74:d8:e0:4b:9e:b9:f1:70:be:76:a6:1c:70:
5f:ef:1f:22:97:fc:a4:62:e3:72:5f:7f:06:53:84:9f:5d:ce:
51:66:e3:ed:30:e8:65:eb:a4:8a:db:6e:c9:58:df:e9:52:9a:
c9:a7:47:e1:c7:85:4c:33:28:6a:ab:76:9e:89:57:6d:97:e9:
1c:94:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:51 2026 by rpki-client