Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa
File: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (raw, json)
Hash identifier: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=
Subject key identifier: 34:83:FA:38:C6:C6:54:EF:CB:A0:10:C4:B1:B2:7A:2E:2C:71:36:77
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019F1EB5441A82D71F13C26C813C175D31E7
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa
Signing time: Wed 01 Jul 2026 17:23:43 +0000
ROA not before: Wed 01 Jul 2026 17:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215708
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:b5:44:1a:82:d7:1f:13:c2:6c:81:3c:17:5d:31:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jul 1 17:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3483fa38c6c654efcba010c4b1b27a2e2c713677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:0e:6d:50:31:82:94:c4:bf:6d:ff:4f:ee:
45:5a:fb:02:25:24:f2:2f:08:6c:5b:bd:bc:a5:04:
d8:ba:f2:dc:ca:3a:18:85:1b:38:8a:d9:e4:4b:eb:
56:2f:69:0d:72:14:cc:5b:0b:f6:13:b6:9c:e5:57:
cf:72:40:80:a4:1f:ef:f0:b6:89:22:95:12:2d:83:
29:3f:eb:17:0a:c5:b6:5a:96:8c:ce:d9:6b:13:ca:
49:50:8e:ca:fd:22:ed:9e:ad:cb:67:83:1d:b7:c8:
f4:06:5a:e9:36:9e:64:74:c4:79:f8:40:a8:1b:8f:
98:99:29:23:b8:c8:a9:19:49:1d:5c:d3:7f:cc:13:
58:bc:22:b3:2a:db:99:c2:49:fa:74:ee:01:20:a2:
84:a5:9a:ac:87:db:80:af:03:c6:4f:41:cd:16:68:
82:77:74:c0:2a:fe:9c:14:bc:e8:79:d2:24:94:5d:
ad:78:87:1b:e8:70:f7:e9:43:ec:7c:d0:eb:cd:e9:
ec:b0:ea:63:fb:2d:51:f5:02:c1:9b:2f:52:96:e4:
1d:d8:ba:e9:33:fd:85:73:e2:7a:74:e2:65:8a:b3:
e8:31:72:36:79:dc:04:38:17:83:64:11:5e:16:e2:
e4:cd:7a:8b:89:85:a0:1a:dd:97:bd:fc:73:5d:66:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:FA:38:C6:C6:54:EF:CB:A0:10:C4:B1:B2:7A:2E:2C:71:36:77
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f9:d4:4e:21:b6:ff:82:df:17:a1:bf:50:71:bc:bd:7a:09:
a9:34:8d:53:29:cd:ff:48:f9:82:08:0d:1e:62:42:57:ca:de:
a0:d1:81:9d:32:3f:48:21:41:30:11:27:7a:23:c7:29:e8:8d:
d2:0c:ad:48:46:62:83:52:28:1b:95:6f:93:e5:6a:4f:8d:eb:
ad:ca:7d:85:94:21:0a:b2:1d:75:e5:b6:ac:20:f3:b3:af:3d:
a4:56:02:88:86:0d:82:f9:dd:6f:25:24:3a:93:98:af:3f:cb:
77:ca:12:fc:33:de:ef:f4:89:4d:d1:49:7c:23:c8:ca:90:7a:
4b:cd:76:ed:3f:c8:ee:b1:47:34:9a:09:c1:03:a0:50:7c:d5:
6a:f4:97:48:5c:2c:51:fa:20:16:bb:14:3b:71:1f:ad:75:ca:
89:5f:da:a7:69:c0:9e:0b:38:be:bb:72:c4:72:14:37:37:66:
11:d7:f6:91:f1:72:ea:4f:84:32:bb:c5:19:35:90:b2:a5:e1:
d3:5d:dc:96:79:60:0c:c1:88:17:fe:51:72:4a:3d:db:3a:24:
a2:1b:14:4c:2f:78:f5:76:07:4c:48:f6:70:fe:ed:2a:fe:bf:
8b:2e:83:bd:68:f0:41:57:8f:c9:ab:d0:72:db:d8:a6:a5:a3:
f7:82:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:07 2026 by rpki-client