Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/nPxc_DR7riW4djuXQF4Kvchcvoc.roa
File: nPxc_DR7riW4djuXQF4Kvchcvoc.roa (raw, json)
Hash identifier: BQAf/hujyNoVYOQ6yOoFjoADqe7tlFH5rZ/am35Np1s=
Subject key identifier: 9C:FC:5C:FC:34:7B:AE:25:B8:76:3B:97:40:5E:0A:BD:C8:5C:BE:87
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019E113EED0D95BCEABCF5C77E8615528DE5
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/nPxc_DR7riW4djuXQF4Kvchcvoc.roa
Signing time: Sun 10 May 2026 09:36:36 +0000
ROA not before: Sun 10 May 2026 09:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 89.28.204.0/24 maxlen: 24
152.89.193.0/24 maxlen: 24
195.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:3e:ed:0d:95:bc:ea:bc:f5:c7:7e:86:15:52:8d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 10 09:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cfc5cfc347bae25b8763b97405e0abdc85cbe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:7e:f7:bb:c2:40:a6:80:9f:d6:ac:ca:b9:
9e:e4:1f:e0:79:a7:83:41:ae:74:13:cb:a1:a3:6c:
44:28:7f:45:a8:6f:da:51:a1:e6:ac:5d:b1:a5:63:
99:14:04:f3:94:54:54:4a:30:88:22:e6:ae:6d:d7:
ed:17:6e:a2:84:b2:f6:ad:6a:69:42:cf:e3:b8:79:
c5:97:3d:12:18:ee:c7:18:51:95:da:6e:8e:21:4f:
7d:fb:53:63:c4:0e:6c:30:42:db:a1:67:18:45:c8:
49:3c:3d:88:18:b3:2e:8a:12:72:c4:ce:ff:d6:1c:
c1:a1:77:48:4d:49:55:68:7e:53:54:dd:24:d1:f5:
48:8f:40:e7:51:57:14:f5:e5:c3:ac:81:b7:8b:45:
43:a5:5f:38:ac:4f:b5:55:3a:6b:d6:dd:03:9d:76:
2b:73:b8:ad:d0:cb:e5:21:21:8f:ed:7d:02:1e:7e:
52:5c:12:f6:27:9e:0f:ca:5c:55:02:57:e0:c0:64:
b8:b7:d8:a1:7b:4c:e8:4a:45:7d:dd:5c:02:d2:01:
6d:14:a5:bc:8d:6d:32:cd:03:c0:d4:71:69:0f:8d:
88:15:f5:ac:d1:b2:e8:ad:03:a6:57:6c:62:53:b4:
fa:6b:12:e4:1e:01:22:df:c5:35:9d:f9:42:46:7d:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:5C:FC:34:7B:AE:25:B8:76:3B:97:40:5E:0A:BD:C8:5C:BE:87
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/nPxc_DR7riW4djuXQF4Kvchcvoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.204.0/24
152.89.193.0/24
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f5:36:a9:01:71:e0:20:01:d3:32:61:68:e6:93:64:16:3c:
bf:ac:82:c2:09:42:70:ce:a2:ea:99:f8:3a:00:d0:cf:6c:1e:
bb:6a:ce:85:9b:1e:4b:05:2c:da:1e:a8:0b:a7:5a:69:62:b3:
98:87:18:78:ab:96:69:2e:94:85:ca:30:8a:68:f9:e4:2e:c1:
6b:19:5e:3a:d7:02:4c:e5:0d:d4:5f:9c:91:0b:14:69:02:4e:
a0:88:9d:b3:b4:a6:90:f2:37:e8:91:69:f7:4b:a9:61:4c:f3:
9a:b4:44:1f:d8:d4:25:32:d1:d8:53:9e:80:b1:90:31:49:1d:
24:c0:bc:17:65:a9:ef:0e:0a:f6:e4:48:b8:6b:dc:92:90:f7:
67:01:87:ec:4e:4c:a4:23:dc:4b:06:62:5a:f2:04:52:73:13:
af:97:d1:8d:99:45:87:e1:8a:1c:eb:80:a5:75:b9:14:c4:64:
d4:a7:2a:59:e0:e7:46:fd:f5:b8:c9:93:7b:71:7b:75:7b:76:
e2:d5:84:d5:43:b9:5b:14:f0:6a:c1:05:01:dc:54:ab:f4:eb:
d5:b0:c0:2a:a4:d1:88:06:2c:96:a7:ce:47:2a:7c:e0:86:2b:
c1:c8:8b:a3:dd:8c:b4:3c:1f:15:c8:5f:25:0e:69:91:9f:3d:
33:6a:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:34 2026 by rpki-client