Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nfOTbZpM3T8KphiagWq9QbE7n6Q.roa
File: nfOTbZpM3T8KphiagWq9QbE7n6Q.roa (raw, json)
Hash identifier: Vo9RQEGzwdy0f4pXhGHRcpJKC9WSCDHXENuKl7zr4Fk=
Subject key identifier: 9D:F3:93:6D:9A:4C:DD:3F:0A:A6:18:9A:81:6A:BD:41:B1:3B:9F:A4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0CCFE367DB2F305D433C55301BD0F2FB7
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nfOTbZpM3T8KphiagWq9QbE7n6Q.roa
Signing time: Wed 23 Sep 2026 06:40:07 +0000
ROA not before: Wed 23 Sep 2026 06:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 83.147.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:fe:36:7d:b2:f3:05:d4:33:c5:53:01:bd:0f:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 23 06:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9df3936d9a4cdd3f0aa6189a816abd41b13b9fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:f0:72:06:6c:8f:41:f4:ae:87:d1:aa:26:
5b:89:7f:87:5c:90:36:ef:40:12:ef:b2:58:a6:bc:
79:b7:a4:33:2c:b0:de:97:9e:0f:d1:57:ba:41:a8:
96:24:90:f8:14:57:3a:51:e1:8e:32:0f:26:49:cf:
4c:3d:b9:42:10:72:e1:bc:1d:18:4f:3c:05:13:21:
35:8a:c6:72:20:02:f1:ff:8b:a0:bf:c5:a0:77:31:
55:64:6d:1d:93:ab:f8:c8:88:ed:71:3a:26:7f:18:
00:7a:c6:00:2e:29:df:f5:8d:9d:0d:bc:f9:d4:fb:
30:53:70:b9:7f:6a:97:c2:92:64:55:64:5b:6e:81:
34:a1:e2:43:60:3e:b3:c7:fe:67:6f:88:0e:89:55:
36:c2:42:36:43:72:97:d8:58:c5:a1:95:1c:71:66:
41:e5:2b:73:b4:5f:eb:76:76:30:e5:9f:88:63:ac:
43:24:c8:97:af:d5:c5:08:28:31:15:2a:18:88:3b:
fb:51:a6:ef:f3:77:1c:02:2d:92:8c:86:74:8a:e2:
3d:80:96:fc:16:6b:5f:14:f0:51:68:44:de:c7:dd:
24:84:1e:e0:d6:d8:6c:e1:23:f7:2f:82:32:ed:87:
9c:73:25:f5:7b:34:aa:ac:ec:28:d8:59:98:e3:6c:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:93:6D:9A:4C:DD:3F:0A:A6:18:9A:81:6A:BD:41:B1:3B:9F:A4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nfOTbZpM3T8KphiagWq9QbE7n6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a1:de:d7:fa:43:fa:60:5a:84:d8:6a:c5:33:c5:8b:41:6b:
db:f7:61:8c:b3:6a:53:16:f6:d0:cc:4e:e0:73:7b:c5:29:e6:
0d:41:f0:b8:f7:2b:30:26:b7:11:06:95:fd:22:e6:ba:2c:ea:
b3:d9:37:74:bb:d3:bf:62:9b:1a:77:7a:3f:1f:56:a3:6b:ea:
e1:34:2c:f5:d5:ec:b8:2c:36:9c:e1:55:49:67:5e:88:b4:a7:
80:d6:f7:58:a6:7a:47:2d:13:14:d6:e5:b6:c7:e7:96:91:6f:
6b:7f:19:1c:0b:83:be:1e:9a:03:f9:27:bc:1d:01:e3:10:21:
51:8f:82:58:b8:67:97:2e:6b:d7:e4:07:9f:c9:f5:40:0a:70:
4d:0c:a6:ab:c3:63:00:76:84:56:fc:e0:c2:fa:5f:c1:fe:e6:
db:5c:91:a4:d2:3f:53:9d:85:45:ff:55:44:37:35:ba:20:c6:
9a:d8:b5:0e:ea:38:af:a1:12:5d:24:db:42:cd:55:4f:75:0f:
47:1c:ca:9f:5d:f7:ba:37:1f:aa:9a:22:a0:29:c4:46:42:ff:
a6:94:0e:52:6d:66:f2:88:62:6d:0d:c8:03:14:3d:dc:e3:ba:
e2:b6:2d:05:79:47:8f:39:d9:fb:1d:60:45:2f:21:e5:f0:4a:
e5:81:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:37:17 2026 by rpki-client