Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/NGwmCl15WNFt68CpU9SHnOdGS9A.roa
File: NGwmCl15WNFt68CpU9SHnOdGS9A.roa (raw, json)
Hash identifier: tiNwaFIRigOg4n0EpHs5X3viBEMCSji5foeonip0c3s=
Subject key identifier: 34:6C:26:0A:5D:79:58:D1:6D:EB:C0:A9:53:D4:87:9C:E7:46:4B:D0
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A14908C7BB092350717EFE97DBDD16A46D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/NGwmCl15WNFt68CpU9SHnOdGS9A.roa
Signing time: Sat 17 Oct 2026 08:44:34 +0000
ROA not before: Sat 17 Oct 2026 08:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:08:c7:bb:09:23:50:71:7e:fe:97:db:dd:16:a4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 17 08:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346c260a5d7958d16debc0a953d4879ce7464bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:ed:8c:b5:a4:18:12:bb:a5:89:dd:65:ab:
57:17:55:ab:21:74:62:e9:a2:b0:e2:d4:a0:80:9d:
7b:35:9a:e0:29:fe:14:ac:f8:2e:92:98:2c:e3:91:
04:6a:55:41:5e:e3:51:bd:3c:fc:28:74:1b:e4:99:
ae:a1:34:8a:52:4a:30:25:ff:10:3f:3a:ae:ef:2c:
dd:b8:a5:c1:ee:90:f1:c4:d5:cf:e2:ee:c4:e5:01:
75:cc:03:22:51:88:17:56:a5:62:69:ae:9d:24:b1:
3d:13:ae:29:da:15:73:cb:48:98:be:11:95:e8:8e:
a1:7d:b7:84:81:99:3d:83:f2:0e:02:e5:c2:23:fa:
2b:21:ab:2a:fd:86:6a:87:a9:a6:d6:2b:16:04:44:
c1:93:a8:bb:84:a4:51:55:d1:3a:bb:29:1c:8f:55:
26:a9:18:2c:67:bf:2a:55:05:63:4a:a0:0a:ca:70:
21:f3:5b:f5:73:73:68:81:0e:c2:8b:7a:cb:ca:e6:
f2:90:52:84:8c:9b:e1:07:1b:fe:75:fc:8a:bb:e6:
95:4a:aa:92:f7:d9:f4:5e:94:47:98:1f:e7:8a:4d:
64:5c:5e:9b:4b:82:3a:96:bb:2d:55:0f:29:f9:5a:
5e:89:ee:53:48:65:c1:e1:8a:93:5c:b4:60:d6:8e:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:26:0A:5D:79:58:D1:6D:EB:C0:A9:53:D4:87:9C:E7:46:4B:D0
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/NGwmCl15WNFt68CpU9SHnOdGS9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:08:cf:68:c8:b3:8b:00:27:a2:21:74:a8:7e:53:c7:88:fb:
b8:05:3a:d9:cb:ae:50:a7:17:52:2f:ce:f3:10:b6:14:77:0b:
bd:60:ce:d3:5b:85:90:88:e1:99:3e:8c:63:bf:78:de:d3:1e:
2f:74:ca:84:aa:4c:20:cf:65:f5:3b:73:3c:ad:24:d3:3b:4d:
6f:31:88:5c:93:b8:6e:f0:07:0e:00:85:03:05:7e:5b:d1:3e:
4f:ad:06:1f:ce:bc:5d:e0:20:c7:a4:4d:59:81:cc:c0:40:5f:
99:8d:13:1f:36:76:f3:e7:f4:0a:a1:f9:3d:34:01:cf:e4:de:
04:01:6e:d1:c0:93:b8:09:4b:7d:97:f2:03:a9:ae:26:aa:20:
f9:78:22:4e:8a:31:d6:f6:a8:09:d4:af:2f:e5:f2:5c:82:69:
fe:5d:30:cf:45:0f:ed:4f:a1:9c:c5:9c:43:23:66:bb:92:c8:
75:a9:2f:55:ea:d3:bf:30:d1:3c:e6:09:6a:1a:2a:48:60:25:
cb:4e:fb:f4:87:c1:25:59:e2:d2:c5:9f:c2:e1:24:e0:1c:84:
e5:83:a5:03:32:02:56:94:3e:fa:d3:5b:54:a4:ed:74:67:ef:
71:8f:af:0d:f6:9a:c0:f2:f6:8a:72:b0:e3:58:45:cf:f4:8f:
7e:0a:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:07:54 2026 by rpki-client