Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa
File: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (raw, json)
Hash identifier: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=
Subject key identifier: 35:7E:90:8D:93:7E:A7:05:19:1A:BC:5E:06:1E:99:79:65:D4:B5:93
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019F195190ECCB26F079F1E964F9463A2EA1
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa
Signing time: Tue 30 Jun 2026 16:16:43 +0000
ROA not before: Tue 30 Jun 2026 16:16:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 188.246.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:51:90:ec:cb:26:f0:79:f1:e9:64:f9:46:3a:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jun 30 16:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=357e908d937ea705191abc5e061e997965d4b593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:4a:05:a3:9a:9c:4f:a0:8a:17:39:64:0c:
db:61:5f:9b:96:12:52:eb:5b:2e:92:51:f5:ea:9b:
53:60:74:59:97:66:da:f7:84:7e:c7:ea:49:53:fa:
55:62:e5:50:3f:a8:d3:d9:04:6a:0e:04:61:6c:f9:
f6:16:a1:5c:74:40:75:b5:79:fb:d2:29:00:d6:2d:
19:e2:4b:3d:40:6e:af:39:a5:2a:af:4c:6a:4d:21:
32:5a:a2:2c:0c:a2:de:ed:f3:77:f6:c7:16:70:b2:
1f:8f:29:33:6c:7c:54:63:72:16:19:f3:18:3c:84:
1d:f1:ea:b2:c2:f0:14:3b:f4:ee:f0:aa:fd:c3:ef:
3e:ae:de:33:81:b8:b3:48:b4:b7:5d:b5:a1:5a:01:
f2:c3:e2:6b:6a:70:60:64:90:b6:cc:64:38:c5:89:
ec:70:77:7f:7d:52:a0:84:a4:64:8b:f1:a9:ae:34:
d6:8c:9c:3e:ee:7b:ab:93:55:6b:67:57:7d:ed:52:
2d:73:a5:46:95:59:26:35:98:41:9f:49:e1:fb:18:
c5:c3:ee:6c:52:73:bb:57:ef:b7:b0:29:13:c0:ca:
84:ba:7a:6f:4b:79:b9:b8:39:2c:18:45:bf:0b:88:
72:6b:1f:23:4b:95:aa:34:c0:6c:0d:3d:b1:2a:b7:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:90:8D:93:7E:A7:05:19:1A:BC:5E:06:1E:99:79:65:D4:B5:93
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.216.0/21
Signature Algorithm: sha256WithRSAEncryption
82:67:5c:a7:47:86:86:87:ac:17:cc:c0:55:02:df:dc:f9:e8:
bc:f8:4a:c7:99:13:74:1b:0c:ae:39:23:a1:33:2e:d5:9f:29:
d2:63:45:33:ce:87:55:1c:65:f9:f3:07:0d:f2:00:24:b8:9c:
e2:a4:ee:12:5a:ff:8b:34:c9:8c:30:1b:c6:50:07:4c:6e:91:
f4:2b:8d:6f:08:12:af:64:3b:ca:a5:a0:2c:63:68:c3:48:e3:
41:ee:b1:a8:42:b4:ff:b4:6a:2c:6f:fe:45:68:d9:d6:ab:b5:
6f:80:59:73:68:34:17:34:e6:2d:98:db:e8:16:0f:30:db:67:
31:6a:9f:3c:36:ce:a6:57:c7:17:6a:5a:cc:6f:64:c4:13:e2:
a0:c3:f0:22:97:13:5f:0f:5b:0c:fc:f1:16:75:dd:ba:bf:66:
16:db:d3:c3:4a:31:46:e3:32:c0:6d:b4:33:6b:e0:72:e4:f0:
34:82:33:a5:92:cc:64:d8:ed:05:c2:20:c4:59:33:d0:a8:91:
71:60:68:25:a8:62:37:72:04:f1:c9:68:07:a1:26:73:54:36:
94:7a:74:12:f3:55:1f:25:98:f2:75:7d:e7:b4:0d:5f:0c:d9:
78:57:a6:33:07:b1:54:0a:78:13:17:f1:88:e2:a2:80:0a:4c:
14:9c:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client