Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nMRJsYDmL95dG6nztFwomNzaf18.roa
File: nMRJsYDmL95dG6nztFwomNzaf18.roa (raw, json)
Hash identifier: LHXZnWgqdo6EUYK8YvhfJLWi1VXLHsXZz9QseMJoZd0=
Subject key identifier: 9C:C4:49:B1:80:E6:2F:DE:5D:1B:A9:F3:B4:5C:28:98:DC:DA:7F:5F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FFAA50F8FDF6F3BE06ED867E5D1EEF54E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nMRJsYDmL95dG6nztFwomNzaf18.roa
Signing time: Thu 13 Aug 2026 10:22:29 +0000
ROA not before: Thu 13 Aug 2026 10:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 5.253.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:a5:0f:8f:df:6f:3b:e0:6e:d8:67:e5:d1:ee:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 13 10:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cc449b180e62fde5d1ba9f3b45c2898dcda7f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:dd:4f:5d:40:66:9b:68:e8:e0:62:73:6a:
51:6b:d8:60:1d:bb:e4:ec:1b:bf:cd:01:05:bb:01:
33:c6:2c:39:00:88:85:05:bf:70:9c:69:40:b1:8e:
d6:6a:0c:a0:fd:96:49:48:9a:9b:ea:ef:86:a5:ea:
20:7d:54:b1:b9:15:a1:ff:21:ec:55:4d:2f:c4:31:
65:2e:13:93:a8:b1:54:77:46:35:7c:34:46:8c:c7:
21:8f:c6:40:a5:b3:96:31:62:ef:57:c1:87:94:26:
81:d7:a2:fa:83:b0:6e:a9:a4:88:81:11:94:d1:bb:
1f:f4:12:0c:c8:bc:39:e5:fa:e0:f3:51:fb:a8:98:
a1:98:52:4f:17:59:55:5e:ff:9b:a0:5f:9b:6a:99:
2d:28:9d:29:01:37:fa:c0:46:a3:4d:09:43:54:93:
e7:b2:79:7b:4a:39:14:ea:a2:5a:1b:f9:36:6a:b1:
28:58:6c:d4:bd:4f:48:72:ee:81:cb:69:ca:cc:eb:
b0:e0:8c:27:4e:63:ec:6c:6d:f5:d4:31:2a:e2:b7:
ce:a2:44:15:21:89:99:fd:78:1e:3d:0e:44:13:e2:
d2:88:00:2a:a6:a9:d2:f6:97:3a:78:11:92:8b:c2:
00:85:f2:21:7b:28:78:8c:b4:ca:f5:08:db:50:75:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:49:B1:80:E6:2F:DE:5D:1B:A9:F3:B4:5C:28:98:DC:DA:7F:5F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nMRJsYDmL95dG6nztFwomNzaf18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3c:91:36:31:58:58:18:f1:20:d3:de:76:39:90:1c:33:f3:
81:ac:c3:fd:3b:8c:2b:8f:9f:80:82:f1:78:0b:81:d9:c1:91:
96:4c:af:91:81:ea:fd:b9:dc:94:61:05:ef:78:0a:ee:6b:89:
a4:29:36:83:af:1f:87:2e:02:08:ed:58:f5:28:2b:41:e8:d8:
7b:57:05:e8:5e:cf:60:78:5a:e5:50:d4:4b:e9:29:e8:74:76:
6d:40:7d:85:b5:9e:5f:32:97:86:74:a5:01:b1:2c:f4:e6:59:
f5:bf:d0:81:8a:1b:20:60:8d:ff:5a:bf:3d:18:f8:e9:af:21:
94:aa:22:74:be:bf:f0:d5:c5:14:07:89:d0:7b:f7:09:5d:0b:
7c:f0:af:f4:74:bb:90:91:bb:f0:b6:0c:30:af:3f:40:8e:d2:
f5:af:5e:f3:81:6b:c9:f1:33:41:75:9e:db:ec:09:bc:46:aa:
69:47:a6:e8:a3:5b:db:bc:2b:ba:ba:be:54:ef:f8:95:7e:4f:
54:39:49:06:be:9e:64:4f:df:e7:5c:66:c9:c0:5b:26:26:dc:
49:dc:d4:bf:20:ae:30:a3:00:78:70:38:f9:32:63:17:06:66:
6c:9b:77:d5:04:bf:c4:b3:94:b2:29:d6:32:cb:7a:eb:aa:d8:
7e:86:6a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:23 2026 by rpki-client