Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nXFzylRYdggNLSDdxBEyOVO8abo.roa
File: nXFzylRYdggNLSDdxBEyOVO8abo.roa (raw, json)
Hash identifier: MuB6yHe/O/TgEGICinoeajVzAzYxoctcEBg+OMsPyco=
Subject key identifier: 9D:71:73:CA:54:58:76:08:0D:2D:20:DD:C4:11:32:39:53:BC:69:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D4256CF3ACB39E7B1E076B671FFB50101
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nXFzylRYdggNLSDdxBEyOVO8abo.roa
Signing time: Tue 31 Mar 2026 05:21:18 +0000
ROA not before: Tue 31 Mar 2026 05:21:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199639
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 13:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:56:cf:3a:cb:39:e7:b1:e0:76:b6:71:ff:b5:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 31 05:21:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d7173ca545876080d2d20ddc411323953bc69ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:a9:6c:25:28:22:46:18:8f:59:a1:f3:e0:
72:69:34:e6:78:e7:80:74:c2:64:a0:89:da:5d:f9:
a7:54:42:9e:6c:7d:fa:f0:97:23:7f:35:c4:42:c8:
1c:79:4b:04:c4:a0:60:1b:28:68:a8:17:40:ed:d1:
11:b0:55:7a:83:1f:9f:a5:d9:38:f6:a2:75:1f:7d:
83:cc:b7:a4:84:ef:d7:7a:5d:f8:d9:e9:56:3e:95:
5b:a3:6c:3f:d5:8b:e4:4b:1f:47:1c:fc:dc:ec:cb:
ed:bf:58:da:3b:b8:b4:b7:19:62:d3:b0:9f:6b:98:
77:0d:16:e2:f7:9f:f3:82:73:45:63:ef:23:62:b1:
df:9d:52:3e:39:2a:77:da:14:77:5e:c7:66:0f:4b:
68:67:a1:7d:b6:9c:83:f9:49:e9:3f:bf:b0:46:63:
8a:7b:89:b1:1f:63:e5:7c:5d:f5:04:ad:97:df:3f:
2d:f0:91:94:bb:3b:d4:79:f9:0b:3c:c2:54:5f:d1:
1f:cb:ed:6d:50:17:7c:45:5e:1e:d0:9b:c0:bd:02:
6e:0f:9c:0a:a7:b3:56:5b:18:e8:32:a5:5d:ca:7d:
c2:52:6f:bd:ac:19:6b:29:d1:b8:6f:83:b0:a3:35:
62:e5:60:dd:7d:dc:8b:36:55:5a:8a:69:f8:85:65:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:73:CA:54:58:76:08:0D:2D:20:DD:C4:11:32:39:53:BC:69:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nXFzylRYdggNLSDdxBEyOVO8abo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:dd:90:ab:38:65:a7:ff:38:4d:f9:bf:64:db:23:68:15:3c:
9b:cd:37:d0:1a:89:2a:f2:90:60:e5:a8:94:29:a1:68:e6:da:
79:be:83:af:41:02:c8:6d:af:45:3b:a5:01:67:a3:43:94:c8:
63:d2:5e:70:18:25:f9:65:38:21:9e:50:a6:52:2e:2b:24:68:
d6:32:39:08:88:43:1b:13:6a:4e:75:00:c2:19:c3:13:be:c7:
58:59:b8:e2:5f:67:97:d9:75:9c:8e:3a:e2:61:89:bc:46:6e:
3c:11:19:b6:23:0e:02:8a:64:0a:7c:4a:0d:de:05:69:c0:6b:
c5:c5:0b:08:a0:9e:4b:2e:52:73:4f:ad:c1:a2:c2:9c:f7:f6:
3e:ab:b3:35:4a:85:e6:cd:10:eb:aa:11:94:06:d2:0e:73:2a:
99:0f:db:d5:e8:0e:5b:03:b7:29:4a:f7:59:0f:48:18:d9:a9:
27:5b:78:41:63:04:53:f3:5e:9f:39:cd:c3:45:d7:02:b6:16:
e6:16:bc:6c:6c:a5:5d:50:a9:4d:11:7e:8a:0c:00:aa:fa:83:
a3:17:d4:ec:b9:11:6c:a3:7c:a9:0d:44:8f:47:f3:b2:35:47:
1b:d5:64:5f:16:fc:6c:a3:35:3b:0d:ab:6c:bc:33:1b:d6:ab:
a8:eb:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 17:28:30 2026 by rpki-client