Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/nxro7_97c-030HRr_N4E1MIUwvk.roa
File: nxro7_97c-030HRr_N4E1MIUwvk.roa (raw, json)
Hash identifier: oagHbwys6Mk1BrdKdSae5Mb4VL0GATm9AxAigLp1A+Q=
Subject key identifier: 9F:1A:E8:EF:FF:7B:73:ED:37:D0:74:6B:FC:DE:04:D4:C2:14:C2:F9
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 01A100C14E85D50E98B77263CF4C2BE0B9CE
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/nxro7_97c-030HRr_N4E1MIUwvk.roa
Signing time: Sat 03 Oct 2026 07:53:50 +0000
ROA not before: Sat 03 Oct 2026 07:53:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 213.232.193.0/24 maxlen: 24
2a01:e540:200::/40 maxlen: 40
2a01:e541:2000::/36 maxlen: 36
2a01:e542:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c1:4e:85:d5:0e:98:b7:72:63:cf:4c:2b:e0:b9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Oct 3 07:53:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f1ae8efff7b73ed37d0746bfcde04d4c214c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:ba:f0:50:5a:f8:39:fc:12:41:62:d2:de:
ee:99:b9:ba:57:6a:65:6f:58:08:2b:a9:39:b6:ec:
ab:44:41:bd:94:4d:26:41:fc:00:d1:e7:86:b3:8e:
50:d2:06:b1:dc:b4:7d:0c:41:d6:95:27:29:2b:1d:
e1:c6:f8:54:7f:dd:f2:b2:d1:0e:a7:2f:fe:b5:c4:
88:46:f3:5c:57:33:70:4e:c0:15:d0:24:e9:eb:a3:
03:46:1d:46:ca:3d:32:6b:4c:4a:07:d8:86:e3:23:
71:be:fb:20:54:59:4c:2d:43:51:0e:71:c6:1a:dd:
21:51:9b:7b:5c:9d:52:28:5d:6d:4a:42:76:4d:3a:
1f:62:ac:1f:22:34:8c:9e:15:74:4d:8b:c7:7d:2d:
67:76:ab:b6:af:d5:82:3d:ce:e4:79:e7:77:a4:dd:
8e:6d:73:39:f8:98:7d:3e:e1:cb:19:a2:ff:51:2d:
47:ad:23:37:88:a6:8b:a3:86:be:8c:07:cf:a6:fe:
1a:9d:2f:2e:45:27:2e:d0:25:15:51:3f:17:06:ad:
bb:d2:da:b2:1e:07:af:86:90:bb:0e:0f:95:b5:2e:
30:eb:43:c1:34:3f:80:8c:5b:b6:09:f7:2b:a9:c9:
45:63:f6:53:b5:b6:9f:b4:77:b1:99:69:21:4c:fe:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:E8:EF:FF:7B:73:ED:37:D0:74:6B:FC:DE:04:D4:C2:14:C2:F9
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/nxro7_97c-030HRr_N4E1MIUwvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.193.0/24
IPv6:
2a01:e540:200::/40
2a01:e541:2000::/36
2a01:e542:2000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:b1:f3:bb:db:52:c8:02:a8:2c:d8:2e:67:cb:d6:6a:18:6c:
e2:14:dd:80:75:7c:90:2c:56:9e:84:96:c4:b4:57:7c:bd:70:
2f:df:32:cb:9f:c0:5b:b3:ca:33:1a:0d:ff:7b:15:f6:c4:ae:
c1:ca:58:b1:7f:8f:7a:dc:7c:39:c0:e3:98:7c:10:c2:1c:50:
f2:76:bb:20:24:bf:37:d1:c2:db:ba:ff:f4:4e:46:4e:06:db:
fe:7f:59:93:70:16:42:62:9d:6d:2f:da:fb:09:7f:48:a3:84:
fb:da:3f:df:a7:0d:b4:3c:49:e3:fc:6b:59:90:80:90:8c:89:
b8:43:5c:29:3e:a5:f3:5c:c2:9d:4c:b0:e0:ec:e8:ff:2d:9a:
00:1d:34:77:62:ce:e3:f6:cb:97:05:e7:1f:27:9b:1d:c9:ec:
ce:55:d5:e9:40:c7:2e:4e:cc:08:2e:9c:a3:ac:80:a9:23:41:
c1:4c:10:2b:91:e8:55:ad:40:b1:5e:18:81:21:ea:a2:4e:6b:
5f:4a:a8:02:e0:8c:f1:39:e9:b4:c3:df:37:3e:ad:46:14:f3:
da:db:fb:d8:80:2f:fe:fc:3b:51:9d:6a:e8:3d:90:64:e8:c2:
40:d6:fe:03:2b:eb:eb:7c:bf:90:a6:23:f4:b6:fd:dc:c0:3c:
f3:6c:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:03 2026 by rpki-client