Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NIwBkTn0DwnWJYXdrPy65n7G87M.roa
File: NIwBkTn0DwnWJYXdrPy65n7G87M.roa (raw, json)
Hash identifier: 9ZRAzfzX2FniB+kDzP+4D2ybQWLG1SZFbzIUrHfLAXk=
Subject key identifier: 34:8C:01:91:39:F4:0F:09:D6:25:85:DD:AC:FC:BA:E6:7E:C6:F3:B3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A03323A3001286063D8330F11080DEF829
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NIwBkTn0DwnWJYXdrPy65n7G87M.roa
Signing time: Mon 24 Aug 2026 09:39:28 +0000
ROA not before: Mon 24 Aug 2026 09:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203676
IP address blocks: 94.249.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:23:a3:00:12:86:06:3d:83:30:f1:10:80:de:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 09:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=348c019139f40f09d62585ddacfcbae67ec6f3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:75:1e:13:64:b8:91:53:8c:32:cb:60:b2:
d8:62:8b:2d:fe:9b:fe:b3:d1:87:3c:c2:f0:b9:63:
f5:32:f6:3e:2d:2e:ac:25:42:0b:dd:9d:7e:53:fd:
0b:4d:46:5a:95:96:c9:47:7c:3d:f2:03:10:36:10:
94:1d:9a:05:e4:57:91:11:9f:07:fc:a6:f5:28:21:
da:14:09:75:12:f4:fd:b7:ff:0c:41:70:6f:06:37:
40:41:2d:5d:8b:89:20:b6:0e:f9:03:0f:11:86:94:
36:3d:49:59:5c:af:b5:e0:2e:30:9d:a7:c9:94:35:
93:d3:08:24:8c:ad:dc:31:28:ff:1f:e4:03:ad:f9:
a9:9f:ac:45:49:7d:8b:5d:c7:38:01:66:2f:61:6b:
26:59:cf:89:90:65:11:69:3e:ef:be:c6:fa:45:59:
c8:81:7b:c0:a3:91:4a:2c:db:c2:4b:38:05:dc:ed:
d2:93:a5:a3:93:e6:b7:e5:9c:d7:21:73:57:9c:94:
69:d8:1a:99:5b:35:ca:7a:39:ae:27:3f:45:2a:58:
b6:49:5c:d2:08:b8:fc:08:c0:98:d7:a4:f1:03:66:
d6:ff:96:ed:36:10:30:c0:40:06:a3:40:07:98:04:
b8:24:47:fe:69:0a:f9:53:6f:30:2c:2a:94:c4:ff:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8C:01:91:39:F4:0F:09:D6:25:85:DD:AC:FC:BA:E6:7E:C6:F3:B3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NIwBkTn0DwnWJYXdrPy65n7G87M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6f:49:cb:8e:e6:79:4e:c1:94:98:c4:95:ce:3a:3a:1d:0d:
0a:e3:cb:8c:b6:1e:65:c0:c9:b4:60:71:2d:97:6d:94:4f:4d:
48:7f:f0:8d:2e:4c:5f:bb:b7:37:75:4b:5c:fd:d6:e1:fa:a3:
a6:99:6f:f5:9a:91:4d:86:fe:cf:0e:ec:6c:93:d7:e2:8c:a6:
52:3d:0e:cb:ae:12:dd:f2:cd:54:ab:d9:97:79:df:98:69:86:
bf:1a:c2:e6:32:42:97:18:30:33:9a:a5:91:44:03:3d:00:83:
37:fc:27:0c:27:0d:77:1f:33:80:1a:2c:96:6a:84:60:1c:8e:
34:0a:07:1b:a8:10:54:b2:be:46:ea:4d:60:4d:09:7f:b6:37:
0c:b2:1f:66:1b:e6:73:af:61:e3:a1:a8:66:bd:ad:28:66:c5:
b2:c2:83:59:b6:f8:2c:38:9c:04:09:16:28:fe:db:84:d0:5f:
62:86:6a:58:57:48:78:41:38:4a:62:f3:8e:c9:1a:e2:f1:c2:
f1:ba:6d:b0:11:31:f9:3c:7e:f6:3c:cb:39:6d:f1:85:c3:7b:
43:23:1d:18:43:46:a8:79:6c:a3:1d:03:60:c9:9c:6c:f8:81:
99:59:04:1d:69:3e:df:8e:38:cc:ef:c5:d1:ad:ce:e8:e5:54:
e1:fc:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:32 2026 by rpki-client