Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/nix__MeXtH9Ij6H_zVJ_Gv0wzDo.roa
File: nix__MeXtH9Ij6H_zVJ_Gv0wzDo.roa (raw, json)
Hash identifier: 8YRYjdwnVrJjjYWFbBfABefk0bKSXs8xUG84zHP8hqo=
Subject key identifier: 9E:2C:7F:FC:C7:97:B4:7F:48:8F:A1:FF:CD:52:7F:1A:FD:30:CC:3A
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019FB8A651DBDF1DBD0FFCA6DBD6C44D3B2B
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/nix__MeXtH9Ij6H_zVJ_Gv0wzDo.roa
Signing time: Fri 31 Jul 2026 14:48:55 +0000
ROA not before: Fri 31 Jul 2026 14:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 64.178.112.0/23 maxlen: 24
64.178.126.0/23 maxlen: 24
189.24.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:a6:51:db:df:1d:bd:0f:fc:a6:db:d6:c4:4d:3b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jul 31 14:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e2c7ffcc797b47f488fa1ffcd527f1afd30cc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:9f:df:6a:bd:17:a5:12:21:ee:c6:81:f2:
7a:50:60:57:c3:cd:d9:57:14:50:3f:09:75:e4:b9:
ec:22:6c:e6:8e:c8:34:be:00:ec:ff:0d:ac:95:1f:
16:d6:62:58:c2:9d:b2:be:d6:8d:d6:c8:08:42:8b:
0a:fa:d6:8c:7e:7a:f9:6e:38:3b:ec:95:53:46:80:
df:87:74:59:57:5b:16:27:2b:33:35:a4:66:8f:48:
fd:0e:47:1a:34:08:ba:df:27:2b:4d:fb:f4:71:8b:
e9:4a:45:13:e2:2a:4b:f8:92:0b:26:2a:53:9d:d2:
59:5e:ba:e2:0b:7c:bd:e7:39:67:0d:67:ce:c2:cd:
db:42:4f:26:e3:58:07:22:3e:44:18:3b:d8:15:61:
d5:5a:d7:e1:05:ca:fa:de:bd:14:d3:df:f2:15:fd:
b4:0c:db:75:a3:db:f8:fb:ce:74:67:02:27:b0:97:
30:89:c9:7d:48:2c:44:15:98:3f:f1:0f:91:5e:23:
ec:f7:57:a7:bc:d2:97:c0:1a:13:b2:ea:88:db:2e:
72:5b:6e:f2:2a:26:09:1a:dd:cb:09:7b:e0:1e:a7:
12:19:35:b5:25:c8:76:84:0c:7e:91:9e:72:1b:25:
7e:9d:d5:9e:78:1d:78:5c:b5:03:79:db:a8:18:a0:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2C:7F:FC:C7:97:B4:7F:48:8F:A1:FF:CD:52:7F:1A:FD:30:CC:3A
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/nix__MeXtH9Ij6H_zVJ_Gv0wzDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.178.112.0/23
64.178.126.0/23
189.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:85:cd:33:9e:cf:ee:93:9a:62:41:bf:58:5a:2f:fe:17:0d:
51:8e:4b:10:a6:d8:5f:c1:80:35:16:74:0a:9e:84:e5:c5:ee:
74:a7:64:c7:54:39:61:9d:f9:f5:3c:3f:09:fe:23:74:d8:30:
ac:7f:28:55:c0:83:ec:dc:16:99:d5:13:d1:d1:c2:6e:b7:e6:
37:ff:a4:20:7b:30:49:10:ef:42:c3:a6:c8:61:ae:c2:2b:57:
92:a2:e9:97:f3:28:32:f1:c1:b5:2e:17:a0:99:03:9e:6b:3e:
5c:5b:7e:32:aa:86:ac:ab:0f:36:35:cd:b2:60:64:83:20:15:
b4:4b:ed:8e:be:c5:fe:4c:7d:32:60:ec:38:5f:ed:dd:85:fc:
b1:fd:a5:08:fa:52:c6:ed:dc:02:e9:d2:9a:cf:6d:dc:19:67:
f8:94:f1:c3:fa:4f:b9:03:78:5c:81:61:b6:29:70:ca:88:08:
de:61:58:f2:ff:e5:7b:fd:8d:15:69:41:37:82:35:58:fc:c3:
80:28:89:69:b7:d3:73:5c:7a:11:ef:49:81:20:81:46:91:3d:
92:c6:41:1a:8b:d6:ed:70:dd:bd:f7:ab:3c:c6:3c:f4:45:76:
ab:78:31:86:5d:5c:e1:f7:c3:70:b0:a8:fd:6a:1e:38:e3:e2:
89:7f:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 00:11:22 2026 by rpki-client