Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NHWu4dadMX1cSFOC_RF-dUFsKLQ.roa
File: NHWu4dadMX1cSFOC_RF-dUFsKLQ.roa (raw, json)
Hash identifier: wWmUV7buT8NelHODmBazpj+7xbhukggiRNknklZB70Q=
Subject key identifier: 34:75:AE:E1:D6:9D:31:7D:5C:48:53:82:FD:11:7E:75:41:6C:28:B4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F6081002D963CEF9E5244D1FE88279BD2
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NHWu4dadMX1cSFOC_RF-dUFsKLQ.roa
Signing time: Tue 14 Jul 2026 12:01:34 +0000
ROA not before: Tue 14 Jul 2026 12:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.226.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:81:00:2d:96:3c:ef:9e:52:44:d1:fe:88:27:9b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 14 12:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3475aee1d69d317d5c485382fd117e75416c28b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ca:7a:45:0a:06:2d:fd:49:75:ba:b6:21:a3:
77:f0:ba:a2:89:a3:f4:85:a7:de:50:3d:cb:e1:89:
8c:a3:56:53:d5:23:9c:90:aa:54:e4:a7:40:4e:4f:
cd:22:0c:ee:f2:ee:e9:71:ce:e9:bc:54:f1:fc:42:
91:7f:c7:d7:28:6f:7a:83:a2:5f:d9:e2:4d:39:ce:
34:46:5a:9f:fa:65:9e:9c:5c:e3:40:98:c7:5e:a9:
e9:e7:10:c6:55:e5:70:7b:8d:f5:23:2e:6f:14:4e:
7e:f9:50:9d:75:63:78:1b:1a:f8:5c:bc:9e:9d:dd:
20:d9:de:a0:ce:b8:80:07:f8:50:79:39:fa:4f:bf:
f4:ee:d9:14:7f:a2:33:30:ad:67:ca:f6:45:c4:91:
bf:28:04:a7:2a:8b:1a:20:53:d9:1c:43:b5:85:e9:
ae:fa:67:5b:17:6a:50:27:0c:67:65:89:02:5c:f2:
34:07:a6:99:40:10:c5:6d:66:ba:30:05:1d:91:2e:
a1:89:85:97:3f:31:8c:bb:1f:64:f9:93:b1:d9:4b:
a5:98:ed:99:a6:c2:49:09:b1:1c:a8:96:76:9e:9d:
bf:36:49:13:43:4f:bd:cf:57:91:0f:57:61:38:28:
e7:c8:5f:95:20:b6:f0:42:57:a1:2c:95:dc:f8:2d:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:AE:E1:D6:9D:31:7D:5C:48:53:82:FD:11:7E:75:41:6C:28:B4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NHWu4dadMX1cSFOC_RF-dUFsKLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
62:36:78:60:6b:2b:5c:58:b2:06:67:f3:09:57:b5:ba:67:83:
72:e3:dd:97:cc:0b:63:55:57:a1:6a:86:16:72:57:26:74:52:
07:51:00:59:28:0c:15:82:7e:48:48:94:84:37:82:19:88:55:
e6:9a:d3:5b:7f:27:93:3e:da:7d:6b:12:9d:24:93:8a:4f:0f:
c6:53:df:01:29:8c:cf:77:0d:dc:fb:07:32:9c:50:49:04:5b:
3b:15:5a:ec:2d:eb:ac:4c:cf:d7:cb:ad:da:19:40:c2:f0:3e:
2f:1f:51:80:0b:af:8b:bb:3e:3b:9c:ae:0d:71:ec:ab:e4:5b:
3d:9f:16:a3:31:a6:51:67:61:eb:67:19:a9:37:e8:e4:90:7d:
24:87:fb:dd:da:be:7e:1b:2d:e9:9a:8b:35:7a:10:e0:3a:4d:
28:b8:ac:89:21:a6:ae:63:5e:12:d4:d2:81:71:72:cb:be:fa:
44:4b:7f:b6:7f:b4:4a:45:e1:a9:cf:19:99:7f:64:1a:22:26:
cc:46:81:77:28:70:18:50:6a:fb:5c:e1:4a:71:0a:a8:8d:f5:
e3:3f:af:82:c2:20:8c:e9:61:2b:e9:f0:0b:65:f5:0c:e5:55:
08:1a:d4:0e:91:11:71:de:c4:1a:e8:ab:cd:5f:c8:13:24:b6:
ec:f9:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:17 2026 by rpki-client