Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ni-EhyQZjeYyCL_cWoAOMuigIt0.roa
File: Ni-EhyQZjeYyCL_cWoAOMuigIt0.roa (raw, json)
Hash identifier: ExOq9rWpK1ziXUejI0nHNQ34bc/Xky4dWu9RhG1EhwE=
Subject key identifier: 36:2F:84:87:24:19:8D:E6:32:08:BF:DC:5A:80:0E:32:E8:A0:22:DD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019D5523D8942CD1DEB4534EE53C55FCAE5A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ni-EhyQZjeYyCL_cWoAOMuigIt0.roa
Signing time: Fri 03 Apr 2026 20:58:25 +0000
ROA not before: Fri 03 Apr 2026 20:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135682
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:55:23:d8:94:2c:d1:de:b4:53:4e:e5:3c:55:fc:ae:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 3 20:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=362f848724198de63208bfdc5a800e32e8a022dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:11:35:d0:10:56:c2:74:b7:f7:c2:34:fe:
a9:a7:d5:18:2c:76:1d:e1:90:fa:15:71:23:8d:c3:
77:7d:47:70:0a:6e:18:3b:26:74:ff:87:35:ed:32:
4d:a1:62:e0:bf:b9:87:8d:61:d2:c8:1e:00:8a:8e:
1e:ca:af:d5:a2:29:24:2c:f2:58:e6:dd:38:2f:db:
ef:15:d6:28:61:7d:ba:2e:75:9c:05:11:73:f0:fa:
85:d9:65:d5:97:41:fe:85:07:16:1d:5e:07:5d:d5:
a1:e7:8e:6a:3e:19:ac:9d:16:b9:84:c9:06:ce:c9:
8a:f7:a5:97:2b:98:4e:a2:e7:bc:b6:b8:e2:a0:06:
49:d1:33:ca:ff:85:53:04:15:45:af:38:bb:e0:fa:
41:24:01:b7:50:79:4d:e1:e7:8d:57:12:76:13:c2:
5b:a1:20:75:57:4c:c2:36:bf:d5:6e:dd:a6:74:77:
47:c1:81:ed:fe:2c:14:21:39:a5:92:7e:a0:72:d9:
1c:e1:72:5a:c2:46:f2:0b:d9:83:8e:be:f6:0f:ab:
15:91:69:97:62:30:31:38:ae:ea:be:2b:8b:36:c1:
ca:6b:ce:42:a5:da:0e:f5:0a:9c:be:18:d0:f1:8c:
41:2d:8b:b9:90:58:38:89:c5:43:65:2a:34:4f:d3:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:84:87:24:19:8D:E6:32:08:BF:DC:5A:80:0E:32:E8:A0:22:DD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ni-EhyQZjeYyCL_cWoAOMuigIt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5b:1e:48:75:3c:ce:c8:9c:1c:4a:ac:1a:89:af:c8:05:e5:
19:0c:52:76:c3:eb:98:9a:e2:95:85:92:2b:14:7a:1b:00:19:
12:95:b8:53:af:0f:98:67:0c:13:2d:cf:ed:5f:93:7e:6b:f1:
29:cd:7f:66:27:a2:81:fc:35:28:04:b1:34:9c:ed:d9:1b:13:
45:d2:8b:5b:64:a5:41:6c:6d:ca:1e:70:a2:0a:b9:5b:c9:ed:
13:4b:17:37:b9:18:71:25:ce:d7:0f:a4:55:1e:9d:83:ac:5e:
50:d2:c6:cd:cd:8d:92:6d:38:c0:3a:06:87:b7:d3:33:42:ee:
3f:10:8a:90:52:2d:8f:73:10:5e:5f:37:d5:b6:2a:23:a7:ae:
55:74:65:67:ff:96:ab:e1:17:4f:97:0b:98:f8:61:49:71:b6:
06:e0:ad:cf:20:a4:4d:ce:f4:21:74:a9:db:2b:de:64:61:cf:
78:7b:db:d0:a6:0c:f3:fd:50:1f:59:04:ab:0c:c5:58:87:66:
ca:74:fa:d7:a8:21:a8:2f:95:98:fb:2f:4b:dd:43:1d:2a:4f:
d2:60:59:98:6b:03:b1:a1:7e:32:be:f4:ab:ab:c2:d3:f7:cf:
4c:4f:51:ce:0d:0f:02:9e:e4:df:75:af:5f:7f:47:11:f0:78:
c6:16:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 17:34:24 2026 by rpki-client