Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/NLcVYv7QX8TzU3KtiBGBznThjOY.roa
File: NLcVYv7QX8TzU3KtiBGBznThjOY.roa (raw, json)
Hash identifier: zcrKX9GnGSrAQghL6HOZ1jKtZzfy7mUWqAXuCLC1AoU=
Subject key identifier: 34:B7:15:62:FE:D0:5F:C4:F3:53:72:AD:88:11:81:CE:74:E1:8C:E6
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019DAAA2757EBD7658E3FA48CBD7C1B8585F
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/NLcVYv7QX8TzU3KtiBGBznThjOY.roa
Signing time: Mon 20 Apr 2026 11:24:26 +0000
ROA not before: Mon 20 Apr 2026 11:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43581
IP address blocks: 77.91.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:a2:75:7e:bd:76:58:e3:fa:48:cb:d7:c1:b8:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Apr 20 11:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34b71562fed05fc4f35372ad881181ce74e18ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:b9:d1:df:b1:23:db:57:41:63:4a:8a:97:
4e:93:9c:66:88:ff:be:49:a9:f9:5d:24:72:01:ba:
86:5a:2c:b2:dc:40:2b:81:45:8e:37:da:7a:be:2c:
0c:42:75:4a:8a:c1:f9:dc:1a:4e:72:87:12:6d:f3:
0a:28:b1:70:23:12:9f:56:d3:f6:6f:4f:75:01:26:
c8:db:46:b4:95:2f:55:a1:ca:f4:eb:03:00:4f:c8:
5e:c2:a0:80:49:cf:df:73:5e:93:65:7c:aa:c5:ed:
73:df:fd:5b:83:f2:7d:4d:b3:4b:d2:a8:c1:55:0e:
0a:39:45:c2:3d:77:ee:6c:bf:98:e9:31:52:38:48:
9b:21:12:53:08:46:02:0e:6e:34:d3:9c:92:2d:64:
4a:b2:46:b2:c9:b3:3e:fb:ce:24:b3:83:cc:91:9e:
de:fe:3e:8c:61:d5:93:1a:c3:24:96:6f:e0:bf:e0:
5f:be:43:b6:df:bb:33:fe:cf:02:79:87:fc:2d:2a:
5e:c9:e5:b0:b6:a7:cf:1f:05:df:18:0e:8f:39:a8:
37:31:2f:32:a9:a0:b9:04:cb:f6:1e:7b:28:e5:68:
f4:1b:52:49:f8:3f:4e:66:36:d8:60:86:2a:01:1a:
12:df:6d:ee:46:43:f8:57:9b:6c:33:94:92:30:17:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:15:62:FE:D0:5F:C4:F3:53:72:AD:88:11:81:CE:74:E1:8C:E6
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/NLcVYv7QX8TzU3KtiBGBznThjOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.90.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bc:8d:30:7d:01:35:c4:5b:64:70:7f:8c:99:57:bf:db:43:
9d:2a:1c:93:e7:d2:f1:15:49:5d:d8:ca:88:35:2d:4f:b3:82:
0e:45:d6:d2:93:9d:ed:cb:aa:fa:a7:1a:41:48:64:ed:1a:c3:
a4:d9:ae:4e:15:2d:2f:b8:ff:0c:bb:92:c7:66:ff:a5:49:e6:
40:d2:7f:22:8e:ac:fa:75:45:f9:b0:ef:35:08:77:1a:95:58:
f3:05:24:aa:e2:26:0e:9d:86:0d:36:73:ff:1d:ab:63:9f:db:
a9:8d:64:07:54:a7:b4:01:0f:9e:00:71:c8:38:58:01:b7:86:
fd:2f:04:b5:67:41:0b:42:20:1c:00:92:02:17:a5:77:cf:51:
60:a2:f5:e0:e2:96:06:c3:68:eb:63:55:23:9c:cb:95:e3:61:
3a:df:1c:9f:bd:86:d6:91:30:96:1f:9d:d2:95:bd:d7:03:fd:
25:2d:e8:e7:76:04:5c:6f:90:38:53:61:b2:0d:58:1f:33:b5:
3b:5e:f9:9b:84:9a:dd:1e:46:bd:c6:3b:45:25:60:c1:01:fc:
25:a8:84:ac:04:92:7c:d7:d6:d6:1c:b4:4a:7f:ff:3d:3a:5e:
1d:86:53:d8:b4:d1:77:71:5f:34:fa:c3:4c:57:a6:6d:49:0e:
d2:0e:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:16:23 2026 by rpki-client