Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa
File: NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa (raw, json)
Hash identifier: W3nGwB/5l82VyTMniD79KQw9BOTXPJR7EjkBzNDA5Zw=
Subject key identifier: 35:1C:1F:00:99:0B:FC:BA:8E:A7:59:8C:6F:3D:8C:60:37:41:7E:83
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019FB2F21A515064CB3117BD262013ED502F
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa
Signing time: Thu 30 Jul 2026 12:13:58 +0000
ROA not before: Thu 30 Jul 2026 12:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39600
IP address blocks: 85.8.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:f2:1a:51:50:64:cb:31:17:bd:26:20:13:ed:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jul 30 12:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=351c1f00990bfcba8ea7598c6f3d8c6037417e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:ce:14:da:aa:fa:91:14:67:7e:dc:01:f7:
dd:f1:c1:d2:a3:13:ec:8f:2a:ac:12:85:a0:f2:e5:
0a:d8:26:85:67:97:10:d0:51:ea:08:d4:96:60:83:
58:03:6d:1f:1e:7b:a1:8e:04:a9:c1:40:fd:63:ec:
a9:80:99:7e:4d:9f:ba:2f:42:13:a9:a3:9b:27:20:
13:85:a3:7d:7b:9e:b0:3d:4e:fd:57:71:7c:12:6f:
6d:2b:d1:2d:ba:8c:77:33:52:0a:73:5a:2c:74:90:
b4:2b:d4:74:59:7c:65:2b:73:ab:91:84:a7:12:2c:
98:48:84:8c:f4:1f:da:5a:61:ed:8e:60:b8:15:8a:
4f:85:f0:d9:bc:09:f2:06:34:90:a2:7f:91:d2:56:
28:41:8e:2c:18:c0:81:14:93:94:81:55:4a:0a:99:
1b:1f:de:6d:f0:04:6d:1a:bb:7f:32:39:0e:2c:e0:
69:de:fe:2d:cd:09:94:d4:33:d6:8a:9d:eb:f3:40:
8c:4b:a3:20:33:e1:ba:cc:80:e2:32:e9:77:e2:60:
5f:64:d1:2d:5f:8c:61:5e:d6:c7:af:a4:b8:62:f5:
e2:9d:e3:2d:30:30:59:f1:4c:3b:6f:dd:d8:f6:c6:
b7:f7:0f:2f:4e:fa:83:0a:4f:f1:03:d6:7b:85:88:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:1F:00:99:0B:FC:BA:8E:A7:59:8C:6F:3D:8C:60:37:41:7E:83
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:c1:27:e6:40:ba:35:47:8b:3e:e9:cc:6f:13:3a:f8:02:b2:
74:24:7d:69:ad:2e:39:f9:af:4a:32:9e:3a:f3:ee:7a:90:39:
9c:32:e7:53:cd:6f:50:82:36:47:fe:e7:2d:6d:38:c5:24:52:
e2:ee:b9:a9:8b:af:9b:b8:f3:e8:af:8c:b0:19:53:e8:e8:dc:
10:c7:0e:77:1c:1a:bd:a0:ec:a9:f3:77:3d:be:05:a9:f7:a8:
4f:a7:c0:46:2f:70:3a:fc:73:a6:bb:9b:e8:27:ca:0d:e1:d6:
ac:2a:2a:1b:15:39:92:99:f3:ca:fc:fc:cf:4c:f7:18:d1:a1:
bb:94:92:8e:8e:f1:b4:8d:67:9e:d1:ee:8a:4c:a5:28:31:4a:
dc:80:39:b4:26:95:36:93:be:3d:b1:10:73:d4:20:d5:ab:2a:
79:16:00:0a:83:76:b8:63:f0:55:a1:33:ff:6d:2c:70:ed:63:
da:c5:ef:2d:fc:7d:50:20:f0:38:24:ae:43:7e:6c:d6:fb:f9:
68:e9:10:c6:63:f6:ed:db:09:1a:f6:5e:c7:60:40:56:3b:4e:
a8:c7:80:9e:25:90:57:e7:20:6c:99:31:f2:d6:87:fd:e0:a2:
f1:33:69:15:68:72:44:42:38:ad:73:a6:70:d5:a5:19:11:c5:
35:68:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:14:13 2026 by rpki-client