Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NNXZHwZ8am8diBx2MYwtEmRGpJo.roa
File: NNXZHwZ8am8diBx2MYwtEmRGpJo.roa (raw, json)
Hash identifier: HATTUy0PHY/iEVQgLxomCjsZUSFA7GKWKosGyQcN8Xs=
Subject key identifier: 34:D5:D9:1F:06:7C:6A:6F:1D:88:1C:76:31:8C:2D:12:64:46:A4:9A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A08687E526B85F7575C97B1F92D13CB1C2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NNXZHwZ8am8diBx2MYwtEmRGpJo.roa
Signing time: Wed 09 Sep 2026 14:17:28 +0000
ROA not before: Wed 09 Sep 2026 14:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206654
IP address blocks: 195.211.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:87:e5:26:b8:5f:75:75:c9:7b:1f:92:d1:3c:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 9 14:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34d5d91f067c6a6f1d881c76318c2d126446a49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:49:e4:20:ed:51:de:c0:ea:68:47:06:f9:
c0:b1:a2:a6:ef:d3:b0:fe:5e:16:e1:90:79:76:75:
e6:8d:aa:ea:28:99:2f:9e:51:49:e2:77:32:75:87:
9b:9b:66:59:8f:a0:50:1a:a4:7e:a7:5c:f0:3a:b0:
a6:79:82:73:b7:dc:5b:37:c1:ec:1a:31:3a:3a:27:
cf:5b:36:ba:47:91:7d:2a:8b:a7:ac:d6:1b:4c:bc:
ff:30:db:9f:08:fd:05:17:fa:1c:0f:45:54:e8:35:
4f:0f:e2:26:f8:84:91:e2:c2:f4:96:58:00:26:3c:
9e:6c:3b:08:54:c0:54:36:20:5f:f0:83:d1:b4:c2:
ab:47:0c:ba:be:05:59:f2:62:4d:fb:e6:8f:6e:36:
8a:c0:fa:b3:35:36:c9:f7:e9:49:7d:6b:f8:a0:98:
c7:2f:2c:36:8f:d5:bc:50:f8:34:95:b3:f5:0e:3a:
70:75:28:01:06:74:18:7d:f9:a6:4b:08:f3:4d:ce:
2b:1a:3f:9e:b8:cc:71:a5:31:dd:ed:71:c8:6a:63:
d1:d3:56:bc:1a:e0:7b:17:a6:d6:8d:6c:27:e3:39:
c9:fa:61:bf:10:cd:d3:1e:8b:d7:76:f7:8d:a9:db:
0a:cb:af:a6:be:4f:28:ed:b6:9a:eb:12:b7:dd:9f:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:D9:1F:06:7C:6A:6F:1D:88:1C:76:31:8C:2D:12:64:46:A4:9A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NNXZHwZ8am8diBx2MYwtEmRGpJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
73:99:67:7f:f6:1e:e1:8c:3d:ea:43:3d:9a:a1:e3:52:a1:d3:
1f:a7:b5:96:45:53:dc:37:81:d2:6c:86:ad:01:eb:e9:88:f8:
76:23:37:0c:db:f7:7a:68:e2:3b:21:0d:c7:56:de:41:15:67:
68:1b:d7:4f:58:b8:9d:8b:bc:05:55:c5:90:82:a2:7e:7d:bc:
34:5d:03:4b:93:f0:c7:42:90:53:84:36:3d:5f:86:21:24:0b:
44:9e:f9:b5:29:48:68:f4:72:41:6a:47:35:12:e7:b3:3b:59:
a1:c7:78:9d:87:5c:2d:14:82:1f:47:f1:e4:b2:ec:a8:88:8d:
cb:e5:0f:96:41:36:87:5c:0f:df:1c:9d:7f:f5:9b:66:39:5b:
7a:b8:ea:de:e4:ee:ab:2d:4c:ab:57:c2:88:bf:52:64:17:06:
37:6a:f8:38:18:09:9e:6d:70:18:ed:95:cb:f0:a0:f6:9c:39:
82:45:d2:ce:19:c3:ad:fb:8c:15:fe:16:78:bd:5a:dd:2e:f0:
d5:04:5d:72:f6:3f:fe:ed:e6:a4:6a:23:d5:07:fa:b1:e0:41:
01:71:57:34:9c:a1:10:39:c9:31:46:82:aa:b9:d3:1b:8d:75:
ef:e1:d9:36:8e:a4:78:fe:50:2d:ec:4c:42:92:b4:dd:7e:0d:
57:43:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:13 2026 by rpki-client