Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ncPXjhVjsgMN81LCVzkAQ0q-d1I.roa
File: ncPXjhVjsgMN81LCVzkAQ0q-d1I.roa (raw, json)
Hash identifier: YWCm87SQsU2Rc5ha+KUnp9TPNHkZBPFo9QwtlsfAGIE=
Subject key identifier: 9D:C3:D7:8E:15:63:B2:03:0D:F3:52:C2:57:39:00:43:4A:BE:77:52
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F2369462D7023A04FA2F27917E2F48661
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ncPXjhVjsgMN81LCVzkAQ0q-d1I.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57217
IP address blocks: 91.237.91.0/24 maxlen: 24
176.107.64.0/21 maxlen: 21
176.116.224.0/22 maxlen: 22
176.121.32.0/21 maxlen: 21
176.121.40.0/21 maxlen: 21
193.36.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:46:2d:70:23:a0:4f:a2:f2:79:17:e2:f4:86:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dc3d78e1563b2030df352c2573900434abe7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:aa:fc:db:39:2d:ea:e3:aa:15:0d:94:ab:
56:00:ed:d5:e2:eb:fa:4e:2a:26:31:f4:e5:07:17:
5f:cd:b8:27:1b:0e:fd:72:e6:f8:bd:5d:b3:3c:77:
54:fd:84:15:4f:db:a9:f2:75:2f:cb:a7:cf:c8:b9:
47:18:23:7c:2f:a3:c4:c1:0e:9a:57:cb:4f:ae:5d:
9c:56:78:a3:59:3e:80:f5:0a:2f:e8:45:72:58:aa:
7c:24:4c:5a:9a:a7:b5:8a:c2:2b:ef:d9:53:68:19:
50:6c:88:c2:0a:e9:46:08:12:7e:04:8d:32:fc:d7:
11:e3:59:2f:ec:f8:3c:45:18:fb:de:93:51:8e:9e:
e6:9f:70:e6:c2:00:67:cd:5f:72:81:56:93:98:8f:
81:c9:6b:c0:f5:53:24:6c:ae:a5:58:04:aa:84:52:
30:59:5e:fe:25:34:ef:39:bb:5d:3f:ab:68:fa:03:
7d:20:d3:8d:15:20:95:2c:54:2a:64:86:68:1a:dd:
8b:f9:f0:14:a4:7a:48:c2:b7:40:5f:41:f0:a6:3b:
52:43:ed:53:84:b4:2d:d2:1a:41:0c:68:ba:62:35:
ab:53:f3:fa:5e:56:05:f4:0e:4d:39:29:cf:73:41:
e4:32:6e:cd:cd:b3:3d:57:50:ae:34:d5:ca:50:fa:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:D7:8E:15:63:B2:03:0D:F3:52:C2:57:39:00:43:4A:BE:77:52
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ncPXjhVjsgMN81LCVzkAQ0q-d1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.91.0/24
176.107.64.0/21
176.116.224.0/22
176.121.32.0/20
193.36.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:b9:0c:c5:8a:f2:35:c4:21:69:e8:15:be:45:98:f2:26:e0:
ad:d7:1e:c6:c6:39:ae:ba:73:ec:48:57:64:94:5b:0e:e7:23:
47:f8:86:a4:d9:57:6a:f3:12:67:69:ea:41:57:ec:0e:ca:2d:
5c:81:23:43:a7:90:0f:86:d3:d4:00:48:af:ed:3c:74:8b:79:
dd:69:1e:1f:67:9c:1c:28:c2:20:f2:c6:db:11:23:30:68:63:
8e:fe:fd:ff:9d:bf:40:91:fb:50:9d:6a:b2:61:e5:6e:2b:54:
d6:d5:84:cb:4e:b9:a9:df:81:a5:5a:04:63:cd:26:64:08:67:
e9:6d:d9:60:4a:2c:d2:a0:4f:b3:1b:f6:60:3b:86:85:af:e3:
c7:9d:71:fe:03:47:bf:48:62:44:59:50:7f:a0:50:40:dd:37:
3b:d2:7e:bd:96:cf:fa:e8:7d:cd:77:a9:7b:52:a7:78:49:1e:
51:87:8d:e2:06:81:e0:ef:18:25:de:93:90:4d:fe:8f:66:6a:
63:6d:e0:61:c8:0e:dd:87:64:28:cb:5c:46:db:44:f3:ac:38:
f1:23:f2:6b:c8:0a:c4:57:0f:48:4f:1c:90:cb:7b:ed:07:c7:
05:c1:cf:94:c2:63:a0:72:96:31:a8:88:f7:96:5d:45:9a:20:
57:f0:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:43 2026 by rpki-client