Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/nzgHuhsMefo-kktThn8Cntmw2DI.roa
File: nzgHuhsMefo-kktThn8Cntmw2DI.roa (raw, json)
Hash identifier: n7J6eW4XubFzE6V970pzXjS60Z76qDIdwRzD28rUcMI=
Subject key identifier: 9F:38:07:BA:1B:0C:79:FA:3E:92:4B:53:86:7F:02:9E:D9:B0:D8:32
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019DD818FC9283704BBCB87417A4943A6CFA
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/nzgHuhsMefo-kktThn8Cntmw2DI.roa
Signing time: Wed 29 Apr 2026 07:16:49 +0000
ROA not before: Wed 29 Apr 2026 07:16:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 89.249.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:18:fc:92:83:70:4b:bc:b8:74:17:a4:94:3a:6c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Apr 29 07:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f3807ba1b0c79fa3e924b53867f029ed9b0d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:7f:4e:28:42:c4:c3:9a:c6:e1:33:77:86:
d0:58:1b:d8:ad:69:b5:64:46:3b:96:12:63:ed:a8:
da:24:9d:82:c4:78:66:c9:df:e0:4c:d0:ac:17:5c:
b3:49:5b:d0:cf:4a:f9:98:d2:22:62:b6:80:c5:e1:
f4:5d:91:2c:9c:be:3e:7f:8e:e3:2d:e1:c0:ff:ae:
83:1b:cb:0c:e1:f6:50:d2:43:fa:ff:21:29:1f:63:
ad:36:d9:21:51:63:03:bc:0c:0e:8b:cf:19:bd:09:
6d:9f:82:16:3c:73:7a:a7:e2:bb:a6:14:fe:b8:6c:
03:95:33:3a:6f:e0:8a:9c:d6:84:78:dd:a1:46:24:
7b:36:69:3b:7c:14:6b:03:3c:2f:2d:8f:d6:b6:c0:
4f:0e:04:a0:08:d1:91:01:65:ed:e5:41:26:33:95:
1d:d0:11:02:37:e6:25:4e:1d:5f:4d:b5:36:0d:46:
74:31:81:c0:57:ef:54:cf:54:79:40:cb:56:7e:87:
ad:d1:d8:6f:ca:ec:d6:86:30:3f:71:f4:88:df:85:
cf:7b:57:6b:06:56:1c:7a:1c:89:b8:db:3c:37:bd:
45:ef:95:55:7f:e2:54:f0:e1:5c:f3:d8:1a:9e:64:
e7:4f:bd:f0:8c:1f:0a:fd:4b:85:21:86:eb:75:8f:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:07:BA:1B:0C:79:FA:3E:92:4B:53:86:7F:02:9E:D9:B0:D8:32
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/nzgHuhsMefo-kktThn8Cntmw2DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.203.0/24
Signature Algorithm: sha256WithRSAEncryption
37:99:c4:b1:36:8b:85:cc:a6:9a:c0:f1:e4:8d:b4:33:71:1d:
d2:4f:00:6d:cf:3f:9f:09:77:c8:19:42:4b:c9:88:ea:85:a7:
54:b7:3d:ae:50:5e:76:3a:66:c8:fd:1d:a1:4c:87:01:b7:86:
bb:a8:44:48:17:73:7c:71:00:bc:55:36:d5:45:5e:e7:1c:fc:
6f:fb:3e:76:c4:47:c2:67:42:cf:c0:39:5c:85:d7:e5:ed:ab:
e2:62:57:b2:68:7e:b5:97:f2:86:ae:86:36:4e:27:9a:f5:b7:
58:d2:c9:fe:72:24:9a:11:17:a4:03:1c:1f:7f:ef:d9:ee:0b:
8a:e3:ce:e7:93:33:2c:d3:a9:44:e3:a8:0d:1e:16:fe:0a:65:
b9:6d:9c:f5:af:d2:37:30:cd:8a:36:cc:96:d2:c0:c2:30:ca:
76:4f:a1:10:3b:26:d5:d8:0d:05:91:6b:6f:69:5e:ce:85:92:
5d:c4:30:9d:1f:83:90:83:8e:75:7a:b8:f5:b2:4f:be:e9:c2:
5a:6b:ca:c7:32:01:dc:e8:c1:ea:fd:d6:50:f1:d9:f9:58:b5:
65:6b:8d:9a:82:4a:51:c3:19:52:d1:57:e9:db:b0:d7:74:b8:
bf:df:ef:63:31:30:92:06:26:92:02:21:24:2a:eb:0d:68:6c:
96:b9:5b:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3YGPySg3BLvLh0F6SUOmz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjYwNDI5MDcxNjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjM4MDdiYTFiMGM3OWZhM2U5MjRiNTM4NjdmMDI5ZWQ5YjBkODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAt/TihCxMOaxuEzd4bQWBvYrWm1
ZEY7lhJj7ajaJJ2CxHhmyd/gTNCsF1yzSVvQz0r5mNIiYraAxeH0XZEsnL4+f47j
LeHA/66DG8sM4fZQ0kP6/yEpH2OtNtkhUWMDvAwOi88ZvQltn4IWPHN6p+K7phT+
uGwDlTM6b+CKnNaEeN2hRiR7Nmk7fBRrAzwvLY/WtsBPDgSgCNGRAWXt5UEmM5Ud
0BECN+YlTh1fTbU2DUZ0MYHAV+9Uz1R5QMtWfoet0dhvyuzWhjA/cfSI34XPe1dr
BlYcehyJuNs8N71F75VVf+JU8OFc89ganmTnT73wjB8K/UuFIYbrdY9nOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ84B7obDHn6PpJLU4Z/Ap7ZsNgyMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvbnpnSHVoc01lZm8ta2t0VGhuOENudG13MkRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnLMA0G
CSqGSIb3DQEBCwUAA4IBAQA3mcSxNouFzKaawPHkjbQzcR3STwBtzz+fCXfIGUJL
yYjqhadUtz2uUF52OmbI/R2hTIcBt4a7qERIF3N8cQC8VTbVRV7nHPxv+z52xEfC
Z0LPwDlchdfl7aviYleyaH61l/KGroY2Tiea9bdY0sn+ciSaERekAxwff+/Z7guK
487nkzMs06lE46gNHhb+CmW5bZz1r9I3MM2KNsyW0sDCMMp2T6EQOybV2A0FkWtv
aV7OhZJdxDCdH4OQg451erj1sk++6cJaa8rHMgHc6MHq/dZQ8dn5WLVla42agkpR
wxlS0Vfp27DXdLi/3+9jMTCSBiaSAiEkKusNaGyWuVsT
-----END CERTIFICATE-----
Generated at Fri May 1 17:45:02 2026 by rpki-client