Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NPZBcELTMl4gvA6dqDJnENlALFw.roa
File: NPZBcELTMl4gvA6dqDJnENlALFw.roa (raw, json)
Hash identifier: 9wqU0fgKAYz9ZCpY5fDyu0U3ehiR8J0vrzxewL1SrFs=
Subject key identifier: 34:F6:41:70:42:D3:32:5E:20:BC:0E:9D:A8:32:67:10:D9:40:2C:5C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A02E9F528BDA86DEB15506E55E9ED65E86
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NPZBcELTMl4gvA6dqDJnENlALFw.roa
Signing time: Sun 23 Aug 2026 12:36:28 +0000
ROA not before: Sun 23 Aug 2026 12:36:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 212.189.26.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:9f:52:8b:da:86:de:b1:55:06:e5:5e:9e:d6:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 23 12:36:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34f6417042d3325e20bc0e9da8326710d9402c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:82:67:08:9d:2a:b9:ba:c8:3e:49:73:77:
ec:6c:0e:69:01:34:55:b0:a0:9f:9e:f6:c4:7c:d9:
ab:f4:10:a1:cb:87:9a:84:a3:10:18:14:27:9b:17:
b4:bb:56:64:81:e9:b4:a4:41:e6:bf:d7:1c:46:d6:
54:c3:c0:e5:bd:34:a8:94:92:98:4c:fd:6b:92:ac:
6f:78:20:7b:65:35:bf:8a:fd:ac:c3:7a:37:a5:6f:
9c:d7:9d:ee:8b:e5:0e:60:1a:38:f2:6e:20:4c:ed:
60:9d:7a:47:90:bf:c8:8d:5a:e2:c0:6d:f3:8c:de:
5f:83:71:79:ea:31:d6:d9:12:da:cf:2e:f9:e3:8b:
05:be:9e:85:2c:53:e1:0f:5f:34:f7:ce:bc:d1:ad:
85:79:19:b8:c2:24:9b:e3:77:b3:e7:85:d6:ac:5d:
13:e0:39:0f:a9:97:43:02:58:1d:e0:a0:67:9b:e0:
ec:ed:77:fc:55:d9:6b:01:a5:aa:5f:34:2c:ee:84:
77:41:df:49:43:b7:7f:c4:cb:a2:e7:52:ac:c1:9c:
9e:44:97:09:14:ed:52:de:37:9d:8e:3a:65:c9:cb:
f5:44:84:e3:08:0a:1c:77:4d:45:f0:cf:42:41:96:
b6:2b:e3:01:ee:45:f0:45:5e:b9:e3:f0:bf:2b:75:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:41:70:42:D3:32:5E:20:BC:0E:9D:A8:32:67:10:D9:40:2C:5C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NPZBcELTMl4gvA6dqDJnENlALFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.26.0/24
212.189.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:88:d0:c2:41:fa:1e:27:4f:9c:0a:11:3d:84:9b:9a:16:97:
72:95:a3:a7:d1:0e:c3:3f:51:d2:7a:87:5b:c4:1f:29:9f:7f:
4d:9d:d8:62:11:62:c4:fb:7c:74:58:48:ab:76:eb:6c:52:76:
38:ea:b3:37:20:54:11:2a:5d:00:0c:8f:85:c4:52:62:2f:ec:
e1:ca:e5:e5:5d:9e:5f:0c:71:29:0f:5d:8c:5b:e6:ea:15:e4:
d1:2c:16:89:86:7a:93:da:99:cd:2d:d7:df:7b:ef:04:92:ec:
aa:63:20:a0:55:26:e3:d2:79:c1:41:37:93:7d:0d:cc:2a:e1:
4a:af:7a:a1:ab:bc:6e:26:03:68:43:77:b1:3d:d7:f8:1b:c8:
f8:98:5b:16:4e:32:9e:57:03:87:eb:40:65:72:57:fc:c4:82:
20:4d:93:82:73:da:ec:61:dc:37:50:c2:3d:a2:08:9b:56:89:
6a:d1:c6:23:08:48:9c:23:73:e6:49:27:9c:7f:98:df:68:a6:
a8:11:31:37:5d:78:26:c7:be:cf:5d:a1:b3:60:63:16:a0:44:
2e:59:2a:c3:d1:66:a3:f3:0e:0b:70:f2:d2:d6:c5:48:09:41:
a1:2a:41:c8:9c:65:b1:e0:8e:c9:d6:7f:d8:f4:cb:5b:cb:08:
47:7f:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:49 2026 by rpki-client