Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NRMCvnsYLmZbTJSb3YR4HcOCItE.roa
File: NRMCvnsYLmZbTJSb3YR4HcOCItE.roa (raw, json)
Hash identifier: 99whRLaKp8VVsuTzldX6HRsAJxJQ6YEW4VL3018s6Ww=
Subject key identifier: 35:13:02:BE:7B:18:2E:66:5B:4C:94:9B:DD:84:78:1D:C3:82:22:D1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019ED7771EA2A428E308E9AF483E872114BF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NRMCvnsYLmZbTJSb3YR4HcOCItE.roa
Signing time: Wed 17 Jun 2026 21:22:48 +0000
ROA not before: Wed 17 Jun 2026 21:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 194.77.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 18:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:77:1e:a2:a4:28:e3:08:e9:af:48:3e:87:21:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 17 21:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=351302be7b182e665b4c949bdd84781dc38222d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:cb:70:53:65:54:5a:05:24:c2:09:a4:a5:
dd:b7:ba:8b:b9:bc:68:7b:00:38:5d:df:4c:2d:73:
8f:52:e0:21:0f:94:8f:80:f8:c4:c6:05:04:83:2b:
6d:61:af:15:dc:c0:64:8c:f1:02:4f:68:60:f1:fd:
de:57:34:d6:2d:cb:23:fb:d9:ed:1c:59:36:bc:df:
78:fb:b5:1e:7d:6d:3e:42:0c:97:0a:ae:b9:d7:3a:
c9:aa:c6:b4:db:c3:0d:5d:25:38:32:77:45:29:f8:
c9:9c:f7:7a:cc:87:23:30:35:10:1d:6c:6b:2e:a3:
ef:fd:a3:8e:ac:a6:eb:7a:33:04:38:83:d6:10:a8:
40:3a:32:d1:e8:e5:41:c9:11:a5:3f:93:c6:47:6d:
13:98:0e:a5:58:e2:9e:5a:72:6f:bc:c0:9d:8c:a7:
1d:a1:bf:ac:ef:71:9f:26:27:df:64:9f:a1:ec:ad:
fc:f0:c0:4a:4a:61:35:6a:26:00:58:4e:61:d8:a9:
aa:3f:d9:6e:32:d3:cc:72:69:67:dd:a9:76:13:37:
b3:7d:29:7b:1a:55:ab:38:6e:f1:2a:da:ce:47:7d:
ef:af:55:f2:84:7f:3e:28:b0:dc:ca:49:6c:60:cd:
e9:78:c5:b5:14:33:e7:7b:02:1c:b1:b9:7a:cd:d3:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:02:BE:7B:18:2E:66:5B:4C:94:9B:DD:84:78:1D:C3:82:22:D1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NRMCvnsYLmZbTJSb3YR4HcOCItE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.219.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fa:32:bf:83:bc:2f:96:9b:e8:92:02:64:1f:92:88:64:18:
6d:a9:d5:e1:62:49:ba:ff:79:90:3c:34:c1:53:3a:8b:3e:cc:
1e:c2:eb:fc:11:4d:83:d7:66:4e:03:7e:fd:7a:d9:f3:ff:0b:
70:86:27:77:ad:d7:64:c0:5a:c6:7a:98:1a:a2:a5:7c:78:31:
12:42:b4:26:88:99:a5:29:f1:9a:90:f1:c3:98:a8:55:a7:9b:
b1:d4:2a:81:71:51:50:03:ae:c4:84:8f:05:b7:cd:f1:e0:8a:
3b:c9:5e:e0:d4:fb:e4:b7:98:5a:a2:ba:47:0c:28:d3:fa:60:
e6:b7:cf:a6:72:3c:41:80:7f:2c:f7:1c:e7:55:ec:0b:33:6c:
08:3e:41:8e:e8:d4:ad:f0:d4:7c:cd:30:7e:43:67:90:14:9a:
21:6e:a8:9f:d0:d1:33:df:80:73:32:cd:32:00:fb:42:b8:6a:
aa:53:5e:ea:fc:44:83:e8:6d:8a:8e:64:67:71:38:0b:6f:39:
49:e2:4b:d9:50:d6:9e:71:2e:0f:ac:f8:78:a2:7b:02:7a:c9:
f6:49:58:42:6a:41:23:0c:21:60:03:bd:b0:7c:7a:c4:19:7c:
31:df:8f:84:62:bd:23:18:7b:01:22:7e:64:89:49:16:17:a9:
b4:0b:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 01:45:34 2026 by rpki-client