Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NZAJcB_v7K__rDfYm54uGo1T8Gc.roa
File: NZAJcB_v7K__rDfYm54uGo1T8Gc.roa (raw, json)
Hash identifier: Bz9csk3cjS+r3DklzegtThHrWl71FpMPC9K9KHX6jnE=
Subject key identifier: 35:90:09:70:1F:EF:EC:AF:FF:AC:37:D8:9B:9E:2E:1A:8D:53:F0:67
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FDC8FFDA174DA34D5BBE73CE62CF613B1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NZAJcB_v7K__rDfYm54uGo1T8Gc.roa
Signing time: Fri 07 Aug 2026 14:10:51 +0000
ROA not before: Fri 07 Aug 2026 14:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 77.67.36.0/22 maxlen: 24
194.77.12.0/22 maxlen: 24
194.77.28.0/22 maxlen: 24
194.77.32.0/22 maxlen: 24
194.77.72.0/22 maxlen: 24
194.77.188.0/22 maxlen: 24
194.231.192.0/23 maxlen: 24
212.168.48.0/20 maxlen: 24
212.168.128.0/19 maxlen: 24
212.168.172.0/22 maxlen: 24
212.168.208.0/20 maxlen: 24
212.168.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:8f:fd:a1:74:da:34:d5:bb:e7:3c:e6:2c:f6:13:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 7 14:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=359009701fefecafffac37d89b9e2e1a8d53f067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:73:32:65:52:d0:4e:33:df:82:81:e6:0b:
ca:b5:3a:5b:c1:e4:2b:b6:3d:e3:92:80:ec:bc:b7:
d8:91:a9:26:90:8a:ba:84:91:39:ca:af:4d:c1:ce:
05:75:79:10:5b:97:03:9f:0d:09:ec:27:1c:8e:a7:
ae:2f:b0:90:08:30:00:1b:b7:d8:69:9d:87:ee:3e:
ef:25:28:88:c1:c6:e4:b6:97:31:42:54:92:d1:da:
25:9e:10:1a:e7:45:7e:49:9d:21:9c:0d:0b:43:33:
3c:bb:8d:3b:f5:90:11:1b:49:ea:66:5c:33:33:48:
56:1d:c0:06:57:06:47:cb:b3:2c:81:7a:1b:56:fa:
d1:18:dc:f6:d7:41:85:83:31:3c:e8:ee:4a:15:74:
f1:da:bd:70:3c:01:fc:41:9d:a2:4f:b9:4f:fb:ee:
36:45:e3:e4:7d:15:68:16:b9:75:bd:51:de:2e:b5:
13:d0:17:99:2b:b2:3c:71:3f:e4:ac:3d:77:88:fc:
f8:f1:6b:08:c1:ab:30:e2:88:40:97:16:a7:4d:4f:
e9:08:b9:62:ba:a7:4b:c5:1d:7b:4b:af:cc:92:2b:
c3:47:5b:3d:49:75:d7:cd:82:eb:1d:a6:f8:03:79:
a8:e0:cb:ae:5c:3a:9b:51:98:4f:38:ba:99:04:7d:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:09:70:1F:EF:EC:AF:FF:AC:37:D8:9B:9E:2E:1A:8D:53:F0:67
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NZAJcB_v7K__rDfYm54uGo1T8Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.36.0/22
194.77.12.0/22
194.77.28.0-194.77.35.255
194.77.72.0/22
194.77.188.0/22
194.231.192.0/23
212.168.48.0/20
212.168.128.0/19
212.168.172.0/22
212.168.208.0-212.168.255.255
Signature Algorithm: sha256WithRSAEncryption
5d:95:6d:a8:fe:3c:da:67:36:eb:85:c9:ec:c7:08:a0:5f:06:
82:46:4c:d6:d8:d1:0c:e7:e6:d1:2c:dc:f2:a1:f6:fd:3d:c9:
d2:27:8a:ae:a0:2d:c1:25:3f:59:7d:5f:18:fb:7c:f4:82:91:
91:3a:22:cf:66:61:e1:0c:35:2f:5d:6b:11:e7:74:80:05:c1:
83:b3:7a:8d:52:03:24:3d:0f:79:73:22:d1:1b:b7:7d:c0:ad:
3b:ba:62:c5:0e:ae:ba:90:50:06:dc:ae:07:c4:b6:09:1f:6b:
1a:23:ae:21:21:28:a3:82:54:be:7e:83:35:5b:03:c0:d8:df:
93:bd:e6:f7:c4:06:1a:49:54:5f:6a:2f:0a:69:b8:0c:b8:1b:
81:35:df:1e:d8:bc:8d:ec:50:59:4a:9d:f2:9d:1c:2d:c6:2b:
74:8d:0f:2b:08:a3:d0:9f:12:cb:16:72:fd:f9:d2:a2:72:ad:
e0:a1:08:6f:2f:61:43:dc:04:54:18:ac:0a:00:34:76:e1:3e:
e6:a1:22:9c:30:ce:34:bb:d7:74:a8:c8:34:12:81:27:0e:08:
b2:ca:ce:30:5d:c7:7e:b1:00:a8:1f:1c:df:c3:ae:b2:14:e7:
03:4c:7b:8b:59:aa:4e:bf:2f:e5:ed:5d:29:e6:a7:54:aa:42:
dd:ae:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:56 2026 by rpki-client