Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nx6qXR3CZZr0e6yi9fwAqSmfjy0.roa
File: nx6qXR3CZZr0e6yi9fwAqSmfjy0.roa (raw, json)
Hash identifier: MzpZjcFTr9+kuULQ80tqJwDJrHyRGGdAajAZ3ol1Oz0=
Subject key identifier: 9F:1E:AA:5D:1D:C2:65:9A:F4:7B:AC:A2:F5:FC:00:A9:29:9F:8F:2D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0428ECDEF85C09066AE2E427BA34ACDB5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nx6qXR3CZZr0e6yi9fwAqSmfjy0.roa
Signing time: Thu 27 Aug 2026 09:30:50 +0000
ROA not before: Thu 27 Aug 2026 09:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11421
IP address blocks: 77.67.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:8e:cd:ef:85:c0:90:66:ae:2e:42:7b:a3:4a:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 27 09:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f1eaa5d1dc2659af47baca2f5fc00a9299f8f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:18:17:07:c6:cb:58:97:e8:27:a5:a5:49:
6e:12:a0:80:0a:5a:83:10:01:1a:5f:4d:a6:ce:f7:
92:af:ad:df:cf:06:ef:e3:0c:ae:45:8a:e7:d6:1d:
8a:cf:79:d0:43:87:93:8a:92:49:92:35:75:89:af:
21:d2:47:ae:62:30:26:af:43:dd:33:29:f8:77:1f:
29:00:d2:13:d9:7a:e5:53:ad:9f:9e:fe:f8:35:1a:
b6:01:86:75:45:a7:b2:1f:cd:5d:52:5d:8e:bb:ac:
2c:b1:87:03:40:23:ce:69:e1:ce:61:de:47:d1:b6:
4d:67:14:5a:f5:c0:a2:69:a5:d1:18:60:df:bd:12:
ab:35:17:ad:68:90:ef:d1:dd:46:b2:2c:71:98:65:
aa:c3:60:01:a5:46:91:e6:b3:26:81:ef:b2:ad:20:
ba:e8:d0:eb:5c:c5:d7:2c:de:f2:3e:a6:c2:f3:45:
49:ae:cb:f3:ed:b7:05:79:5e:7d:98:e3:52:2b:1e:
27:e2:0b:54:db:13:2e:ca:b0:f7:66:33:d8:e8:4a:
67:c3:dc:03:57:33:d0:a1:30:39:f8:93:26:3d:88:
f7:6c:46:f6:55:83:26:10:9d:60:6b:c6:b3:7f:cc:
f6:df:32:84:9e:27:fe:41:1d:08:fc:7f:0b:80:c3:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:AA:5D:1D:C2:65:9A:F4:7B:AC:A2:F5:FC:00:A9:29:9F:8F:2D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nx6qXR3CZZr0e6yi9fwAqSmfjy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:93:79:06:bb:c0:11:ed:f7:38:34:eb:9b:3a:25:6c:40:b5:
77:b4:ef:92:68:17:48:19:a3:25:8e:9b:6a:15:34:fa:3a:64:
87:ff:06:c4:bb:11:ca:4c:84:da:9a:61:95:4b:d6:cc:1f:3d:
45:58:67:98:45:f3:9e:e3:74:f1:6e:2a:d2:29:e0:51:8d:fb:
34:36:91:d9:bf:d5:cf:49:9c:15:a1:61:a1:8e:84:17:a1:d6:
a5:10:c8:a9:d8:24:44:21:4d:01:63:d5:ac:dc:d8:6a:94:07:
51:e7:dc:c1:a9:c4:81:81:46:e3:1e:a6:ce:b7:9a:07:b1:42:
3a:41:21:d6:37:e1:c8:2c:2b:4b:3c:07:05:4b:4e:70:bd:66:
44:ef:7d:2c:df:10:99:8d:8d:c1:02:02:54:94:c3:a4:16:e5:
8d:b8:fb:a6:c1:05:f1:f8:11:33:06:54:8a:3b:03:97:5d:e3:
9d:ef:c1:d2:20:db:bf:75:24:bd:40:5d:2a:b7:e8:be:46:84:
3b:5d:2b:81:6c:14:02:ed:31:fe:02:49:3e:4a:13:fd:ce:51:
10:3f:b8:b0:63:56:ee:76:65:6f:01:b9:44:46:11:9e:db:bd:
3d:04:6f:9e:a5:e4:41:f1:1d:62:9a:4e:c1:bc:72:a1:36:d3:
f9:02:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:11 2026 by rpki-client