Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/NHZW-8BjMVR4Si6ZdNB5allCMyE.roa
File: NHZW-8BjMVR4Si6ZdNB5allCMyE.roa (raw, json)
Hash identifier: wumtZUkG8Zp3AUB0GpcWaPKBoDuWYrNYF/42+fcehVc=
Subject key identifier: 34:76:56:FB:C0:63:31:54:78:4A:2E:99:74:D0:79:6A:59:42:33:21
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A05889100FAF4A1EFA3C10A7E9DD36FF7C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/NHZW-8BjMVR4Si6ZdNB5allCMyE.roa
Signing time: Mon 31 Aug 2026 15:56:12 +0000
ROA not before: Mon 31 Aug 2026 15:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 193.176.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:89:10:0f:af:4a:1e:fa:3c:10:a7:e9:dd:36:ff:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 31 15:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347656fbc0633154784a2e9974d0796a59423321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:98:37:e6:f5:7a:0a:e3:cc:f0:ff:eb:4b:22:
c3:da:08:c6:cb:b1:bc:24:dd:59:7a:70:c8:4f:a5:
81:8f:67:59:c3:da:b1:65:11:c1:2c:f2:25:4b:a6:
fd:54:67:db:c7:75:11:20:15:30:4a:cd:2d:94:1a:
ec:73:ef:66:89:aa:b5:1f:7a:04:cb:46:17:96:02:
fb:af:6a:3a:1a:ec:06:a5:c4:0b:a5:a5:b4:ac:97:
2b:3c:9b:75:a6:e1:5d:ca:3e:e6:55:60:7f:10:13:
56:0f:ec:d2:de:5f:84:f5:92:39:6b:a1:0b:55:1e:
a2:e7:a4:c7:24:67:93:94:5a:00:a7:d6:95:a0:be:
d2:10:71:e5:1a:2f:e8:2f:6b:3d:03:e1:f5:0a:8d:
e8:af:8c:4c:ed:b2:f3:27:34:3b:bc:86:e4:3e:56:
2f:af:c0:35:79:80:9e:4f:39:a0:29:65:f3:fc:35:
18:b4:8b:91:6b:ae:4d:5f:02:d7:32:20:2f:b7:7c:
ec:13:2c:65:b9:7f:e8:18:e1:0b:f1:53:17:77:6f:
de:d6:7f:99:6e:aa:5e:67:8f:ec:4b:92:4a:7e:f5:
4d:d6:98:1e:96:9c:da:30:45:b8:0e:15:a3:01:e5:
c9:03:c1:cd:38:0b:16:5c:be:70:9b:1b:96:2b:0d:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:56:FB:C0:63:31:54:78:4A:2E:99:74:D0:79:6A:59:42:33:21
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/NHZW-8BjMVR4Si6ZdNB5allCMyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.117.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bb:eb:4b:2d:a5:03:36:92:b7:eb:a3:fd:94:36:a3:a3:b4:
40:35:81:b6:ce:ed:2b:83:d1:9a:20:8f:90:e4:7c:d5:bd:b7:
cd:b7:0e:e3:43:68:1a:cd:66:a4:68:e4:75:75:77:4a:03:23:
e9:e2:83:74:0b:47:07:d2:4e:f0:3b:67:3f:4c:07:2a:21:4a:
9f:92:3b:a2:cf:ad:52:40:f6:08:c2:19:8c:1d:e4:48:7f:85:
a0:d1:da:d8:75:db:9b:ad:cd:f2:1c:a4:89:99:f1:cd:cd:70:
f4:c6:b5:4c:8e:fa:23:00:97:16:7a:59:e9:23:a9:d2:0e:6a:
ff:01:d4:d1:4d:8b:d8:89:bb:31:17:8b:76:27:f7:9f:e1:a1:
05:e0:dc:fd:90:92:3a:54:7e:f7:d1:83:4b:19:d6:16:30:60:
20:42:97:29:a6:46:39:9b:11:61:c4:0c:fb:6a:97:fb:64:29:
46:50:1e:2b:19:0b:1d:64:e7:b5:e6:23:3a:d5:ff:a0:18:17:
d1:d6:26:29:00:4d:a1:ee:da:b5:05:c4:6b:36:3b:91:97:18:
d0:11:21:97:f6:39:0c:3f:f8:bf:2e:3a:2f:0c:58:88:31:eb:
d2:68:8b:ce:96:0c:0a:5d:ce:03:89:70:9e:ff:9d:bc:36:ec:
b0:68:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:06:36 2026 by rpki-client