Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nXCU4MxWc8kk13F6uOG4JCGX-7M.roa
File: nXCU4MxWc8kk13F6uOG4JCGX-7M.roa (raw, json)
Hash identifier: Iy8n727v7NMNrWvqpY82a2gtnbSI650skHmEup3Rt9w=
Subject key identifier: 9D:70:94:E0:CC:56:73:C9:24:D7:71:7A:B8:E1:B8:24:21:97:FB:B3
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A0F6B912EA4DBCD1195E3CD888690526E2
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nXCU4MxWc8kk13F6uOG4JCGX-7M.roa
Signing time: Thu 01 Oct 2026 09:08:39 +0000
ROA not before: Thu 01 Oct 2026 09:08:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 84.232.93.0/24 maxlen: 24
84.236.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b9:12:ea:4d:bc:d1:19:5e:3c:d8:88:69:05:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Oct 1 09:08:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d7094e0cc5673c924d7717ab8e1b8242197fbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:67:8c:0d:17:6a:fc:22:90:db:0b:43:66:
34:92:82:69:f1:ac:7d:e5:f7:b5:57:1b:93:d8:ec:
1b:cf:64:17:df:ea:c1:63:82:d5:8d:8d:db:e9:5b:
31:4c:c8:84:97:a7:39:b2:42:a4:ef:e7:f7:9a:09:
70:b9:a3:42:2c:ab:b7:38:71:f0:06:39:47:10:62:
ae:fb:32:ba:de:3a:1e:f3:7e:3c:d7:6d:67:75:0a:
e7:2b:21:e6:c6:49:3f:6e:86:55:60:eb:9f:c9:40:
db:a3:a3:b8:ba:44:e6:ee:ee:52:e1:66:35:95:78:
99:4d:5f:09:b0:27:70:35:ac:f1:09:65:d1:fc:81:
26:ed:fe:a3:66:84:01:89:05:7d:db:23:ad:d5:e3:
79:a7:1c:60:44:a1:80:55:51:00:12:74:46:72:05:
df:cc:97:d2:c9:b9:ac:42:58:f2:e5:8b:78:a3:a5:
b9:8e:c5:6b:93:f5:9e:20:70:59:c8:2a:97:db:b6:
97:de:a8:ba:e4:d8:82:03:66:11:39:3b:a6:51:69:
ef:50:c5:d1:b8:7f:69:b0:3c:37:ee:c9:c6:0f:c8:
92:e8:2a:22:af:5e:56:89:40:35:5b:e0:eb:f4:85:
ff:7e:59:3f:48:43:86:08:4c:43:d7:b2:7d:70:06:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:94:E0:CC:56:73:C9:24:D7:71:7A:B8:E1:B8:24:21:97:FB:B3
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nXCU4MxWc8kk13F6uOG4JCGX-7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.93.0/24
84.236.184.0/24
Signature Algorithm: sha256WithRSAEncryption
10:51:fd:ba:b4:87:60:06:d0:a3:61:a4:12:55:01:44:13:12:
2e:37:7c:c1:e4:9f:45:44:b4:c1:0c:30:70:b4:e3:ab:5c:d7:
bd:09:48:82:c0:ed:d1:8b:0c:0d:58:db:df:c3:35:30:2d:3a:
f5:5c:29:66:f4:7e:f7:05:93:e1:36:b0:02:e2:3f:bd:2a:80:
26:1e:41:2d:06:d3:5d:20:fc:a8:d1:df:b1:c9:62:57:78:9b:
02:30:2b:91:74:56:44:94:7f:6e:9b:3a:3e:41:e5:75:f4:f9:
18:45:f6:b4:10:dd:eb:97:51:4c:9d:3c:2b:2c:7e:3b:c3:44:
ca:44:69:e7:39:22:e1:c2:aa:28:97:79:b4:5d:5a:2f:92:96:
26:b1:aa:6d:46:c5:d9:3a:a1:26:90:cb:35:fd:c6:f5:16:25:
49:1a:c8:19:00:3a:76:68:3a:e3:7e:24:ce:f9:ac:f4:98:aa:
a2:81:30:9c:ce:52:42:1c:24:3a:93:8a:91:96:1f:79:e4:e3:
3a:5f:e9:e8:36:3a:bf:d5:d0:bf:78:68:3d:6f:5c:af:3e:15:
af:d9:ce:ce:81:26:67:3b:b9:e9:fd:58:5b:89:19:72:33:5e:
9a:01:00:47:43:df:08:60:21:21:e8:d1:66:17:26:c0:b0:29:
19:7f:34:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaD2uRLqTbzRGV482IhpBSbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjYxMDAxMDkwODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDcwOTRlMGNjNTY3M2M5MjRkNzcxN2FiOGUxYjgyNDIxOTdmYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YxnjA0XavwikNsLQ2Y0koJp8ax9
5fe1VxuT2Owbz2QX3+rBY4LVjY3b6VsxTMiEl6c5skKk7+f3mglwuaNCLKu3OHHw
BjlHEGKu+zK63joe8348121ndQrnKyHmxkk/boZVYOufyUDbo6O4ukTm7u5S4WY1
lXiZTV8JsCdwNazxCWXR/IEm7f6jZoQBiQV92yOt1eN5pxxgRKGAVVEAEnRGcgXf
zJfSybmsQljy5Yt4o6W5jsVrk/WeIHBZyCqX27aX3qi65NiCA2YROTumUWnvUMXR
uH9psDw37snGD8iS6Coir15WiUA1W+Dr9IX/flk/SEOGCExD17J9cAYl0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ1wlODMVnPJJNdxerjhuCQhl/uzMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvblhDVTRNeFdjOGtrMTNGNnVPRzRKQ0dYLTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOhdAwQA
VOy4MA0GCSqGSIb3DQEBCwUAA4IBAQAQUf26tIdgBtCjYaQSVQFEExIuN3zB5J9F
RLTBDDBwtOOrXNe9CUiCwO3RiwwNWNvfwzUwLTr1XClm9H73BZPhNrAC4j+9KoAm
HkEtBtNdIPyo0d+xyWJXeJsCMCuRdFZElH9umzo+QeV19PkYRfa0EN3rl1FMnTwr
LH47w0TKRGnnOSLhwqool3m0XVovkpYmsaptRsXZOqEmkMs1/cb1FiVJGsgZADp2
aDrjfiTO+az0mKqigTCczlJCHCQ6k4qRlh955OM6X+noNjq/1dC/eGg9b1yvPhWv
2c7OgSZnO7np/VhbiRlyM16aAQBHQ98IYCEh6NFmFybAsCkZfzQy
-----END CERTIFICATE-----
Generated at Sun Oct 18 13:36:26 2026 by rpki-client