Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/NA0zlZdT69EMNDUxOd3YryjIMKw.roa
File: NA0zlZdT69EMNDUxOd3YryjIMKw.roa (raw, json)
Hash identifier: qH/UmIxK17bFbxqTtc1QwvlKjc61IIZjj3fPAL9RV0k=
Subject key identifier: 34:0D:33:95:97:53:EB:D1:0C:34:35:31:39:DD:D8:AF:28:C8:30:AC
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 01A0591263FB800C274BA896187ACEF33123
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/NA0zlZdT69EMNDUxOd3YryjIMKw.roa
Signing time: Mon 31 Aug 2026 18:26:12 +0000
ROA not before: Mon 31 Aug 2026 18:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 157.5.48.0/22 maxlen: 22
157.5.52.0/22 maxlen: 22
157.5.56.0/22 maxlen: 22
157.5.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:12:63:fb:80:0c:27:4b:a8:96:18:7a:ce:f3:31:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Aug 31 18:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340d33959753ebd10c34353139ddd8af28c830ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:d2:1e:01:4f:2e:ff:5c:35:80:a5:0f:6a:
f8:ec:9e:29:43:e5:60:e8:29:45:fe:05:54:04:7d:
9f:2a:75:d7:a0:32:2a:2e:27:68:5a:cc:36:18:9a:
36:48:b1:a5:c6:89:cb:ed:3d:66:9a:29:35:60:3a:
e2:20:74:ad:38:a5:48:3a:cc:2d:f8:80:fc:06:da:
82:d2:c7:b5:3e:72:b9:3c:63:8d:de:41:b9:b9:b8:
e8:e8:42:8f:0d:f9:2f:03:05:84:c3:3c:0e:4b:70:
38:0c:7b:3a:b0:f4:85:b4:99:7b:f5:9c:7c:e1:96:
94:fd:da:75:2f:65:61:32:e6:07:d5:a5:a2:e8:b2:
29:c1:29:c3:fe:d5:d0:07:f6:ee:a5:ce:c7:cc:f0:
3e:50:a8:4c:55:33:4a:8a:32:ac:b8:f0:29:8d:e2:
7b:be:47:c9:c4:6c:9c:14:ba:87:2f:5b:41:a3:f0:
1e:e8:85:0d:9f:fc:99:fe:5d:dd:ca:bf:01:7e:ad:
c7:09:fe:2d:ef:6e:82:11:6a:6e:40:a2:14:47:b5:
9e:5b:f1:e9:1b:0b:a1:db:b1:f4:f7:18:b7:e3:b8:
c4:b4:17:76:9e:3c:d7:7d:a2:1f:de:7f:25:59:79:
be:8b:06:29:93:ce:d6:65:f7:35:fb:1d:b9:2f:94:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:33:95:97:53:EB:D1:0C:34:35:31:39:DD:D8:AF:28:C8:30:AC
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/NA0zlZdT69EMNDUxOd3YryjIMKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.5.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:5c:9c:5b:f0:b4:48:bf:8f:6a:f0:b5:80:7e:9d:a2:c5:79:
b6:f3:40:7f:c1:90:45:2d:5d:0d:06:aa:43:98:6b:8a:34:b2:
70:7c:c9:65:31:3e:ab:8d:17:79:1d:3c:c5:d5:bf:7b:b4:2d:
52:c5:a7:9b:98:21:7f:89:21:fd:86:4b:73:c1:a2:a7:8d:a7:
fe:a8:ab:6f:ff:5b:7c:62:bc:90:cb:11:07:3e:4b:a4:c5:a4:
a5:17:ec:c0:8c:74:7c:6d:7b:1d:b3:75:4d:99:a5:02:44:07:
48:60:7c:a2:15:68:ec:27:66:2a:27:ac:ff:57:65:76:4e:59:
db:a6:25:17:33:c6:85:a7:ab:61:6d:df:d9:d6:be:5d:36:74:
2a:23:c1:81:66:fc:09:a0:ae:85:e0:f5:c5:ae:e5:75:9d:68:
35:32:3c:a9:3b:61:01:e6:a3:82:a1:ca:50:d4:06:c5:2b:61:
d9:5e:2f:fb:1d:6d:a1:ce:df:2a:76:20:8a:f7:dd:02:89:8f:
30:f8:d4:57:29:95:d7:8d:2b:16:25:53:97:d8:0f:83:1b:79:
57:b0:56:57:6c:b1:f3:38:c3:76:5e:34:5e:cf:34:0d:73:3d:
0f:87:d6:eb:9b:14:82:f4:b2:57:21:1e:f9:14:82:a7:8b:3c:
42:97:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:53:15 2026 by rpki-client