Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa
File: NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa (raw, json)
Hash identifier: TfRkOz0goqzjaEodDhFwiei8/n8mFcYT40hAji7gK7Q=
Subject key identifier: 36:E7:8D:44:BE:70:9B:87:31:71:81:C4:FC:4D:90:E1:B6:26:3A:30
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019E3A8AD04A09A5A8A39F9CCC6EC28BB6FA
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa
Signing time: Mon 18 May 2026 10:03:56 +0000
ROA not before: Mon 18 May 2026 10:03:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216190
IP address blocks: 195.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:8a:d0:4a:09:a5:a8:a3:9f:9c:cc:6e:c2:8b:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: May 18 10:03:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36e78d44be709b87317181c4fc4d90e1b6263a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:23:2d:0f:20:30:c3:3b:df:25:22:27:65:
a0:54:63:07:68:d8:01:c2:da:38:24:e0:f9:d1:6a:
09:75:59:6b:c8:4e:3d:64:10:44:4d:ee:3f:43:32:
f0:4f:50:d7:2b:0f:1c:20:d0:eb:33:42:d9:36:6a:
87:76:e0:49:50:db:ec:93:1a:2f:0b:c1:a2:9e:af:
17:e3:0a:17:c2:f2:66:3d:5b:da:b9:1b:5d:dd:09:
d7:3f:9b:1a:fd:62:ba:27:89:8d:b9:d3:7b:2f:98:
77:ef:91:bb:d3:75:61:03:d5:6a:a2:ba:60:ee:58:
f9:cd:fe:7d:25:3f:26:56:b5:02:3b:96:6e:af:e5:
7b:7e:2f:c6:2e:16:03:fc:6b:dd:11:36:13:ff:b0:
bd:3c:57:e4:00:6a:20:ed:6c:82:61:bd:92:6f:4e:
79:da:ec:d7:98:dc:e2:0a:32:b8:01:3d:7e:5d:47:
c6:9a:97:ce:68:a5:56:af:09:7c:1a:ea:06:8f:47:
c8:54:c1:5a:6d:f2:9d:88:1a:8a:0b:61:dc:50:d3:
20:f5:9e:c7:d5:a2:f1:3e:59:76:24:03:95:c5:88:
f7:b3:82:7b:a3:0f:0b:e2:e8:c3:03:1c:a7:d6:27:
7d:3d:4b:63:22:05:ca:24:88:26:07:e4:f1:e7:97:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:8D:44:BE:70:9B:87:31:71:81:C4:FC:4D:90:E1:B6:26:3A:30
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f7:42:dd:24:a3:87:9d:25:2d:8d:42:4f:47:d8:fa:a8:4b:
f3:a6:74:ef:b9:b9:64:1b:b3:4d:16:2d:47:f0:9a:7a:d8:36:
5f:1f:aa:0a:05:35:9f:f1:da:66:68:77:73:a4:3e:6e:15:e2:
aa:82:a3:3d:4e:f6:5d:13:a7:42:72:01:26:82:80:b8:3f:8c:
a3:af:53:bb:ae:1c:74:e1:8d:64:88:82:69:07:40:c2:33:0a:
bb:62:8c:2d:02:2f:7e:e6:81:b1:c8:65:cc:eb:1d:2e:15:3b:
dd:82:f3:ca:8b:4b:a9:e4:56:0b:69:d0:99:25:7f:6e:d5:68:
a7:c5:b9:24:47:61:a2:4c:79:e4:c4:54:61:33:0e:e5:86:2e:
c6:7c:1d:38:02:ac:2e:09:0a:d8:17:5a:e1:ed:01:a4:70:96:
ea:df:b5:ea:cb:91:77:de:dc:de:67:2c:e9:7e:7a:06:ec:75:
f2:e4:69:57:f9:5b:19:a2:18:f3:04:c7:11:ad:c5:d8:52:4b:
9e:23:2a:10:23:26:cc:8f:06:4f:a7:61:7d:b6:06:bd:9e:44:
e0:e6:08:5b:fa:47:1e:ec:2a:ed:bc:5d:ba:e5:40:fb:2b:0a:
d0:37:7b:fe:7e:48:17:d9:39:bf:f4:0c:f8:c2:c8:e7:e3:f8:
18:b1:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:54:15 2026 by rpki-client