Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NwDoGZaqUxiULKVDhwcjBF9pVGE.roa
File: NwDoGZaqUxiULKVDhwcjBF9pVGE.roa (raw, json)
Hash identifier: hBdZlHOBbJECDqWck5+yRPeD/uztAmMOudufqghrPg8=
Subject key identifier: 37:00:E8:19:96:AA:53:18:94:2C:A5:43:87:07:23:04:5F:69:54:61
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019ECACDF0AD6F8673C292BCB6D85CEF4559
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NwDoGZaqUxiULKVDhwcjBF9pVGE.roa
Signing time: Mon 15 Jun 2026 10:22:34 +0000
ROA not before: Mon 15 Jun 2026 10:22:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219450
IP address blocks: 78.135.110.0/24 maxlen: 24
188.132.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:cd:f0:ad:6f:86:73:c2:92:bc:b6:d8:5c:ef:45:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 15 10:22:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3700e81996aa5318942ca543870723045f695461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:0c:ac:d3:3a:48:64:a3:89:03:16:4a:8c:
3d:b6:69:cb:5b:f8:43:a0:8b:29:ad:56:75:fa:48:
af:f1:f3:0b:ec:83:68:64:a6:25:65:e2:3c:fb:1e:
5b:04:f7:3b:db:60:88:3a:40:88:87:0a:86:0c:6e:
1e:a3:5e:fd:74:91:c0:1a:f6:d3:5f:7a:d9:50:1d:
5d:13:e7:3c:cd:b4:00:e5:c1:41:31:67:eb:41:b7:
03:a3:9e:54:c7:25:a3:67:14:70:8d:7c:1b:48:f3:
b6:38:ae:79:ae:d3:23:e9:3a:3b:45:bc:71:e1:33:
cd:bf:30:87:ee:ba:e3:98:7e:48:27:83:f7:4b:a4:
02:49:d8:ab:a5:0b:9e:27:5b:34:6c:51:c0:33:47:
2a:44:7d:b3:67:7e:2b:ab:76:ad:53:56:f2:7c:82:
7c:23:e2:50:e6:87:e6:a8:10:f9:7f:4f:cb:5d:6c:
ab:2b:57:1a:91:42:da:f7:7a:3a:7a:08:89:21:54:
3b:23:6e:bf:95:43:a6:08:f5:c5:bb:42:5e:18:ee:
f0:fb:b2:ae:f4:ed:e7:f6:cc:56:a7:55:df:a7:e1:
60:ee:a6:0c:7b:66:10:72:e8:5f:be:c6:1d:7b:11:
df:82:6d:8b:46:fd:38:ec:e9:0f:17:26:34:2f:83:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:E8:19:96:AA:53:18:94:2C:A5:43:87:07:23:04:5F:69:54:61
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NwDoGZaqUxiULKVDhwcjBF9pVGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.110.0/24
188.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8e:bf:d8:4c:09:22:66:59:46:7e:59:72:74:f8:0a:b1:fa:
66:a9:16:2e:9d:bd:a3:35:05:d6:e5:13:2d:a1:1f:1d:69:72:
d7:37:b1:6e:dd:be:a8:5e:a8:5c:d4:40:58:df:77:29:f7:84:
95:79:00:74:b8:9e:f9:c4:db:0c:8a:5f:1a:5d:05:55:d2:a4:
bc:c6:e8:ea:66:84:3e:45:f3:16:db:87:2d:5a:f0:40:6d:8a:
b0:63:3a:10:6d:17:eb:2b:05:bf:1b:a4:00:73:8a:3b:d9:db:
a3:20:68:20:4f:a9:3f:73:9f:cb:6b:8b:f2:b4:ba:04:a9:92:
0b:b4:b7:ff:54:27:7b:31:46:24:78:9e:2d:fb:53:26:97:6e:
c3:84:35:43:07:2d:61:cd:f7:7b:5a:57:84:7a:ff:99:39:b6:
31:99:9a:ae:1e:51:90:fa:c3:81:e4:81:29:b1:78:8c:a9:80:
d3:22:00:c2:89:97:28:b5:0d:fd:73:8a:89:e7:cd:33:af:7d:
33:8c:65:5c:58:12:65:70:c0:e7:65:aa:56:5a:52:18:45:8a:
90:8c:c9:0e:54:e7:59:f7:f4:4c:b6:9b:94:1b:6a:35:d3:c1:
d3:7b:ed:27:d1:cd:15:9b:b8:5d:9a:a7:aa:3e:1e:0b:21:2a:
33:3a:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 16:11:12 2026 by rpki-client