Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa
File: nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa (raw, json)
Hash identifier: DWKdYwXjR7CbcwQ5T5LM5T6YAURcXQrAsUonMFFVa8s=
Subject key identifier: 9E:62:FD:11:0A:AF:0C:AA:D1:DC:7B:38:D0:8B:BC:9B:5F:AF:23:36
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019FCE334941198A1D09BB07C6A9E642E028
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa
Signing time: Tue 04 Aug 2026 19:14:55 +0000
ROA not before: Tue 04 Aug 2026 19:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 89.38.45.0/24 maxlen: 24
185.48.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:33:49:41:19:8a:1d:09:bb:07:c6:a9:e6:42:e0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Aug 4 19:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e62fd110aaf0caad1dc7b38d08bbc9b5faf2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:cf:79:fa:fb:d7:fd:95:3d:99:bc:6e:d4:
e8:cb:85:28:a3:21:f7:85:00:85:78:ac:91:1d:d2:
45:2d:1c:d3:49:5f:a8:dc:19:01:76:c0:64:f3:56:
9d:8a:1e:d3:c0:be:e4:6e:26:d6:84:aa:33:09:a8:
d5:72:c9:5d:d4:43:71:20:de:36:fc:cb:88:9d:55:
db:43:f6:95:b3:61:8e:fd:e4:c5:9c:a3:61:68:e6:
be:6b:76:dc:91:89:e0:41:67:21:d8:92:33:c8:02:
01:b4:6f:4b:44:5f:87:e9:92:1c:3a:8b:83:cc:98:
f9:95:94:65:c5:4d:1d:e2:18:5b:2f:1e:0b:79:65:
ab:7c:14:4e:c9:25:b2:65:1d:ea:a9:93:51:ea:b3:
be:f7:d2:7e:fb:18:f4:c3:be:e2:3b:3d:9f:5e:ee:
2b:1f:16:3a:cc:d6:84:9d:d2:60:20:b3:35:e4:d8:
92:b3:de:42:cc:14:be:7d:8b:e7:a7:9a:1c:f8:a7:
76:db:b9:97:7a:5e:6f:c0:86:46:05:6a:cb:31:0e:
89:c9:7c:24:a3:4c:86:da:7d:70:db:97:27:90:22:
ba:75:40:f3:cb:ab:a3:37:00:9e:7c:5a:18:76:8b:
37:02:a4:2c:84:7f:76:ae:ac:24:fe:67:1f:b3:d8:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:62:FD:11:0A:AF:0C:AA:D1:DC:7B:38:D0:8B:BC:9B:5F:AF:23:36
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.45.0/24
185.48.195.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1f:cc:10:40:7f:89:ce:bc:c0:b9:7e:8b:23:bf:76:9f:0f:
5e:80:95:59:9c:f2:dd:02:4f:37:58:78:4a:f5:4a:10:56:03:
d1:63:14:bb:a0:0d:53:89:db:cc:b5:90:0e:f3:34:09:6b:59:
b5:2e:96:97:13:e2:a4:69:bf:31:1c:8b:4a:c3:5d:e7:16:0d:
a2:ce:77:04:66:85:ae:b4:0f:2f:e8:eb:9a:de:f0:8b:a3:3a:
17:b5:a5:13:25:cf:af:19:ac:32:e6:80:88:94:58:03:ac:54:
0f:7b:ca:de:cb:bd:97:b9:ba:45:03:27:25:60:2c:94:25:70:
14:03:71:e8:67:41:a9:89:1e:3e:59:a8:ba:a3:f9:f9:49:c6:
6c:87:ac:5e:39:2d:a1:ae:cb:0f:b0:de:92:b5:0e:85:a3:16:
64:f7:a8:a9:ac:f1:e1:1f:02:93:45:51:b4:72:ef:1f:9d:8a:
a2:76:04:7f:ac:b3:c2:c6:84:2c:bd:61:cc:50:27:22:e0:10:
a5:f1:14:26:df:b2:32:1b:b5:0f:22:d0:3b:eb:2a:2d:1d:78:
3c:f9:99:b8:a2:01:83:32:63:8a:6d:21:7d:2f:71:03:ad:a1:
d4:5a:bb:75:5e:db:8d:cb:78:db:41:41:a2:92:34:c9:7f:7c:
9b:8d:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:37 2026 by rpki-client