Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/nPavcWuYvm-MSbgznj_Sff9kRKk.roa
File: nPavcWuYvm-MSbgznj_Sff9kRKk.roa (raw, json)
Hash identifier: clQMCHmpNT1nUEFb4i2X4ShJdRNgo9vUWenM+CCiZpI=
Subject key identifier: 9C:F6:AF:71:6B:98:BE:6F:8C:49:B8:33:9E:3F:D2:7D:FF:64:44:A9
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FDB69399FE9C0013C8A1F1887CAEBC3CC
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/nPavcWuYvm-MSbgznj_Sff9kRKk.roa
Signing time: Fri 07 Aug 2026 08:48:54 +0000
ROA not before: Fri 07 Aug 2026 08:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48624
IP address blocks: 176.56.64.0/19 maxlen: 19
176.56.80.0/22 maxlen: 22
176.56.88.0/22 maxlen: 22
176.56.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:69:39:9f:e9:c0:01:3c:8a:1f:18:87:ca:eb:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 7 08:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cf6af716b98be6f8c49b8339e3fd27dff6444a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:ac:39:cd:0e:72:f5:bc:25:cd:a6:ae:71:
a7:09:37:30:24:41:29:13:c7:3d:f4:a0:5a:7d:f1:
af:c7:bc:3d:30:bf:e4:63:e7:75:0e:de:49:c8:ce:
54:a0:9c:0d:72:9d:42:9f:2c:d8:54:d6:3a:80:93:
23:a9:a1:94:c7:18:89:8a:6d:a6:7e:6e:9f:5d:e9:
4b:d3:f3:31:5a:fb:32:d4:14:e2:f9:e9:cb:6c:69:
a5:44:da:34:8d:b8:ac:65:82:09:b5:ce:d5:01:2b:
70:6b:49:1f:35:3f:3e:31:35:56:77:87:fb:33:8f:
90:92:c6:5a:51:50:02:f7:54:a8:aa:83:0a:fc:d3:
b7:5f:c0:40:f1:6e:ce:74:df:00:61:1e:0b:b2:af:
fb:07:95:5c:45:e4:6c:cf:4b:41:ce:90:a5:bf:d5:
f7:23:c5:45:c9:0e:24:18:27:94:6e:8c:6e:3c:bf:
a3:28:3f:ec:8a:65:94:18:4c:0d:3b:a3:90:b4:b2:
bf:f2:ea:af:7e:5f:b5:b2:be:eb:e2:2d:a6:9a:05:
3d:8f:86:e2:8d:c9:a7:f7:82:a5:f2:d5:d0:de:ce:
59:86:be:d8:b0:6e:8a:57:43:e0:7f:19:57:ed:33:
74:22:bb:75:92:3d:a5:f4:3f:4b:36:96:97:95:fa:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:AF:71:6B:98:BE:6F:8C:49:B8:33:9E:3F:D2:7D:FF:64:44:A9
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/nPavcWuYvm-MSbgznj_Sff9kRKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.64.0/19
Signature Algorithm: sha256WithRSAEncryption
17:65:5b:36:be:d2:56:c3:ad:cb:18:65:4d:af:4d:5d:da:47:
c5:73:62:85:bf:b7:c9:c2:7c:1d:0a:8c:ed:82:78:0f:d0:bd:
d7:12:e1:dd:ec:09:a1:6f:8f:81:89:ac:4b:04:d6:93:49:ed:
d3:65:98:26:1e:36:df:a6:bf:db:78:e5:8e:50:09:ad:5c:fa:
d9:4f:6a:ff:e7:45:5c:3c:6e:a0:01:1a:53:75:91:b8:8a:0a:
8f:3a:cf:89:16:01:bf:f9:bf:05:3d:28:6c:2b:a2:a5:63:a0:
b6:49:eb:ef:0c:0c:6b:c9:92:c0:11:81:77:ac:4f:84:cf:a9:
66:91:ad:b8:d2:cd:e4:51:33:24:14:39:ce:4e:d2:b1:95:02:
f5:dc:fd:62:f2:6e:fe:1a:77:55:85:d6:6d:41:47:a0:7e:f5:
96:44:b0:39:1b:3c:02:be:05:0d:6d:f0:38:bd:d3:61:10:d7:
18:54:05:47:68:06:2e:ef:2c:2a:63:74:74:50:ea:b6:3b:d9:
ce:34:13:8e:de:ac:09:bb:db:c1:f2:64:b0:9f:21:de:6b:a9:
7f:10:30:9f:54:d2:1f:11:89:f3:2e:66:0d:b9:d5:9d:7b:3f:
39:af:95:a9:4d:c4:14:85:89:66:cf:d3:6d:ae:51:d8:12:e4:
86:41:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:05 2026 by rpki-client