Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/njcv1S0zFlZVfkeF7_3Vlol-DoE.roa
File: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (raw, json)
Hash identifier: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=
Subject key identifier: 9E:37:2F:D5:2D:33:16:56:55:7E:47:85:EF:FD:D5:96:89:7E:0E:81
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019E4635E2A7B1E4A0AA66BBB253715D859D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/njcv1S0zFlZVfkeF7_3Vlol-DoE.roa
Signing time: Wed 20 May 2026 16:26:37 +0000
ROA not before: Wed 20 May 2026 16:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:35:e2:a7:b1:e4:a0:aa:66:bb:b2:53:71:5d:85:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 20 16:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e372fd52d331656557e4785effdd596897e0e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:4e:1b:77:ac:8c:54:7a:59:0c:14:ed:99:
7d:eb:da:66:3e:48:2a:aa:38:94:96:37:30:30:8a:
9a:1f:5c:f2:72:90:ab:62:c9:db:cc:0b:bf:66:95:
7c:3f:36:79:8b:8e:4b:f3:5a:b5:f1:4e:66:8c:ac:
c7:f5:e8:c5:98:a1:5c:d3:5b:d5:8d:4e:56:4a:36:
13:25:b3:00:7a:e6:e0:18:ca:d9:f1:1b:f6:67:dd:
cd:59:df:9f:68:ea:56:7e:0d:12:cd:be:79:4e:a7:
fe:85:0d:5b:a0:ad:99:36:cf:24:ed:db:bc:f9:fd:
aa:90:2d:3a:52:cc:f4:67:38:16:e1:de:e3:de:34:
a0:19:2a:20:f3:ed:28:bf:85:3a:ad:6e:b1:b7:90:
b7:af:54:dc:b4:bc:03:96:1d:08:5e:92:c6:1e:7f:
d6:df:33:66:81:4a:0d:3b:3c:31:ac:5f:9c:66:a1:
3d:71:13:e5:5a:4b:74:ce:c8:e8:61:b8:25:7f:ad:
99:9b:ff:18:92:9d:ee:79:90:c6:7d:c4:69:2d:17:
6e:5b:6d:81:e3:37:ad:4e:e7:c5:25:d3:6f:8a:29:
a8:52:8c:ff:b9:71:22:12:65:fd:f6:37:44:3e:d3:
1d:e0:9a:b1:43:c2:05:e4:c4:2d:aa:31:7d:60:d5:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:2F:D5:2D:33:16:56:55:7E:47:85:EF:FD:D5:96:89:7E:0E:81
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/njcv1S0zFlZVfkeF7_3Vlol-DoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:18:2c:ae:80:db:58:2c:8b:91:59:56:30:d5:63:6f:83:ea:
f2:80:23:a3:aa:b3:08:ba:52:2c:90:fa:50:1d:91:31:fb:77:
50:ec:a5:d3:e2:8d:29:d3:13:b6:3a:61:f1:b8:8b:8d:98:fa:
fc:4d:9c:bb:ba:c7:18:b1:c8:6e:4b:de:4d:cc:60:76:53:4d:
f0:07:dd:97:48:2b:10:87:42:42:53:cf:c0:c2:c1:b0:70:2c:
db:a7:56:82:03:6b:78:a3:14:82:4e:43:31:5a:ff:7c:e5:0e:
1b:10:cb:67:06:cf:41:23:b4:33:69:99:60:17:5e:02:84:b9:
3a:9c:71:88:ea:cf:83:8a:b9:c3:af:15:6e:5e:65:ea:25:4f:
ca:bc:eb:de:a3:c6:82:7a:e5:1e:cb:0b:66:c8:3f:27:46:14:
01:0a:00:47:fc:ba:9f:93:09:b0:3a:82:68:b2:e0:3e:d1:7b:
77:05:83:2d:1e:19:b2:4e:b2:85:40:53:68:ca:bb:60:8e:01:
16:64:6f:9c:87:90:bd:d6:32:f5:ea:6f:6d:5c:d4:82:eb:79:
d4:53:37:ed:fb:7b:0e:ff:aa:b9:bb:68:fc:3e:6c:4c:ae:b9:
47:36:24:c4:19:05:58:f4:1c:36:b6:1e:36:c6:06:91:ff:0a:
43:f1:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:53:12 2026 by rpki-client