Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/nz9yT71vV7fSXcLNAe8fyQQHDxI.roa
File: nz9yT71vV7fSXcLNAe8fyQQHDxI.roa (raw, json)
Hash identifier: 3w/92WUi2GLR+d5P/nVG/KTfjpZhoawmfwlsordQc4o=
Subject key identifier: 9F:3F:72:4F:BD:6F:57:B7:D2:5D:C2:CD:01:EF:1F:C9:04:07:0F:12
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 01A03793CAD00E4B5EEA6E4C7E87C984A2F7
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/nz9yT71vV7fSXcLNAe8fyQQHDxI.roa
Signing time: Tue 25 Aug 2026 06:20:27 +0000
ROA not before: Tue 25 Aug 2026 06:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202854
IP address blocks: 194.92.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:93:ca:d0:0e:4b:5e:ea:6e:4c:7e:87:c9:84:a2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Aug 25 06:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f3f724fbd6f57b7d25dc2cd01ef1fc904070f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:34:62:59:44:a0:52:0d:67:dd:19:50:61:
c8:01:04:62:e7:dd:73:98:5a:d1:cc:71:ef:c2:4d:
5d:3d:36:42:93:d3:a1:a8:d4:59:84:ef:bf:f1:42:
4a:5a:da:13:85:31:df:b3:d2:c1:7f:6c:a4:94:d2:
cb:31:3e:f6:ff:9e:44:e7:93:8c:e0:2b:7d:38:99:
e3:5a:ca:89:96:38:30:ab:84:8e:d2:7c:dd:f3:1a:
e5:9c:84:e1:53:2d:fa:01:ae:de:01:bb:77:6a:41:
59:78:25:e5:e4:f5:8f:63:5a:d8:6b:33:bf:e5:79:
66:4d:a0:d2:18:68:41:fb:39:23:f5:61:d9:99:65:
64:bc:26:90:c7:cf:3f:c6:18:ed:14:06:9b:e4:29:
db:6e:d2:4c:a9:35:5d:10:bd:ae:da:ce:94:47:95:
29:58:79:a6:59:c3:fb:2f:fa:04:ff:99:29:8c:7b:
b1:54:75:fa:7d:a5:f2:b9:db:73:11:a5:0f:08:a8:
f6:71:84:16:99:61:0c:65:bb:19:56:3c:f9:e3:46:
79:53:99:a1:38:ad:74:0c:f9:7c:21:78:4a:b1:f9:
f8:ee:11:64:e5:bd:fc:0f:9d:73:38:31:1e:8b:82:
b7:59:22:d9:40:c6:95:1c:61:c7:01:d0:4a:84:0c:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:72:4F:BD:6F:57:B7:D2:5D:C2:CD:01:EF:1F:C9:04:07:0F:12
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/nz9yT71vV7fSXcLNAe8fyQQHDxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.116.0/24
Signature Algorithm: sha256WithRSAEncryption
76:87:ff:1f:7c:cd:24:d9:a3:3e:58:ba:cb:7b:c3:05:04:d3:
5c:b6:45:89:7a:07:df:9e:4a:fa:a9:1b:4f:5f:f5:1e:89:fb:
20:8d:74:6d:27:75:0d:00:9a:96:1d:00:84:79:16:57:69:ed:
f6:69:cc:59:28:90:52:09:ee:e0:62:15:6f:b0:3c:a1:69:36:
3c:8f:34:cc:0b:f4:ab:a8:7e:f6:f3:27:a9:c5:cb:f4:1f:85:
7e:c9:b2:10:8d:65:8a:61:a8:f3:d5:51:c1:70:5d:a4:ff:2e:
0f:06:c1:c6:90:f3:8f:6a:21:07:e3:82:90:4b:4b:7d:cb:f7:
a2:b4:bb:f6:3c:96:f4:e4:e2:5b:b6:e7:ce:3a:63:62:84:09:
10:3d:89:64:72:1d:1d:27:63:5e:6b:61:5c:ea:4b:1e:36:09:
70:fe:e5:46:1d:21:61:47:b2:20:d3:56:0d:83:74:50:d2:84:
8f:65:82:43:84:c5:df:6e:25:a6:8b:19:90:ad:3b:88:51:2f:
c8:b7:e0:df:42:13:0a:bc:f9:88:a2:ae:df:f1:4b:0f:39:41:
9c:ab:cc:a5:e2:24:29:8c:95:94:02:e7:6d:0c:fd:34:47:ae:
91:75:29:80:21:69:fd:f9:b3:8e:45:a7:58:fe:c1:0c:b6:17:
21:1d:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:57:16 2026 by rpki-client