Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/NEyhwNNluRFiY1QGbFu3eQXwHPk.roa
File: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (raw, json)
Hash identifier: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=
Subject key identifier: 34:4C:A1:C0:D3:65:B9:11:62:63:54:06:6C:5B:B7:79:05:F0:1C:F9
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019F08609A7D48ADA0121D624FB1C22BAE74
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/NEyhwNNluRFiY1QGbFu3eQXwHPk.roa
Signing time: Sat 27 Jun 2026 09:19:36 +0000
ROA not before: Sat 27 Jun 2026 09:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 5.157.21.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:60:9a:7d:48:ad:a0:12:1d:62:4f:b1:c2:2b:ae:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jun 27 09:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=344ca1c0d365b911626354066c5bb77905f01cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:62:8a:31:c1:ec:67:80:fa:65:4d:a7:8d:
95:34:f6:c6:28:57:b3:87:80:2f:77:5c:d3:53:4c:
d6:1d:6f:91:bd:cf:9d:73:f7:43:90:5a:99:2e:0a:
a9:c2:9f:14:b2:1f:4c:f7:3c:c6:48:24:8e:61:05:
fa:b4:47:0e:8b:62:df:9e:db:b1:e3:0f:a0:19:ee:
21:29:43:1b:40:a3:8f:31:c3:72:b2:6a:78:e9:14:
7c:c5:6e:97:e8:cb:2e:fb:dd:b4:b6:5d:fa:e0:12:
a7:01:88:d2:78:2d:7a:e3:ab:ec:43:b2:72:12:5b:
3e:8c:01:bb:1b:c2:82:9c:87:3f:fb:31:3d:20:6f:
65:cf:a0:de:e6:be:53:01:44:cf:4e:61:5a:d6:25:
31:dd:1e:3e:7c:44:d0:6d:07:6e:65:b7:79:57:4b:
9f:30:61:ab:6f:76:78:79:d3:69:c9:e3:82:43:48:
83:ce:62:95:c8:ca:1e:35:7d:e1:53:7d:b7:f2:61:
96:51:1c:c2:23:6e:64:b4:c8:b6:d2:9e:c7:22:ad:
7a:ea:72:48:05:5b:59:d7:de:ba:b6:61:d9:db:bc:
07:28:68:85:e3:eb:de:c9:e0:62:99:d3:4b:93:a1:
65:19:49:de:fe:65:ee:27:76:ec:5a:82:b7:79:dd:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:A1:C0:D3:65:B9:11:62:63:54:06:6C:5B:B7:79:05:F0:1C:F9
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/NEyhwNNluRFiY1QGbFu3eQXwHPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.21.0/24
104.160.3.0/24
Signature Algorithm: sha256WithRSAEncryption
27:46:3a:80:a0:e3:d1:45:75:c4:04:62:30:26:55:fd:0e:f7:
9f:b8:a1:c0:de:ea:ac:57:43:06:10:5e:42:6b:94:e4:07:77:
f4:6b:6e:07:35:bb:ba:06:e7:a5:e7:63:51:f9:7f:0b:31:98:
eb:c2:27:8e:45:9b:bb:b5:05:aa:ff:98:1d:51:3a:3a:5e:ca:
4f:12:d7:d0:fa:a1:07:89:13:58:03:75:1b:77:21:8f:3a:6a:
d1:0c:c1:ec:08:67:b3:c8:f2:f0:8a:66:9e:40:89:66:26:86:
ce:81:32:7e:c3:33:09:74:3b:51:49:91:8d:aa:10:32:9b:e0:
dd:d5:ab:7d:45:ae:32:69:6e:1c:b7:4a:33:f5:cb:85:09:06:
86:94:4a:58:73:63:66:cc:bf:0f:7a:6b:32:96:27:40:0e:1d:
4e:0a:e7:0a:76:1a:df:b9:9b:57:1a:0a:df:4d:39:ef:e5:98:
a5:2f:ce:b7:a3:de:2d:be:e5:38:80:b2:ea:9f:f9:5a:64:02:
3e:4d:0a:0d:e0:24:d5:af:04:84:b9:48:2d:b1:75:95:5b:d6:
3a:a7:a7:ad:a9:db:fb:b4:0e:dd:45:a3:5d:0d:a6:9d:bc:df:
99:c7:e2:c6:2f:17:ac:df:2b:5c:78:cc:8d:d2:0f:a4:72:01:
6b:2b:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:11:12 2026 by rpki-client