Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NSp-pjmP9xkwwj-AZjedK_zbl30.roa
File: NSp-pjmP9xkwwj-AZjedK_zbl30.roa (raw, json)
Hash identifier: T9w7OurF+dx7eTkrIpf80NuVeftg/QCCTBaYZUtmcas=
Subject key identifier: 35:2A:7E:A6:39:8F:F7:19:30:C2:3F:80:66:37:9D:2B:FC:DB:97:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A0388F94299E2E14CE2B0E42A236756420
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NSp-pjmP9xkwwj-AZjedK_zbl30.roa
Signing time: Tue 25 Aug 2026 10:55:28 +0000
ROA not before: Tue 25 Aug 2026 10:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218902
IP address blocks: 31.148.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:8f:94:29:9e:2e:14:ce:2b:0e:42:a2:36:75:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 25 10:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=352a7ea6398ff71930c23f8066379d2bfcdb977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:70:bf:bb:ca:87:0e:53:a8:90:e8:f1:6e:
df:94:83:57:49:e2:b9:34:ba:ac:b1:e9:dc:21:d9:
36:d9:a1:f4:2d:0c:6c:72:70:a1:7e:9a:c9:ac:2e:
0d:92:d1:2a:f5:b9:35:65:61:25:22:d4:3c:5d:f7:
84:87:aa:4d:f4:21:46:02:4e:03:1e:ac:e9:d2:0e:
1b:c8:4a:6d:f8:a9:b4:a8:f6:64:19:98:ca:37:af:
48:b0:a5:2b:3c:33:36:03:e5:7e:86:3b:ec:bb:7e:
83:c7:01:3a:1f:df:b0:ee:52:52:99:93:b1:a3:6c:
94:46:46:11:9a:4a:d6:91:5b:2e:6e:67:d0:53:6e:
f8:b6:92:25:17:d8:10:ec:cc:e0:87:1c:3a:4f:76:
6f:66:e2:a7:b1:ae:24:47:a7:10:7f:7d:57:64:c8:
81:aa:9e:1a:f8:4d:c5:34:ff:14:53:b2:17:5a:c0:
8a:36:ef:6e:6f:53:c9:69:c5:8f:a9:de:5a:52:e4:
c9:0f:8e:0f:6d:e7:0f:08:b3:4f:eb:95:98:3e:d6:
80:b3:38:e7:5c:7f:0e:19:b1:33:a2:6f:87:92:42:
70:88:db:8c:35:d1:aa:2f:b9:ec:d2:9d:7d:bd:3f:
d3:63:b9:b4:46:40:c5:4e:cb:e6:a8:37:59:5b:2a:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:7E:A6:39:8F:F7:19:30:C2:3F:80:66:37:9D:2B:FC:DB:97:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NSp-pjmP9xkwwj-AZjedK_zbl30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e8:ee:70:68:d7:f7:45:f5:3f:26:53:8a:ac:29:fb:a8:c6:
db:b8:ec:0d:53:69:26:42:71:02:58:b9:86:b8:70:1f:b6:ea:
c3:05:20:9c:fd:f5:f4:43:ad:85:60:dd:6c:8d:ef:3a:2f:cf:
43:71:3d:58:c9:21:77:e0:e3:ab:73:ca:6a:7a:d8:aa:45:71:
79:d2:93:f1:ad:37:a8:9c:ab:7c:d2:93:12:5c:4c:2f:47:03:
f2:db:98:ef:6c:36:e7:4d:4a:73:e5:1b:81:68:5f:dd:3c:26:
20:ed:f4:5b:e0:63:e3:01:4b:f0:10:67:96:93:d7:47:06:75:
f9:b5:8d:5f:a6:dc:f9:ec:b6:31:57:b9:d4:54:2a:12:f7:88:
41:60:a1:f4:c7:42:4e:1b:c0:39:7e:a5:8c:d2:b3:20:c2:19:
89:34:e0:e8:65:a1:9f:bc:60:97:cd:f0:40:c0:63:23:b8:a0:
46:bb:84:62:d1:c3:89:a3:8c:ed:8e:45:41:1d:a2:4e:f7:d4:
e4:8c:6c:1d:6c:a0:81:ed:7c:38:c1:4f:ef:c8:d1:da:f6:a4:
34:11:9c:3a:0c:61:cf:f1:e3:59:9a:2f:8d:d0:65:29:50:2d:
07:e7:41:2d:76:bc:80:67:56:00:0a:a7:94:33:8a:91:3a:38:
a3:16:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:17 2026 by rpki-client