Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/NZeiCNkAFPPe6mRmV3vIotIey6I.roa
File: NZeiCNkAFPPe6mRmV3vIotIey6I.roa (raw, json)
Hash identifier: 1okB9NoMuO2fNW/qbueY6s54GpzzWp1KSEo2FrjzOoM=
Subject key identifier: 35:97:A2:08:D9:00:14:F3:DE:EA:64:66:57:7B:C8:A2:D2:1E:CB:A2
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01A067BD6469284D0DEC79ABD2EBB4239CE1
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/NZeiCNkAFPPe6mRmV3vIotIey6I.roa
Signing time: Thu 03 Sep 2026 14:47:40 +0000
ROA not before: Thu 03 Sep 2026 14:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.175.0/24 maxlen: 24
188.191.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:bd:64:69:28:4d:0d:ec:79:ab:d2:eb:b4:23:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Sep 3 14:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3597a208d90014f3deea6466577bc8a2d21ecba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:ca:5a:b8:3b:39:61:89:5f:d9:0d:54:31:
36:d2:0a:1f:a4:93:66:fe:a3:56:0b:56:5d:b5:1e:
38:17:dc:0f:8c:00:06:92:63:3f:a2:2e:f7:ac:20:
79:ff:7c:cb:1d:d8:43:76:6f:e0:2a:3f:ef:61:01:
0d:f6:92:f5:a4:04:ea:ca:6e:ab:b6:65:c0:75:d4:
3c:38:3a:ce:2f:64:1c:3a:8d:23:6d:a6:c1:5b:93:
3b:0e:85:57:20:3f:43:0c:a6:74:dc:85:65:aa:e1:
3f:2e:c2:27:c5:e3:77:96:bb:cc:11:5b:2f:ef:bf:
5a:c6:59:63:7d:2f:db:3c:e6:2d:1e:d5:4d:18:9d:
d7:21:0a:4f:7d:b1:f9:3a:d9:68:bf:4c:66:b8:42:
db:59:4d:61:4e:96:4c:9b:2a:b0:00:de:23:6c:80:
7d:32:bb:3d:ce:d9:42:c6:6a:07:53:aa:6a:6d:ba:
69:21:d7:b1:af:d7:a1:e4:8d:e5:01:2b:af:90:82:
77:24:9f:7a:5c:1f:f1:24:ef:04:5b:9a:3c:2f:c1:
40:5a:36:f4:07:e9:26:29:4f:01:d6:1f:ec:b9:c2:
70:96:50:a0:57:97:7b:41:dc:d9:7c:23:25:4c:2e:
86:14:73:88:16:fc:94:ed:c0:20:07:61:a5:7e:e3:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:A2:08:D9:00:14:F3:DE:EA:64:66:57:7B:C8:A2:D2:1E:CB:A2
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/NZeiCNkAFPPe6mRmV3vIotIey6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
76:43:a8:1f:eb:b8:1b:c6:08:d6:3b:bd:8f:48:b6:4f:15:81:
06:9b:20:1b:1c:6c:83:10:3a:b5:87:3b:e0:47:54:60:d9:af:
a0:dc:3c:a6:4a:10:f3:c0:30:60:24:bf:c5:0e:31:6e:01:a4:
e5:4d:61:74:03:c3:4e:32:43:07:02:df:3e:07:ea:f6:a2:23:
ab:76:6d:d7:fa:fd:08:6d:6d:38:62:ac:34:87:bd:74:80:75:
ac:fe:8c:7c:d7:3a:5d:69:f4:a4:0e:36:e6:56:b6:ea:e7:22:
38:79:74:7b:57:65:1b:07:b8:aa:01:c7:58:79:df:6a:2b:11:
86:62:22:e8:66:72:16:18:bb:20:ea:68:c9:74:3b:0b:49:84:
ad:dd:c4:b4:ce:20:73:f0:ae:92:7c:f0:58:48:12:2f:76:eb:
69:00:c1:05:ad:d7:3b:07:04:96:4c:90:9e:d9:85:ee:52:87:
6f:81:4b:c2:0e:fd:19:54:64:5d:ba:01:a2:9e:e4:cc:03:77:
43:fb:5a:97:5f:1f:d4:ce:f8:0e:f9:4c:63:b0:27:01:a3:2e:
5b:b7:a8:48:79:00:db:bd:23:7b:fd:52:72:9e:a3:54:f2:c6:
57:66:20:98:fc:c9:de:cd:00:7a:a2:f2:56:85:30:07:66:5f:
89:17:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:53:18 2026 by rpki-client