Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Nb9JZyAefPbjpxi2cVC2-yfzww8.roa
File: Nb9JZyAefPbjpxi2cVC2-yfzww8.roa (raw, json)
Hash identifier: jl0bmDnzSH6frV+fkRxoTDwv3W5rPCZjAk979Fat9xw=
Subject key identifier: 35:BF:49:67:20:1E:7C:F6:E3:A7:18:B6:71:50:B6:FB:27:F3:C3:0F
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019FBBD264E1BC24922BF9E549A1BC1B6302
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Nb9JZyAefPbjpxi2cVC2-yfzww8.roa
Signing time: Sat 01 Aug 2026 05:35:55 +0000
ROA not before: Sat 01 Aug 2026 05:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219200
IP address blocks: 138.226.236.0/24 maxlen: 24
138.226.237.0/24 maxlen: 24
207.89.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:d2:64:e1:bc:24:92:2b:f9:e5:49:a1:bc:1b:63:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 1 05:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35bf4967201e7cf6e3a718b67150b6fb27f3c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:98:3a:ad:f9:78:2a:07:22:7c:cc:db:f0:
5f:af:3f:cf:8b:fd:b6:cf:00:b1:f9:9c:e9:af:d6:
7b:10:f0:ad:d8:a2:49:d4:82:5c:20:04:6f:a3:cb:
a2:51:ca:b0:cd:96:4a:6f:2c:d9:28:ae:46:84:47:
e4:74:81:ff:1a:29:e4:00:17:c3:e5:ef:c2:05:4a:
5d:2d:93:41:c2:ba:63:7c:ef:f2:14:b8:30:cd:44:
13:ed:75:82:72:3d:d7:e0:ff:65:8c:6c:05:bd:ff:
3b:d0:68:2c:d1:f6:39:2c:4d:72:a5:dd:d1:ce:7f:
d3:b6:88:36:cb:13:c0:82:2e:bc:71:6d:7a:ee:b5:
f9:3a:0e:c8:8b:bf:a9:94:f4:7e:1b:ed:7a:5c:67:
dc:c7:01:9b:c8:65:7e:ba:ad:78:24:cb:e6:03:b5:
40:2a:fb:5b:d0:10:36:77:f6:de:c5:58:4a:a3:b2:
8c:71:5c:b4:8f:98:ee:e0:2c:52:ab:38:a8:54:46:
46:62:eb:8a:29:5a:1f:ec:3d:5b:4c:b5:88:e9:76:
e8:85:b8:ff:fd:d6:44:aa:b7:ed:f8:dc:71:b4:82:
7b:57:16:ce:8e:27:82:ab:41:3c:5d:cf:cd:04:96:
a1:b5:8e:ed:9a:8a:4b:0f:2c:dd:0e:2f:0d:0f:cd:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:49:67:20:1E:7C:F6:E3:A7:18:B6:71:50:B6:FB:27:F3:C3:0F
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Nb9JZyAefPbjpxi2cVC2-yfzww8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.236.0/23
207.89.18.0/24
Signature Algorithm: sha256WithRSAEncryption
63:99:79:fe:df:f9:30:ff:cf:78:b0:31:6d:d7:f5:e6:40:e2:
e8:69:5b:e2:f6:08:70:42:7b:51:cd:2c:03:5e:25:48:17:71:
a2:92:75:94:6c:8c:9d:12:71:17:87:93:0f:39:6e:d8:96:91:
52:fc:44:fb:e3:76:57:92:a0:b4:a5:6c:b4:c9:96:87:ae:0b:
9e:8a:8e:aa:f1:2c:5f:43:b8:6d:79:a5:8f:c2:6e:0f:57:14:
91:d3:c3:82:9b:69:55:ac:63:d0:d5:4d:58:c1:d2:ff:56:af:
f7:66:50:54:36:1c:71:1e:bf:55:b0:4c:fa:44:e5:aa:75:bd:
7c:b6:08:c5:6f:28:ca:fa:8c:8e:72:af:16:7d:78:fc:57:87:
a1:99:50:e7:29:44:a6:a7:71:67:50:f8:ef:ea:a8:31:c5:04:
fe:fe:01:6c:33:cf:c1:e0:be:9e:b6:a7:08:b2:e6:3b:d5:0c:
26:9e:b6:a4:05:9b:af:04:50:d1:27:5d:2b:e0:e6:13:e7:d0:
57:0f:0f:90:47:cb:3a:bf:40:bc:a6:62:49:06:44:00:9d:10:
e3:16:0f:90:3d:a5:41:a2:6d:4b:0a:55:d0:61:04:3c:56:7f:
83:c8:a1:7d:36:37:1a:1d:b2:53:98:f6:34:bd:c7:29:1d:5f:
f6:e6:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:49:23 2026 by rpki-client