Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/njovosA2W_N9Cq3TvoGrhnPIKec.roa
File: njovosA2W_N9Cq3TvoGrhnPIKec.roa (raw, json)
Hash identifier: fBMr2pUru4F+g6ghbFvdWuUCej7v1Qzjm5YaaHWaSrY=
Subject key identifier: 9E:3A:2F:A2:C0:36:5B:F3:7D:0A:AD:D3:BE:81:AB:86:73:C8:29:E7
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A1587367EA5BC7F51BFDE6B7D18CECC56D
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/njovosA2W_N9Cq3TvoGrhnPIKec.roa
Signing time: Tue 20 Oct 2026 08:35:20 +0000
ROA not before: Tue 20 Oct 2026 08:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 207.89.19.0/24 maxlen: 24
2a14:a083::/32 maxlen: 32
2a14:a086::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:73:67:ea:5b:c7:f5:1b:fd:e6:b7:d1:8c:ec:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 20 08:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3a2fa2c0365bf37d0aadd3be81ab8673c829e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:0c:71:4a:66:74:65:8f:de:16:81:d6:25:
cc:5b:af:7e:1b:be:a3:be:73:4c:ba:26:28:10:19:
45:26:6c:69:b9:0f:ba:9a:69:81:b7:d4:e3:7c:93:
b2:cb:e0:36:88:27:ec:ce:2c:69:5f:fd:44:d4:16:
2e:ed:7c:fe:99:f8:d6:3a:be:68:73:1b:49:56:e2:
90:7d:fe:56:6d:9e:b4:8a:a0:4e:de:61:16:b4:f6:
08:86:7e:fe:a4:b6:d0:9a:48:4c:3e:82:a3:fb:28:
f5:29:6a:03:09:1c:cd:a9:b3:6e:48:07:df:cb:36:
a8:89:9f:9c:f3:02:92:4f:e4:cc:d7:62:88:48:0c:
79:7e:19:ea:bf:a4:4e:11:81:b2:75:d7:9b:17:0e:
a5:26:58:0b:94:57:7a:6e:7f:8c:37:50:e3:0a:2c:
d2:c8:f6:ea:59:6f:85:a4:b8:5a:90:bd:e0:c2:1f:
80:41:5c:49:3b:60:d8:e0:01:be:01:19:9c:2e:2f:
de:86:be:3b:08:21:bd:30:ec:d8:30:68:e5:cf:64:
70:25:7f:e4:50:12:2b:57:02:0d:36:ad:17:14:da:
4f:ee:f2:b7:43:c1:dc:23:0f:d4:4c:fa:ce:70:f3:
a4:5e:c8:eb:f8:6c:b0:f7:08:ba:07:37:f7:7b:15:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:2F:A2:C0:36:5B:F3:7D:0A:AD:D3:BE:81:AB:86:73:C8:29:E7
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/njovosA2W_N9Cq3TvoGrhnPIKec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.89.19.0/24
IPv6:
2a14:a083::/32
2a14:a086::/32
Signature Algorithm: sha256WithRSAEncryption
a9:03:7f:77:51:cc:8d:cf:44:d7:17:3e:92:a0:da:75:0e:db:
80:97:73:8e:2a:2c:32:f5:1d:ce:d8:20:5e:b2:d2:3c:91:5e:
7f:22:61:1a:d2:6a:04:bb:a1:92:57:c0:82:93:54:0f:3e:e9:
d8:12:6b:d9:ed:e2:a8:45:21:76:48:73:4d:da:79:24:04:f1:
ac:2f:d4:41:9f:fe:8c:df:5b:0b:3a:4e:0d:3f:ee:e2:c8:3d:
e1:43:a1:62:49:20:be:51:84:28:fc:d1:10:42:64:cd:d9:92:
54:7e:1b:d9:fc:4c:5d:49:03:9e:7a:ed:99:9b:89:d6:69:b7:
d0:6a:25:2b:7c:3b:73:0c:56:2b:f5:6f:42:b4:49:58:34:2a:
96:f4:b9:8b:af:44:e9:dd:83:fc:e8:97:a2:65:a9:cd:ca:b4:
ad:50:29:c7:5d:5b:92:3a:9b:71:c1:0c:0c:02:07:e2:53:d4:
55:43:db:08:cb:43:db:e9:85:09:82:2b:ec:74:e1:7b:2f:7b:
a5:d7:bd:e2:35:23:c3:42:9f:c7:2c:e1:f6:e1:75:20:50:cd:
ef:b9:8e:06:6b:60:d6:08:71:37:fd:e0:6a:8b:a0:d3:6a:3a:
60:38:e2:44:ed:16:20:ec:7e:b7:3a:5c:19:b0:63:7d:aa:92:
ec:e8:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:01:28 2026 by rpki-client