Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NYIUKgptziTmjTuzB89rR5OoJ3w.roa
File: NYIUKgptziTmjTuzB89rR5OoJ3w.roa (raw, json)
Hash identifier: vBhk29CF4pjp5Kwvmdk02ywPzzfme1nc1O7+7goRrqs=
Subject key identifier: 35:82:14:2A:0A:6D:CE:24:E6:8D:3B:B3:07:CF:6B:47:93:A8:27:7C
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0717DDD4DF82FCC2F63FAA80A59BBD673
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NYIUKgptziTmjTuzB89rR5OoJ3w.roa
Signing time: Sat 05 Sep 2026 12:14:29 +0000
ROA not before: Sat 05 Sep 2026 12:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215068
IP address blocks: 92.63.232.0/24 maxlen: 24
153.56.168.0/24 maxlen: 24
185.157.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:7d:dd:4d:f8:2f:cc:2f:63:fa:a8:0a:59:bb:d6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 5 12:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3582142a0a6dce24e68d3bb307cf6b4793a8277c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:c3:85:ce:3b:d6:63:a8:ea:67:bc:42:41:
63:59:5e:7a:61:13:9d:24:d9:a7:33:a0:f3:a4:1f:
98:09:3b:5f:8b:0e:a4:01:60:5b:91:ee:92:4c:c4:
85:29:9e:4e:77:2c:51:84:8e:d4:d3:b4:13:05:04:
17:2a:c6:2c:3c:32:12:26:08:bf:74:65:03:32:d8:
da:ed:d6:0a:12:2d:67:f4:62:44:2f:7e:dc:31:59:
32:97:aa:5a:b9:08:fe:e5:9d:38:b2:59:a1:09:26:
0b:31:36:da:0a:cd:a9:27:97:6c:aa:da:58:c0:da:
51:da:00:19:0a:df:58:57:43:2c:cc:cd:4e:a7:7a:
a1:e8:ee:c0:2a:d3:7a:20:30:40:93:e8:bf:49:87:
8f:b7:55:52:f9:90:61:4a:25:18:8b:6e:eb:09:a0:
43:af:a6:b6:b6:fb:c5:72:d9:c5:6f:20:f2:44:75:
ca:43:b0:a4:43:a1:aa:2e:bc:f1:3c:09:61:be:bd:
ef:cf:ff:18:d2:45:39:38:af:c9:8b:cf:f8:92:8f:
db:47:2e:96:08:a8:fe:29:38:bd:a2:e4:58:aa:e9:
67:76:14:f6:f9:3b:ed:c1:a2:dc:71:a2:57:a9:3f:
b0:08:82:8f:73:59:d9:54:c0:49:16:6b:3c:47:f5:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:14:2A:0A:6D:CE:24:E6:8D:3B:B3:07:CF:6B:47:93:A8:27:7C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NYIUKgptziTmjTuzB89rR5OoJ3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.232.0/24
153.56.168.0/24
185.157.217.0/24
Signature Algorithm: sha256WithRSAEncryption
19:22:3d:18:e2:28:7e:47:00:cc:b9:33:9d:e7:63:dc:23:9d:
f8:c9:66:5c:81:81:7d:f5:73:d3:7d:c4:2d:5c:94:96:74:b6:
e8:54:56:03:fe:b7:8d:95:53:c3:29:cf:7b:d1:06:ae:c3:d8:
57:30:37:80:b8:5e:0b:55:7c:63:38:41:4d:43:38:72:c6:e5:
12:eb:8e:55:91:62:a9:23:14:7a:5e:88:35:3e:29:e7:d7:69:
ec:2c:ff:a6:3b:f8:a2:93:70:39:7e:77:32:d7:1e:74:2d:02:
be:7c:22:9f:2b:19:d7:f9:17:72:ef:a4:82:fe:32:df:f7:a3:
73:12:d4:b1:b6:4c:c5:6c:99:b3:b1:40:78:c0:39:b1:8c:82:
2b:64:83:cf:03:e1:f1:b8:28:73:b1:b7:82:b0:a9:ef:1e:8c:
77:ef:69:c0:48:cb:7b:52:ff:ea:85:28:e1:4b:a8:99:69:8b:
f3:57:b4:1c:04:90:7d:0b:9c:aa:49:74:fa:5d:e6:10:42:9b:
16:63:1d:f1:6c:14:22:f2:1d:9a:78:20:d5:cf:73:02:70:24:
18:ab:04:b0:93:73:f4:dd:f5:a5:76:89:63:1c:e9:e8:68:e7:
b2:a1:04:8c:4e:43:9d:47:4d:8c:2f:3b:dd:3d:9e:99:55:46:
ef:8f:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:58:28 2026 by rpki-client