Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NvcSGsHxFEODOYpiXIzatCMQ8zE.roa
File: NvcSGsHxFEODOYpiXIzatCMQ8zE.roa (raw, json)
Hash identifier: 6IUmIofLuPCwcMo34+PS5cmEeljWs+LuQ63DYxryxxU=
Subject key identifier: 36:F7:12:1A:C1:F1:14:43:83:39:8A:62:5C:8C:DA:B4:23:10:F3:31
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019E88304CCE38122845B3B81A17FE72AB9F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NvcSGsHxFEODOYpiXIzatCMQ8zE.roa
Signing time: Tue 02 Jun 2026 11:55:27 +0000
ROA not before: Tue 02 Jun 2026 11:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50588
IP address blocks: 77.158.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:30:4c:ce:38:12:28:45:b3:b8:1a:17:fe:72:ab:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jun 2 11:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f7121ac1f1144383398a625c8cdab42310f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:12:8c:bd:a9:b3:69:3c:e2:2a:a4:f6:4a:
79:61:02:a4:2a:8d:04:51:4e:a4:0a:51:7e:50:04:
db:a5:6c:38:03:bf:84:08:79:66:5e:77:73:12:1f:
e5:53:61:a1:3b:0a:4d:64:43:b8:32:a5:4c:09:dd:
a4:98:c5:96:4f:4c:bc:99:5d:24:3b:48:95:92:8b:
ca:fb:32:4a:a3:09:17:1a:5f:f1:f8:d2:58:b7:55:
07:14:75:e5:b3:1f:90:c9:a7:4d:b7:c1:02:8b:c7:
0a:f5:8e:0d:ee:ba:24:a7:19:5a:4e:58:dd:38:c8:
a5:dd:5e:e8:d6:57:03:a6:f9:da:57:fb:ff:d3:01:
23:9e:74:e7:84:dc:88:78:4e:b3:ef:65:64:d8:03:
7d:19:40:29:5e:1f:6e:8d:6b:bb:1f:8d:77:d1:6a:
7a:7d:c4:6d:b7:93:2c:d9:3b:b9:31:19:3f:3d:a4:
87:49:fb:d2:0e:3d:87:3c:bc:c8:09:ca:ca:80:16:
77:9d:95:45:25:fd:15:51:f2:34:c6:f6:5c:09:12:
8b:eb:9a:69:d9:00:b0:98:7c:64:89:bd:94:73:18:
b7:d6:6d:28:ce:69:55:f5:9f:49:21:8f:6e:24:97:
a3:d3:2e:bd:3a:22:39:67:7c:8e:97:74:46:83:03:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:12:1A:C1:F1:14:43:83:39:8A:62:5C:8C:DA:B4:23:10:F3:31
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NvcSGsHxFEODOYpiXIzatCMQ8zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.158.88.0/23
Signature Algorithm: sha256WithRSAEncryption
70:1e:c6:2b:09:84:93:30:ac:d3:07:09:4a:e6:a7:2c:b0:b7:
96:bd:14:8a:af:83:09:71:40:05:d2:9a:ee:4f:59:31:15:eb:
2f:2b:5b:e7:86:8b:8e:f1:c4:ab:ae:50:af:0f:c4:9c:e2:0f:
92:0e:ee:b1:84:30:a5:45:75:e9:6a:5c:e6:ad:a5:f1:56:1e:
15:2d:5f:24:15:f1:0f:f0:2d:82:f3:79:f7:94:dd:1b:8a:64:
be:90:e1:4e:74:1f:a7:9e:c7:c8:ba:02:2e:8b:82:b0:be:5f:
30:95:49:6f:90:b0:94:76:4d:b5:56:f1:fe:b7:dc:67:1b:e3:
cd:c6:7d:8e:01:bf:e9:c7:46:fd:7a:bd:b3:6c:95:96:76:25:
fb:8a:19:a0:4b:8e:a0:5f:63:7f:c8:48:88:81:dc:d6:2c:2e:
ea:04:b5:68:bf:20:8d:2a:36:d5:17:8a:55:c7:b3:0b:36:b2:
9e:34:08:6d:57:fe:77:48:7f:a6:f1:5f:ae:6e:9e:2a:50:df:
dc:d1:5e:e1:5c:3a:62:32:44:a4:36:72:1e:57:f3:b0:67:6d:
38:3c:5a:87:5f:8d:3c:9a:ef:66:5c:57:52:e0:70:67:33:a0:
7b:92:42:b3:38:84:3a:10:18:77:6a:ee:11:7b:d0:fe:4c:8b:
0f:bf:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:23:57 2026 by rpki-client