Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/nACgEvzk8fUHLTFU1R4PsTADQ54.roa
File: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (raw, json)
Hash identifier: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=
Subject key identifier: 9C:00:A0:12:FC:E4:F1:F5:07:2D:31:54:D5:1E:0F:B1:30:03:43:9E
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F2368509498510FB8A7F8594352C03358
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/nACgEvzk8fUHLTFU1R4PsTADQ54.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50741
IP address blocks: 79.173.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:50:94:98:51:0f:b8:a7:f8:59:43:52:c0:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c00a012fce4f1f5072d3154d51e0fb13003439e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:d0:6e:64:53:6f:5b:3c:e7:96:bb:35:ba:
16:a8:54:a3:13:bb:a4:86:97:aa:b2:8b:98:66:9a:
7a:5c:b4:4a:c6:66:f1:a1:6b:c8:56:d4:d4:3c:cd:
31:58:b3:1b:5b:2f:94:11:51:fa:4b:28:ad:2e:7a:
49:9e:de:34:1b:31:08:b7:46:1d:8b:10:4b:11:1b:
9a:f4:18:db:01:36:cb:74:ea:68:6a:ae:e7:a5:53:
45:15:d1:0f:eb:72:0d:a2:f7:cc:cf:0a:08:e8:b8:
7a:d7:0e:8a:2c:01:60:24:22:92:7f:72:b6:f2:21:
39:15:53:5f:dc:07:c7:a7:be:a1:ce:9b:4e:44:89:
91:b8:b5:7e:91:be:59:c0:04:1f:f0:c4:ca:ac:d4:
0c:0c:c3:56:5b:3f:87:3b:06:dc:02:87:8b:8e:41:
1a:2d:c6:ec:eb:b9:0e:3b:f3:22:29:fc:45:5c:43:
c5:c2:a5:c8:f7:c4:e5:f4:83:3f:8f:75:89:f6:ac:
99:c4:9b:7f:64:7f:10:27:95:31:8e:e2:fa:8c:02:
69:c7:4a:dd:80:03:28:04:fd:d0:95:b2:ab:db:1b:
8d:4f:0f:ae:4d:1d:e6:b1:4f:1d:a0:3e:46:f0:63:
76:39:ff:93:96:ff:3e:30:23:e2:63:99:74:bc:f4:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:A0:12:FC:E4:F1:F5:07:2D:31:54:D5:1E:0F:B1:30:03:43:9E
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/nACgEvzk8fUHLTFU1R4PsTADQ54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8f:d9:4c:4e:33:39:96:e9:1f:c9:5e:26:2c:8a:9d:16:5b:
cd:7b:17:51:5c:ed:61:1d:dd:b4:04:aa:1c:85:17:ab:57:05:
82:2f:20:60:4c:92:23:b4:4a:d2:a7:22:ff:53:4a:db:a0:54:
45:6c:0c:11:a5:28:f5:a4:30:05:eb:73:da:46:ce:21:5a:1a:
3b:44:97:14:a3:4f:98:9e:48:ef:12:a1:1a:05:1d:d4:81:e8:
28:2c:17:e1:e7:a6:e3:9b:40:ba:f2:c1:bb:9d:9f:1b:45:df:
f9:47:42:8b:37:65:8b:03:d5:14:12:a7:14:f3:73:bc:58:c3:
23:f4:c3:32:3d:4e:30:98:2b:0c:ff:73:0c:21:f6:e2:c4:69:
39:c6:15:54:9e:7d:be:d8:1e:13:72:a7:8e:8b:2c:d6:14:6d:
87:a3:26:a3:b1:bf:88:9e:2e:6f:c0:56:aa:c2:9b:17:94:be:
f2:78:9e:46:6b:c5:1a:00:2c:77:df:aa:59:6f:10:93:8b:25:
e4:0c:9c:12:34:b3:e3:3c:cf:34:5d:14:65:13:7b:81:7f:72:
ef:28:9b:3a:80:49:7d:60:82:f7:bd:03:58:e9:be:b0:e8:9a:
02:28:00:43:1f:bc:54:71:b5:58:74:77:2d:03:b1:b6:6e:b2:
9c:c6:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:14 2026 by rpki-client