Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/njXz1RiDGXy_jj0sFKADRL7AuSg.roa
File: njXz1RiDGXy_jj0sFKADRL7AuSg.roa (raw, json)
Hash identifier: +kc8WjRqgr7ndyMMjibWgmh08kK9dBOoT/zmfV4O35g=
Subject key identifier: 9E:35:F3:D5:18:83:19:7C:BF:8E:3D:2C:14:A0:03:44:BE:C0:B9:28
Certificate issuer: /CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Certificate serial: 019F2368A9C4CD4A802EF1B39F10ACB0EA71
Authority key identifier: 87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/njXz1RiDGXy_jj0sFKADRL7AuSg.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.88.0.0/15 maxlen: 24
218.254.0.0/16 maxlen: 24
2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:c4:cd:4a:80:2e:f1:b3:9f:10:ac:b0:ea:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e35f3d51883197cbf8e3d2c14a00344bec0b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:b3:50:c5:5f:8f:df:e1:b6:8e:bb:30:78:
c7:d2:16:11:d0:0e:ce:64:33:97:59:4f:34:cc:87:
54:54:1c:4d:4f:18:59:3a:91:ca:0b:b9:d5:34:ce:
99:6b:c9:f6:73:12:66:c6:5a:2a:7a:44:6f:45:53:
ab:e5:b2:8d:89:29:52:f7:76:59:30:49:7f:66:42:
45:7e:7a:4f:ad:4b:84:b2:0b:3e:5d:48:98:c4:63:
c7:da:13:d5:27:8f:11:c0:64:cf:03:01:a0:4c:97:
43:83:93:2e:e8:b0:d0:3f:4c:f2:a6:7c:e5:ac:6a:
bc:d9:96:9f:b9:ee:3e:f6:60:bd:ea:5d:b8:0c:20:
db:af:c3:7e:6d:28:15:85:87:be:ba:8b:cc:a4:b1:
ed:ee:b8:39:4d:4b:c5:86:e4:e3:8e:41:2f:6d:a9:
2f:8d:d2:50:b4:b0:ca:bb:37:95:4b:b6:f1:9d:70:
b2:3e:cf:f7:58:71:be:7e:25:f7:28:2f:68:b4:eb:
9c:e2:7b:6b:13:a3:70:16:54:98:89:09:ec:22:3d:
d5:85:e8:6e:60:73:ab:a9:43:af:2f:ee:e4:e1:2d:
70:73:64:88:b7:35:5d:e0:a1:cc:e6:a5:37:d0:4a:
c2:a7:f3:0f:5c:51:67:90:82:13:2d:e4:a4:a9:11:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:F3:D5:18:83:19:7C:BF:8E:3D:2C:14:A0:03:44:BE:C0:B9:28
X509v3 Authority Key Identifier:
keyid:87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/njXz1RiDGXy_jj0sFKADRL7AuSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
218.254.0.0/16
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
4b:31:f2:91:8a:f2:78:2b:da:6b:8d:7c:95:26:cf:25:2c:b6:
ff:32:68:fc:17:20:12:97:a5:e6:a8:86:a1:f3:9d:b7:02:cd:
df:02:dd:9f:2d:f2:a5:cf:19:c4:aa:7f:e3:ac:4f:6c:ef:cf:
ba:b4:54:ed:a9:53:98:91:c2:b7:b5:a3:8b:bf:14:30:4a:d2:
24:9f:ca:64:09:2f:bd:da:78:c9:da:9a:88:09:21:33:11:5d:
d3:a3:d8:72:44:73:6b:bb:a1:e5:a1:87:eb:79:2f:84:c8:49:
e0:72:4e:8d:27:89:01:6b:bc:c1:0e:b5:d5:93:f7:d5:24:64:
95:97:1f:fd:86:09:e0:92:bf:96:37:d4:7e:ac:9b:3a:d5:08:
32:1e:60:fa:4f:6f:a1:93:54:0e:24:8d:34:bd:6b:e5:18:1a:
a4:05:38:79:48:5f:7a:04:1f:90:e3:79:6a:82:3b:e1:17:00:
ed:53:d0:5d:7e:91:99:b3:74:94:17:fc:9a:94:fe:6d:17:cd:
88:9e:ea:70:98:74:52:3a:3f:3a:f4:50:07:59:60:3c:46:e3:
d7:65:1b:91:44:72:75:5e:ce:4d:c8:12:fe:f9:20:82:f2:97:
46:2d:ae:b7:88:6d:17:75:fc:81:2f:29:8e:58:52:63:5d:75:
c1:89:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:42 2026 by rpki-client