Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/NtCh4QMaLJ8u8SRhPXME6l6rDtU.roa
File: NtCh4QMaLJ8u8SRhPXME6l6rDtU.roa (raw, json)
Hash identifier: 8DbAlQmhIDDvbE2RTYsHAQ7w/0X/XjYpI/GfiC7MO08=
Subject key identifier: 36:D0:A1:E1:03:1A:2C:9F:2E:F1:24:61:3D:73:04:EA:5E:AB:0E:D5
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A042008F57F8BFF5C8EC368945B5723B65
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/NtCh4QMaLJ8u8SRhPXME6l6rDtU.roa
Signing time: Thu 27 Aug 2026 06:55:28 +0000
ROA not before: Thu 27 Aug 2026 06:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 93.89.211.0/24 maxlen: 24
132.243.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:00:8f:57:f8:bf:f5:c8:ec:36:89:45:b5:72:3b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 27 06:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36d0a1e1031a2c9f2ef124613d7304ea5eab0ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:64:6c:a7:7b:b4:56:11:9a:8c:ba:d7:34:
91:a5:c9:c4:a6:43:67:3e:a6:24:33:c4:73:f9:66:
29:fb:9e:87:29:1b:5a:64:6d:ca:81:08:27:3a:d1:
e7:d7:0d:69:42:39:06:d3:29:8e:08:9e:8e:6c:c0:
70:c5:9b:07:e9:d3:7b:6b:0c:03:20:3d:e1:16:ef:
1d:7d:9d:39:bc:ff:b2:70:9d:b5:6f:15:f0:bd:57:
a7:82:8a:fd:4b:99:83:15:80:da:bb:3b:79:0c:9c:
b5:62:81:83:30:3a:d3:49:63:5c:f4:37:c2:c4:7c:
de:2c:f4:6b:5c:2e:14:b7:b1:6a:9a:7c:b1:22:1f:
bc:ef:79:2d:9c:09:76:e3:b3:83:7c:d6:7d:e4:f7:
5e:a4:75:fa:09:54:d3:a0:e0:69:df:37:8a:98:77:
66:e7:42:ad:0e:5e:12:1c:24:05:af:83:1a:9b:35:
3d:40:74:39:67:45:1e:49:3f:6b:b6:69:b6:a5:39:
33:ec:a5:83:9d:c9:44:0d:1a:d3:88:dc:c1:1f:7a:
78:7f:f1:cf:39:12:b5:c8:ce:c4:e8:6e:d3:fd:5a:
54:6b:7b:50:12:73:0e:39:5b:81:e6:3e:0c:55:58:
58:28:40:06:ed:ad:7f:06:33:93:0a:36:96:aa:92:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:A1:E1:03:1A:2C:9F:2E:F1:24:61:3D:73:04:EA:5E:AB:0E:D5
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/NtCh4QMaLJ8u8SRhPXME6l6rDtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.211.0/24
132.243.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ed:72:32:7e:70:10:ab:49:53:8a:46:1e:81:56:7a:67:d3:
d6:16:bb:01:bc:46:3a:38:b4:90:0a:2a:02:79:12:83:35:7f:
20:7e:b4:05:47:2c:c0:2f:16:2c:33:fc:6d:96:8d:c0:b8:88:
81:3d:28:95:e0:0a:30:5a:7b:26:d1:7e:42:e2:50:92:23:a8:
f6:e4:c5:79:d4:02:00:9c:ba:f8:81:6a:df:35:17:b7:ec:7d:
7d:19:c8:87:9b:4c:e9:41:6c:f6:83:af:fc:20:f3:b5:5b:40:
6c:72:4f:08:27:c9:2b:9d:ff:65:c5:fa:1c:0e:e6:fa:07:f9:
a0:53:39:4f:e4:cd:f8:ec:ba:74:af:4d:bf:64:16:a5:80:ff:
7e:9d:8c:0a:19:81:f3:2e:49:b3:9d:81:da:86:cb:b2:09:da:
8b:cd:a6:ab:84:82:73:b2:a0:74:ab:1f:10:33:4e:0b:8e:57:
8f:0f:3a:f4:75:e7:15:bf:22:e9:7f:5a:6c:ad:9d:dc:54:16:
13:4a:d5:c6:24:40:b5:e7:6f:66:82:ef:75:e1:84:cd:08:a4:
95:35:1c:99:86:cd:3e:f6:46:da:a9:59:f9:6a:d9:e1:48:3b:
d9:2e:33:55:ee:2a:9f:0c:74:20:c3:f3:66:86:6e:2c:39:d9:
6b:06:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:36 2026 by rpki-client