Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NxFIV7I2svnE-GqxoekdBjnJ-iw.roa
File: NxFIV7I2svnE-GqxoekdBjnJ-iw.roa (raw, json)
Hash identifier: XdKuB/8jWQvMLmH18nP50Bo5DAL7QTVsq03CBrmG75E=
Subject key identifier: 37:11:48:57:B2:36:B2:F9:C4:F8:6A:B1:A1:E9:1D:06:39:C9:FA:2C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FB99BB196D92D5D39C7575ADEE8F9AB1A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NxFIV7I2svnE-GqxoekdBjnJ-iw.roa
Signing time: Fri 31 Jul 2026 19:16:56 +0000
ROA not before: Fri 31 Jul 2026 19:16:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 78.154.114.0/24 maxlen: 24
82.109.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:9b:b1:96:d9:2d:5d:39:c7:57:5a:de:e8:f9:ab:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 31 19:16:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37114857b236b2f9c4f86ab1a1e91d0639c9fa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:9f:e5:1c:1b:84:8d:57:5d:5b:ca:2b:78:
af:a8:8b:9e:73:f6:64:d3:08:c6:af:e2:08:b4:15:
db:47:10:3e:00:d9:83:e2:72:55:c2:bc:9f:0d:74:
eb:3c:7f:17:1e:77:3d:e3:2f:bd:38:b6:8f:05:a8:
73:0f:22:77:59:82:21:6f:67:1a:8d:e6:ac:11:ca:
50:23:0a:35:d9:19:d0:58:16:96:0d:f8:eb:43:e3:
b8:09:76:d9:e2:4d:7b:97:32:f0:28:b9:d8:82:12:
aa:b5:07:df:63:a2:19:ce:2e:e5:8a:80:b9:45:4d:
c5:df:c2:ba:2f:4e:10:6e:2b:f7:44:03:f0:20:af:
72:c0:2f:5b:39:f0:d9:25:04:03:a3:34:34:11:01:
a3:3c:71:ca:39:5a:04:1c:3c:53:3f:a8:ad:30:a6:
34:09:a7:5b:98:b2:57:15:92:04:b4:9e:9c:61:fb:
c9:4c:ba:ca:35:bc:04:79:3f:31:a6:c3:d1:19:8a:
d1:f6:db:86:22:f5:17:b6:6a:e1:6f:af:4d:d7:57:
ab:41:9e:0e:19:7b:0e:ba:e1:9b:d3:7d:22:d1:03:
f4:b2:d1:0d:1c:03:40:e7:cc:eb:16:49:42:15:76:
6d:3c:8d:7e:b2:48:bb:28:08:d1:e3:36:2b:a0:c7:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:48:57:B2:36:B2:F9:C4:F8:6A:B1:A1:E9:1D:06:39:C9:FA:2C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NxFIV7I2svnE-GqxoekdBjnJ-iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.114.0/24
82.109.172.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a8:31:fa:67:27:1e:9b:37:5a:91:a3:92:ef:43:da:59:1b:
8b:5a:53:28:9d:92:99:c9:78:96:43:81:1b:b2:b0:87:d5:8f:
de:04:d9:25:9d:67:bb:90:21:cb:f9:bc:31:ba:13:c7:82:11:
7a:d5:3c:2d:2a:be:cf:bd:c6:e4:af:f0:62:e8:8f:1e:15:2d:
4e:42:e9:6f:2c:e9:02:87:a0:30:de:31:f4:62:91:10:1c:50:
6a:7f:f4:55:bc:6e:c6:d9:6c:b8:40:57:d6:38:bd:82:0a:a8:
e0:f9:8d:a7:d5:7f:95:ef:16:6c:16:e3:0b:e3:93:ec:a0:f3:
99:a2:b4:35:8f:3f:42:13:0c:d1:24:bd:75:e4:3f:8e:ce:71:
66:ca:a9:23:93:15:59:b2:d5:a8:97:b6:83:65:bb:70:7a:5f:
6f:e6:d0:3e:dc:6d:71:d1:2c:80:c4:fb:5c:92:94:cf:12:f9:
48:35:dd:4c:f2:32:a0:57:97:78:7c:5c:58:6c:3b:88:06:91:
33:1d:59:32:48:bd:d8:8d:de:42:c0:62:f3:7e:0f:ac:68:61:
b5:6a:63:af:52:7d:88:ed:c4:34:37:b9:c7:94:2f:f1:64:96:
97:43:c3:85:eb:42:ef:05:89:d7:51:b4:a9:10:11:21:a6:33:
19:78:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:46 2026 by rpki-client