Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/NebZoPqdLSarw_LOrOt4TbySV04.roa
File: NebZoPqdLSarw_LOrOt4TbySV04.roa (raw, json)
Hash identifier: 4jiaHkMUDXqT2iEA3XDsRGZIczsGRScWHo/dCoFYFCI=
Subject key identifier: 35:E6:D9:A0:FA:9D:2D:26:AB:C3:F2:CE:AC:EB:78:4D:BC:92:57:4E
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 01A0D8E7A36EF06F6E483D164F74542E7CBD
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/NebZoPqdLSarw_LOrOt4TbySV04.roa
Signing time: Fri 25 Sep 2026 14:10:54 +0000
ROA not before: Fri 25 Sep 2026 14:10:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36776
IP address blocks: 212.187.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:e7:a3:6e:f0:6f:6e:48:3d:16:4f:74:54:2e:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Sep 25 14:10:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35e6d9a0fa9d2d26abc3f2ceaceb784dbc92574e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:5a:20:8a:88:a2:cb:ea:fb:9b:b3:af:25:
70:f4:12:0f:9d:02:0b:07:3a:70:ed:91:4a:41:d3:
8c:f5:79:b8:88:2e:14:a2:8c:15:84:8a:a2:38:46:
0b:d4:6b:54:48:80:ba:99:80:13:26:95:86:ec:dd:
a8:8d:46:a1:d0:cd:a8:6b:ff:12:fd:f6:63:d5:4b:
6e:b5:09:1c:f6:8f:77:ec:b8:6a:69:69:b4:c3:eb:
42:85:0a:2e:e9:4c:97:d7:3a:5f:38:96:97:81:26:
be:b4:51:4c:0e:0c:21:43:fa:54:0f:65:d6:58:20:
db:f4:48:61:66:ae:52:23:5c:ef:68:70:e2:80:85:
f6:66:f3:e7:21:30:dc:3f:bf:3e:2d:5e:13:ae:52:
e7:4f:8b:6b:07:8f:01:f4:a4:4d:dc:ca:7b:9b:76:
b2:fd:13:a4:19:76:3b:33:eb:b7:84:87:95:4a:83:
f6:2f:82:f6:aa:45:49:e2:d8:78:6a:a5:be:cd:c2:
00:32:31:ab:79:99:7a:37:20:2c:7f:11:66:2e:76:
3d:b2:b1:f8:b0:71:a2:36:bb:3c:d0:e6:7a:e2:03:
8c:df:9c:ea:32:2a:ab:66:6e:a1:f5:78:ca:c9:84:
b6:55:70:3a:34:e9:a6:12:c7:72:d5:39:ca:24:96:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:D9:A0:FA:9D:2D:26:AB:C3:F2:CE:AC:EB:78:4D:BC:92:57:4E
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/NebZoPqdLSarw_LOrOt4TbySV04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.187.211.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:63:03:46:98:cb:c5:4b:22:e0:d2:da:bc:4f:29:7b:95:b3:
af:66:26:3d:72:90:24:81:15:e5:dd:d3:3d:f5:81:90:50:4a:
77:48:97:43:e9:5e:b8:63:fc:72:a7:e6:47:64:05:68:59:39:
3a:b5:50:79:22:8d:72:c6:4c:ab:e0:b7:30:1e:ec:15:c2:d8:
51:08:31:3b:ef:5b:e6:61:3a:ec:df:72:63:cb:03:f9:d3:66:
b6:91:75:c9:d4:84:0d:2e:41:02:81:d0:67:8a:02:e6:de:98:
46:20:0b:5f:04:4f:25:2e:aa:5d:9f:4e:48:c8:d7:a5:b9:25:
bf:11:d0:aa:58:ef:91:27:56:26:5f:c3:f1:47:ab:fa:3a:52:
16:79:66:21:09:c8:3f:54:41:1d:c4:ea:a3:89:ec:d9:50:2c:
9e:08:95:22:b4:a3:3a:43:39:0c:cc:f4:da:60:65:bc:e7:2a:
32:c1:3b:8e:c6:d6:3e:3f:4c:62:d8:89:0b:bb:80:c2:a5:ab:
74:45:55:e7:fe:41:23:62:02:16:bb:61:6d:b7:4a:99:a0:ec:
9c:00:ed:29:b4:5d:9d:bb:55:09:38:ba:0a:04:97:91:ab:50:
01:bf:21:6c:8f:97:2e:8b:15:74:83:b1:55:c8:be:39:ed:43:
90:09:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:56 2026 by rpki-client