Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaVhzP0NbTj-HZiO02RKiIJUJF0.roa
File: NaVhzP0NbTj-HZiO02RKiIJUJF0.roa (raw, json)
Hash identifier: 5upJd5EaiXSe1NtNjFaZWQWjAfFKOrKacX5AhoQfgb0=
Subject key identifier: 35:A5:61:CC:FD:0D:6D:38:FE:1D:98:8E:D3:64:4A:88:82:54:24:5D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C1E16C5FAEC44A591B33F7CBFC604207A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaVhzP0NbTj-HZiO02RKiIJUJF0.roa
Signing time: Mon 02 Feb 2026 11:22:14 +0000
ROA not before: Mon 02 Feb 2026 11:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 212.38.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:16:c5:fa:ec:44:a5:91:b3:3f:7c:bf:c6:04:20:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 2 11:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35a561ccfd0d6d38fe1d988ed3644a888254245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:f6:a4:4b:a1:62:89:f6:9f:7b:fb:11:18:
a0:1c:43:d9:88:32:bf:06:5a:af:cf:c8:70:09:71:
38:96:47:cb:fe:67:a4:86:db:b6:37:e9:a0:b5:a7:
f2:ae:9f:b1:5b:6e:6e:17:da:0e:29:2a:6b:52:1a:
23:f1:47:df:6d:50:6e:c2:0d:57:11:40:8e:1c:cf:
c4:05:4f:ef:3d:25:63:dc:e4:09:f6:64:4c:24:99:
a5:eb:2f:e8:d8:aa:6a:0b:cf:19:68:97:cf:cd:1f:
6b:84:4b:f2:9e:f5:62:e0:f2:af:f2:50:d1:a0:3c:
a6:f6:7b:b3:7c:44:57:80:bd:49:44:97:5b:7a:34:
ed:ea:02:0c:4d:bb:ed:e2:87:e4:24:cf:41:ee:ab:
ac:16:0e:2f:19:dd:05:2e:7b:84:8e:64:f4:38:ba:
b2:07:5d:a4:c9:f0:9d:3b:23:de:f7:18:47:55:3b:
ab:c9:eb:2c:03:b7:d9:30:56:8d:57:55:0e:0f:70:
b0:75:0a:f0:d0:9f:26:e9:a3:34:af:1a:ec:13:27:
b6:b0:6a:06:b7:ec:4a:15:b9:01:e6:5a:2e:4d:e1:
8b:57:e4:d5:11:ac:b1:1b:00:a1:27:fe:97:9e:88:
b4:4b:ab:c9:36:6e:cc:c8:7a:34:1b:5f:92:74:4b:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:61:CC:FD:0D:6D:38:FE:1D:98:8E:D3:64:4A:88:82:54:24:5D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaVhzP0NbTj-HZiO02RKiIJUJF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.79.0/24
Signature Algorithm: sha256WithRSAEncryption
32:09:52:d9:c4:7b:6b:8a:58:8f:a4:c1:8a:19:32:05:d2:0b:
45:49:ff:26:7c:00:dd:6e:e7:7f:3f:ad:53:ff:e8:22:bd:e6:
4d:ff:f9:ac:8a:3c:08:30:0b:24:d3:47:c1:6a:8c:2d:2b:64:
f3:cc:2b:be:64:4b:4a:ea:cf:c5:75:f4:25:aa:d1:8f:8a:90:
0a:c0:69:fe:c0:f2:a7:41:97:47:bc:e4:c2:ae:8b:85:bb:54:
8a:af:0a:78:a8:77:c0:36:75:0f:b7:bd:3b:cb:75:65:da:89:
02:4e:33:f6:90:1f:84:12:04:5c:a2:66:99:0a:0e:19:5c:69:
d1:dc:e0:7f:f0:21:be:07:b4:1e:49:7b:cb:8c:f8:79:5c:cc:
0c:47:5f:c7:1d:18:d9:fe:15:20:4c:dd:03:a6:24:80:3f:ef:
28:f2:7c:03:79:da:ed:8e:e8:f1:88:cd:aa:9d:5b:4a:e7:5a:
88:7c:68:41:04:a7:aa:e4:44:c4:d4:e2:2c:52:21:a7:42:fb:
4a:9d:2d:21:cd:11:a3:9a:be:b7:f6:e5:9a:3a:ea:fd:a2:df:
c8:c0:c7:6b:1a:68:b2:2f:e2:92:28:33:90:85:14:aa:44:5d:
d8:03:39:84:70:9b:d5:27:92:db:09:30:d0:f7:49:49:2b:60:
2d:b8:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:06:26 2026 by rpki-client