Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/nE0kjz4gu6CKpIoLlyITIPbyA4U.roa
File: nE0kjz4gu6CKpIoLlyITIPbyA4U.roa (raw, json)
Hash identifier: voWdCDPQFGs2drY8xamnvDVEzZpGhMgl+be11o+sgAM=
Subject key identifier: 9C:4D:24:8F:3E:20:BB:A0:8A:A4:8A:0B:97:22:13:20:F6:F2:03:85
Certificate issuer: /CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Certificate serial: 019F2368CE4396EEEB47DEF0619E43AE896A
Authority key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/nE0kjz4gu6CKpIoLlyITIPbyA4U.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201711
IP address blocks: 37.77.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:43:96:ee:eb:47:de:f0:61:9e:43:ae:89:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c4d248f3e20bba08aa48a0b97221320f6f20385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:1d:35:97:2f:70:68:3f:a7:7e:0b:11:5e:
20:f4:33:94:97:fc:07:e0:45:56:25:9e:c6:53:d6:
e4:37:4d:57:db:8d:28:21:39:fd:7e:b7:c3:e5:f3:
bd:f5:19:e4:99:d3:cb:8a:a3:6d:e2:bd:05:36:f8:
1a:8c:4c:14:f6:55:21:ea:18:db:8b:78:11:c6:aa:
f1:01:12:8c:94:a6:a8:6a:c6:06:fb:bd:d6:bd:09:
c0:d0:c7:4c:f2:a2:9a:6f:e1:de:7a:18:b6:16:57:
4a:cd:6f:0d:f8:92:f1:f8:53:bb:d1:89:91:4a:0b:
84:b4:df:6e:39:bf:b4:5d:e2:43:1e:fd:97:38:67:
e6:e4:76:fa:52:27:ae:2d:5a:d8:a4:7c:23:7a:99:
e9:77:53:f0:34:2e:29:56:72:d4:2e:14:f2:99:66:
ba:ff:0e:33:a4:96:d7:37:19:de:de:12:76:d7:ba:
ff:6d:e0:4c:ce:07:90:5e:00:dc:92:5c:4c:1c:a7:
aa:a4:26:b1:fd:2e:a2:d2:ca:c3:9c:3c:8c:20:f6:
b0:8b:87:5f:8d:aa:cb:b8:db:1d:af:bb:05:2c:af:
95:34:58:4d:b0:3e:c3:fb:1c:9d:4f:3c:c7:c4:02:
7b:79:47:60:ac:82:8f:ce:6c:5d:29:38:93:87:04:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:24:8F:3E:20:BB:A0:8A:A4:8A:0B:97:22:13:20:F6:F2:03:85
X509v3 Authority Key Identifier:
keyid:98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/nE0kjz4gu6CKpIoLlyITIPbyA4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.175.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a3:9b:05:cd:5d:38:ab:0b:fb:9a:e0:6c:2d:ce:04:7b:cb:
f9:76:b7:d9:c3:ee:98:e2:cd:74:6b:41:3d:09:49:56:1c:3c:
89:b7:36:ad:63:3b:47:30:a1:9f:27:26:67:33:05:c6:02:17:
47:8a:07:56:71:aa:9c:f1:5d:f8:fa:63:c9:56:5f:35:33:e3:
d8:37:14:65:c4:0b:c4:4c:7b:8f:2b:76:37:02:e7:8b:c5:c0:
ea:7a:b1:47:da:aa:b2:05:a1:6f:f4:42:cf:96:c7:c2:2a:63:
c3:74:de:bf:76:5c:22:e8:4c:65:3d:e5:f5:2c:25:06:e4:f3:
e2:79:cd:63:be:c0:63:03:b9:47:bc:8c:2a:1b:bf:3f:78:65:
fd:bf:e0:b5:91:0e:d0:ad:f6:00:d2:6c:cf:b8:24:68:f2:1b:
80:85:22:60:4a:d1:46:3f:3e:9b:44:bf:a3:39:e1:45:dd:d5:
66:7d:0e:81:fa:fe:de:11:3b:5b:fb:20:d7:91:96:c7:45:fd:
9f:3c:f3:b8:79:14:f2:a4:9a:01:94:cb:2e:34:b9:69:73:2c:
8c:cc:66:a1:db:5e:00:79:c8:2b:d8:88:b1:c5:dc:d1:fa:a9:
fb:bd:44:af:4e:38:a1:70:a9:43:c1:35:08:be:44:26:05:42:
b1:66:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:24:31 2026 by rpki-client