Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/NnRgG3M3rXv_XQgf59QH0VyIcXU.roa
File: NnRgG3M3rXv_XQgf59QH0VyIcXU.roa (raw, json)
Hash identifier: 2xaRMkACrNyKiEj55shU5SHsa1yo7g7GQep768NzJv0=
Subject key identifier: 36:74:60:1B:73:37:AD:7B:FF:5D:08:1F:E7:D4:07:D1:5C:88:71:75
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A1352664F0EDBFCBAF93FE9C3B768CD017
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/NnRgG3M3rXv_XQgf59QH0VyIcXU.roa
Signing time: Tue 13 Oct 2026 12:04:31 +0000
ROA not before: Tue 13 Oct 2026 12:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5552
IP address blocks: 193.164.96.0/19 maxlen: 19
212.44.0.0/18 maxlen: 18
2a02:2b08::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:26:64:f0:ed:bf:cb:af:93:fe:9c:3b:76:8c:d0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Oct 13 12:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3674601b7337ad7bff5d081fe7d407d15c887175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:42:c2:d1:1e:ba:32:d0:af:c9:23:13:1e:
8f:d7:fd:58:47:a5:a5:5d:e6:8d:dc:7f:7f:72:44:
b4:2d:93:2e:0e:89:04:34:7c:97:09:2c:95:d3:d8:
4b:66:2f:96:ab:3f:54:28:d3:0e:91:e4:c1:89:c5:
09:a7:54:bc:44:f9:01:d7:79:58:ec:c6:9c:ba:07:
5e:32:8f:82:8c:30:1e:64:1b:bc:67:c7:e5:eb:3c:
41:b1:66:86:b3:a4:08:5b:27:ed:63:d0:18:79:67:
0c:be:f8:60:80:82:ca:1d:73:12:81:d3:45:4f:ef:
0c:44:77:2e:f3:d0:ad:f2:90:b8:ad:2d:72:a7:ce:
40:b3:c8:27:6a:4e:67:8d:58:2d:a8:80:3d:fb:32:
ad:b1:43:ad:dc:be:2b:63:c7:ee:70:3d:9c:08:b6:
b3:77:86:bb:99:b2:5f:83:5d:dd:5e:ef:c5:ea:76:
af:06:4f:0c:a4:18:c4:37:76:91:73:bd:c9:45:68:
d7:b8:42:42:cc:2e:3e:96:28:7c:ec:6c:1e:03:23:
07:a5:b5:bf:d0:e3:10:34:f7:22:3b:8b:c2:bb:82:
ec:f9:cc:9f:7c:25:b2:b4:23:4d:9f:b6:a8:00:b7:
a0:8d:3e:6e:d0:df:e3:52:b4:a7:b0:0b:fd:c1:be:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:60:1B:73:37:AD:7B:FF:5D:08:1F:E7:D4:07:D1:5C:88:71:75
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/NnRgG3M3rXv_XQgf59QH0VyIcXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.96.0/19
212.44.0.0/18
IPv6:
2a02:2b08::/32
Signature Algorithm: sha256WithRSAEncryption
7c:b2:6b:55:63:5e:cf:02:43:64:ee:2c:e3:3b:b1:96:79:30:
70:d0:10:e3:42:23:9f:d2:4a:49:4a:0e:dd:2c:b9:13:32:00:
86:dd:29:d3:e9:8f:62:09:bc:7a:22:18:11:63:49:b6:f0:b5:
ed:d4:59:31:93:95:c9:54:a6:cf:d1:57:cc:b1:ef:97:1c:91:
42:a7:89:d1:4f:22:17:fa:04:a2:ac:94:b6:88:2a:c4:9e:e7:
8e:38:80:6a:a4:a1:5e:82:d0:b4:91:7e:00:71:8f:fd:25:15:
7f:ce:ce:a9:65:6e:26:63:00:b7:a6:02:34:9c:d3:c8:03:c4:
a4:4d:28:2e:7d:70:a2:b2:6e:dd:01:64:dc:d9:fa:91:95:4c:
4c:fa:85:73:d4:bb:c9:75:f9:08:6f:70:c7:3f:41:9e:90:80:
51:9a:3e:8e:25:b0:9b:c7:77:26:d0:7a:35:91:bd:eb:f5:05:
9b:ab:9f:1c:a9:a0:71:b1:b7:1f:47:2e:23:2c:d1:7e:0d:5a:
f3:6a:a6:8d:bd:45:e9:1c:34:2d:00:36:dd:e2:68:e8:fe:67:
bb:44:7c:10:84:80:12:f4:af:a2:14:02:7a:6f:e7:4f:8d:1b:
ac:24:46:d0:e8:87:b8:f6:35:1b:59:80:3d:16:5b:f1:8e:96:
08:83:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:24:33 2026 by rpki-client