Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa
File: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (raw, json)
Hash identifier: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=
Subject key identifier: 9E:4F:71:51:56:EB:42:4D:37:4D:AE:64:04:4B:70:05:1B:31:8F:7A
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F236888C9D091EAE8ED21BDF45B38FDF7
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 91.218.176.0/22 maxlen: 24
91.232.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:c9:d0:91:ea:e8:ed:21:bd:f4:5b:38:fd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e4f715156eb424d374dae64044b70051b318f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:f2:6e:c5:62:ac:30:02:b3:fa:6f:b7:99:
7b:96:a1:d7:f3:17:30:34:a2:08:10:45:12:a4:5a:
a7:0a:6d:51:0f:8d:e4:e3:10:90:9a:8c:07:72:55:
85:26:56:10:50:8c:02:90:e1:d6:73:81:4b:88:5c:
c7:a1:1a:54:e1:78:39:39:d6:00:df:d1:16:11:6a:
fb:8c:3d:1a:42:db:23:3e:25:9d:a1:70:66:5c:9c:
58:32:f4:65:37:20:a2:20:2e:a2:78:52:0f:c2:25:
5f:18:4a:28:ce:63:8d:84:e6:a7:10:93:f4:17:09:
07:fa:cd:39:7a:4c:46:65:ac:de:44:24:32:85:7f:
81:ea:51:39:af:86:95:26:2e:45:f7:00:42:29:fa:
b0:47:73:61:43:d8:91:3e:3b:40:ed:43:76:16:85:
2e:f3:6f:70:bb:0e:fa:22:6e:b7:1f:ad:63:34:6c:
7d:86:80:b5:38:76:cd:4e:6e:7c:cc:18:46:16:d4:
7a:a1:62:3c:9a:b9:bf:ef:4e:83:96:ca:7d:82:1f:
26:a0:59:c7:3d:05:85:ac:08:46:d8:60:37:39:24:
df:47:d6:3f:53:1c:94:b3:b0:da:e0:48:52:d6:9b:
a3:1f:9e:13:df:f4:fc:c4:a7:76:50:a5:42:39:08:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:71:51:56:EB:42:4D:37:4D:AE:64:04:4B:70:05:1B:31:8F:7A
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ca:a2:d4:72:d2:27:fc:0f:58:89:01:a4:a2:88:d0:2d:5c:
cd:1e:48:ef:1a:46:b1:21:32:9e:58:57:74:82:3c:16:40:de:
ec:61:98:49:ba:59:84:96:eb:e1:10:8b:20:cf:38:dc:f6:5f:
60:81:fc:1a:b7:92:c6:45:72:83:1b:36:be:51:74:5c:5e:06:
30:41:5d:a9:24:ba:7c:3a:be:49:58:ee:5e:d2:b2:d1:80:97:
a0:a6:a7:c6:f9:8b:5c:d2:7f:81:a4:d0:c8:23:86:1f:3d:54:
48:cf:ff:44:70:4b:2b:a3:65:46:e6:e9:c8:0b:bc:a5:bd:d1:
ef:d2:90:b2:56:82:d5:49:13:a7:f0:7d:2f:2a:85:78:ea:c9:
87:c7:49:8e:f4:fa:23:11:21:3c:f5:16:52:f0:74:5d:c2:db:
64:eb:24:2f:55:eb:3a:aa:a2:45:7d:bb:34:5b:31:c8:e9:5b:
f3:82:bc:c0:0f:6e:a5:db:96:05:da:82:ef:ce:a8:38:c1:79:
a0:de:59:3d:ad:06:24:65:df:ea:2f:80:0b:dd:f0:e1:ca:d1:
dc:fc:00:dd:bd:16:38:2f:7e:c4:16:9d:fd:c8:9a:d5:09:73:
25:ed:5e:5d:87:25:a3:4a:8d:99:ca:47:83:ea:41:15:9f:1f:
b9:04:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:29 2026 by rpki-client