Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/nGziJ4JPpx9Cbq4yitFCOBS9t6E.roa
File: nGziJ4JPpx9Cbq4yitFCOBS9t6E.roa (raw, json)
Hash identifier: tHfu57V4VKiKHp0XzDwqW8mvWljSgux9wLYlu3RCeEE=
Subject key identifier: 9C:6C:E2:27:82:4F:A7:1F:42:6E:AE:32:8A:D1:42:38:14:BD:B7:A1
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FD07B6594FDB16C97DC383B731DABD962
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/nGziJ4JPpx9Cbq4yitFCOBS9t6E.roa
Signing time: Wed 05 Aug 2026 05:52:55 +0000
ROA not before: Wed 05 Aug 2026 05:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202616
IP address blocks: 194.0.72.0/23 maxlen: 23
195.69.173.0/24 maxlen: 24
213.255.218.0/23 maxlen: 23
217.175.198.0/24 maxlen: 24
217.194.146.0/24 maxlen: 24
217.194.149.0/24 maxlen: 24
217.194.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:7b:65:94:fd:b1:6c:97:dc:38:3b:73:1d:ab:d9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 5 05:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c6ce227824fa71f426eae328ad1423814bdb7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:e1:1b:0c:af:6c:0a:39:fd:c4:e1:a2:12:
3e:9e:8c:00:2b:aa:bd:75:a8:7b:87:10:7a:bb:fa:
5e:b8:27:ce:48:1d:69:81:ba:6a:b9:7a:3f:a1:a2:
d2:2e:c2:e0:8e:14:b6:f0:88:dd:da:b8:1b:1e:30:
4b:d0:12:ab:1c:2f:6f:62:7b:21:aa:39:47:5c:b9:
47:2e:28:1b:1b:da:2b:0b:6b:87:36:a0:3b:5f:99:
ca:e5:38:39:a1:3e:cd:42:ad:bc:f0:d3:7b:b7:ff:
ee:9d:58:34:94:c1:db:75:08:22:72:c9:b2:d7:fd:
48:87:45:70:b5:ec:04:38:ee:71:d7:8d:fc:15:87:
b2:70:e1:ff:3f:5b:c3:f7:cd:ad:93:1b:73:48:30:
4a:6c:39:48:d3:cf:8b:1b:d3:28:72:19:4f:4f:a3:
45:00:8c:f2:ff:30:74:3f:74:a7:22:a0:50:36:cc:
c0:2e:f4:d9:85:95:ae:b0:d5:d0:94:c6:25:d3:eb:
39:e9:26:8e:1c:a5:49:52:72:c3:84:0c:fd:42:af:
d5:a3:af:f3:51:24:d1:90:c3:b1:f6:61:c5:b0:28:
a5:2a:24:67:2f:a4:28:5e:05:55:13:d1:4e:20:9a:
ff:4a:db:14:c5:fe:41:56:e7:f8:e5:b4:99:c6:00:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:E2:27:82:4F:A7:1F:42:6E:AE:32:8A:D1:42:38:14:BD:B7:A1
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/nGziJ4JPpx9Cbq4yitFCOBS9t6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.72.0/23
195.69.173.0/24
213.255.218.0/23
217.175.198.0/24
217.194.146.0/24
217.194.149.0/24
217.194.154.0/23
Signature Algorithm: sha256WithRSAEncryption
e9:da:48:84:83:b5:f5:dd:74:c0:b4:66:cb:34:ec:03:60:43:
12:5a:a5:a1:23:a5:09:45:4d:8a:d3:a4:af:b7:8f:7e:bb:50:
e3:97:33:76:2b:4c:84:80:b5:14:1f:08:a7:36:bd:52:8c:7a:
58:ff:6c:3b:19:eb:22:f2:1e:18:38:2e:d8:dd:3e:2c:e8:9d:
be:78:08:0f:95:0f:b4:e3:38:11:8b:4f:cd:c4:f1:ab:6b:8e:
60:35:11:c5:83:78:2c:47:c1:46:43:2b:60:7f:82:e2:ed:37:
ef:d0:bb:81:1a:93:f6:bf:95:01:a6:56:d1:c0:dd:ff:ba:2e:
4d:09:03:44:7c:14:ab:21:08:52:8a:db:83:38:ac:3d:98:2d:
e7:31:05:bb:b4:04:e5:b4:26:23:11:b2:1a:3b:47:47:bc:d3:
c5:90:a2:41:fb:58:a5:ff:d2:42:7d:ec:28:3b:f9:56:06:42:
41:1e:61:3a:9a:86:3e:76:88:52:5d:19:ee:73:0a:1c:31:80:
1f:2c:53:9f:32:4e:c9:2c:04:d4:02:ab:15:1c:2a:30:32:74:
8c:5b:00:db:06:0c:93:a5:98:8c:02:d8:6e:72:50:f4:57:5e:
52:57:fc:63:41:3f:97:56:13:c8:89:c4:dd:cd:74:79:3f:3e:
5e:3b:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:45 2026 by rpki-client