Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/NwJicw-oNTpUA4v64y45-zeOf4g.roa
File: NwJicw-oNTpUA4v64y45-zeOf4g.roa (raw, json)
Hash identifier: INZDhCKr9gd0n290T2UKiTgj0PQTfi5Y3hHK5PYeBA0=
Subject key identifier: 37:02:62:73:0F:A8:35:3A:54:03:8B:FA:E3:2E:39:FB:37:8E:7F:88
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F2368FE44940537515AA37534F27B4321
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/NwJicw-oNTpUA4v64y45-zeOf4g.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36384
IP address blocks: 89.207.224.0/24 maxlen: 24
89.207.229.0/24 maxlen: 24
2a00:79e1::/32 maxlen: 32
2a00:79e1:800::/42 maxlen: 42
2a00:79e1:abc::/46 maxlen: 46
2a00:79e1:f00::/40 maxlen: 40
2a00:79e1:f000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:44:94:05:37:51:5a:a3:75:34:f2:7b:43:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=370262730fa8353a54038bfae32e39fb378e7f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:7f:35:a9:ea:77:00:9b:7e:d7:be:89:f7:
15:40:9a:56:90:b0:6a:5f:fe:8e:f7:05:fd:0f:41:
5a:37:0e:46:bc:5b:a0:c1:af:da:f3:9f:b7:46:f6:
94:3e:33:4f:1b:da:40:d2:d8:98:72:c2:04:ae:dd:
91:f1:eb:df:11:61:09:05:12:fc:fb:21:a4:7a:ea:
2f:45:ef:0f:fb:b2:1f:7b:15:5a:56:3a:31:fc:fb:
e4:ab:67:4a:de:44:95:05:8a:98:22:96:c6:ee:8b:
00:d6:d0:57:1d:13:43:ee:c4:7f:b9:7c:d3:cd:49:
56:46:70:42:f0:3b:fd:11:2a:ca:1d:78:b6:ee:b2:
f5:8b:74:ae:bc:25:f3:89:55:45:2c:0c:9f:6d:d1:
b6:4d:18:25:59:72:ff:80:9a:52:8f:91:61:ee:4d:
c9:0e:e1:f3:9a:fc:2d:8a:e4:83:bc:68:6d:50:67:
ff:fb:af:60:71:5a:2b:81:13:da:83:05:38:7d:81:
b5:80:c9:5e:26:12:da:f4:7e:95:6e:00:6f:eb:a6:
d0:72:19:6d:e3:4c:f8:72:68:05:4b:bd:cb:ff:42:
96:a6:76:8c:89:2e:a7:75:f6:ee:48:0a:16:a0:30:
97:68:46:6b:a8:cf:fa:9c:79:72:11:06:73:7c:44:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:62:73:0F:A8:35:3A:54:03:8B:FA:E3:2E:39:FB:37:8E:7F:88
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/NwJicw-oNTpUA4v64y45-zeOf4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.224.0/24
89.207.229.0/24
IPv6:
2a00:79e1::/32
Signature Algorithm: sha256WithRSAEncryption
45:26:46:32:3d:4b:52:d4:f0:62:b5:84:21:9b:e1:e4:d2:fd:
68:8d:21:de:69:a1:c1:a4:f7:2b:80:74:81:8d:a8:1a:99:1a:
17:77:13:76:98:93:c1:1e:fe:26:84:7b:b0:ae:c2:e6:ff:45:
98:f0:ae:e5:80:3b:d1:a8:30:ed:2a:6d:ac:67:9d:0f:81:22:
1f:78:a1:2a:7b:31:62:bf:f9:47:94:e9:98:31:c5:5d:f3:85:
e7:9d:9e:bf:bc:23:61:6b:7a:42:51:9c:20:84:cf:95:5f:fb:
13:e7:7d:30:4f:d4:27:a3:3a:ff:d7:ef:50:cf:c3:4f:9d:40:
b0:5c:54:b3:1a:4d:68:59:1c:f1:b8:c4:3a:b9:43:7b:32:f3:
47:09:25:6f:7d:de:b7:4f:a6:a0:84:36:99:5b:d5:cb:7a:06:
95:5b:cb:18:50:6b:bb:c9:f4:94:f6:5a:df:3f:97:d2:9d:34:
af:65:96:5e:c2:79:ca:e1:2f:07:a8:59:8b:1c:07:8a:e9:be:
f2:11:b3:94:4b:78:41:1b:a0:63:ca:51:fa:e4:c3:ef:46:89:
fa:a0:1b:7c:03:ab:a4:2e:94:1e:37:c6:51:50:c1:6f:1e:bf:
f2:8a:48:62:39:44:32:e0:fc:bf:76:9d:8c:62:49:cc:2f:42:
df:3a:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:35 2026 by rpki-client