Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/nuiGDtHRIkAbOjGaVfw8g7_xpg0.roa
File: nuiGDtHRIkAbOjGaVfw8g7_xpg0.roa (raw, json)
Hash identifier: CW+HwbjsjwctAktPqMnVZ/gVMSWTAGQF29EXWU/D5UY=
Subject key identifier: 9E:E8:86:0E:D1:D1:22:40:1B:3A:31:9A:55:FC:3C:83:BF:F1:A6:0D
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A1640849435168C99E76EC45455CEEB1A6
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/nuiGDtHRIkAbOjGaVfw8g7_xpg0.roa
Signing time: Thu 22 Oct 2026 14:33:47 +0000
ROA not before: Thu 22 Oct 2026 14:33:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.222.92.0/22 maxlen: 24
178.210.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:08:49:43:51:68:c9:9e:76:ec:45:45:5c:ee:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 22 14:33:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ee8860ed1d122401b3a319a55fc3c83bff1a60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:4a:a8:28:18:32:95:a5:10:03:5d:93:ac:
2e:2c:cc:1b:12:42:91:f1:bd:2a:a3:05:8d:63:e8:
b4:b7:3a:98:6d:80:d1:f2:d7:e3:4c:fa:5d:87:fd:
66:cf:bf:30:cd:6c:ac:49:9b:88:61:23:58:65:6d:
8e:41:d1:a4:1c:4b:67:b7:5c:12:51:63:8b:a7:cd:
06:95:02:9c:ab:68:41:0f:1c:9b:90:16:cc:8d:12:
33:41:34:e0:75:b5:59:dd:07:45:9b:71:d8:58:0e:
7f:43:f8:99:97:10:ab:aa:a0:ed:e9:22:44:e8:72:
35:90:1c:f2:33:f0:35:30:06:9b:dd:93:8a:18:c0:
82:12:81:22:e0:f0:f6:02:f4:0f:cf:89:f7:df:c8:
7a:47:59:16:26:f5:9f:11:d4:1a:ef:19:c8:2c:58:
5f:1c:bb:f4:35:d4:00:52:6a:a1:75:36:01:31:20:
84:83:e5:0c:a2:22:d7:56:17:39:08:85:48:a8:63:
28:56:86:ba:54:d2:17:43:67:f6:d5:72:c8:c1:ef:
d3:2c:4f:0a:74:09:44:c7:cd:b8:0a:2b:b4:c4:d0:
10:b7:13:da:d3:bb:8b:d8:cc:d6:e3:51:0c:6d:1d:
f1:88:eb:b8:98:3d:40:56:87:e0:a0:d6:e4:3f:20:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E8:86:0E:D1:D1:22:40:1B:3A:31:9A:55:FC:3C:83:BF:F1:A6:0D
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/nuiGDtHRIkAbOjGaVfw8g7_xpg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.92.0/22
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:36:9e:d8:6d:3b:27:de:96:b6:5d:0e:a7:21:6a:44:84:41:
63:a5:29:28:1b:c5:2e:dc:4c:98:a2:d5:2e:09:41:ca:59:c3:
ce:dd:d4:d5:66:9c:64:c0:d7:a5:51:e1:88:ce:5f:d6:db:0e:
f0:a7:14:4a:ce:ca:32:f1:a1:68:44:d0:30:2a:6c:03:ac:18:
08:1c:aa:3a:63:24:3d:f7:be:65:e7:13:63:30:cd:2f:21:92:
1a:1d:1b:ef:3f:0c:7f:8d:85:d4:71:7e:58:20:6f:a2:6e:62:
08:3f:49:22:ee:84:a6:cd:44:44:a3:50:6e:84:4c:cf:f9:fd:
ff:34:b6:ac:e3:79:6b:c5:fa:dc:42:0f:91:c1:d3:39:ee:17:
e4:8f:46:30:9a:87:40:e0:d3:bc:53:5d:53:cb:f4:84:72:55:
31:b2:0d:17:e9:51:5e:59:5f:f2:12:46:ef:61:c8:8e:4f:49:
d9:dd:de:76:87:47:e1:c5:40:e7:45:9d:ca:b5:fb:4b:b8:74:
95:65:16:ea:b3:5f:d3:92:24:b2:8b:f5:10:b8:eb:ad:63:03:
2c:35:fa:e8:e4:e5:2e:ee:b5:75:39:ee:da:15:8d:51:2c:b5:
2a:cd:c0:bf:7e:a0:08:dd:11:28:08:f4:d1:3b:97:72:5b:dc:
6b:f0:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:28 2026 by rpki-client