Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/NGoPAy1-QJd49yaBDPx999XgbmM.roa
File: NGoPAy1-QJd49yaBDPx999XgbmM.roa (raw, json)
Hash identifier: a+VaOfe1kvInMqoRMzhgYtuqQBhDJIAnRkJQ5n71Bps=
Subject key identifier: 34:6A:0F:03:2D:7E:40:97:78:F7:26:81:0C:FC:7D:F7:D5:E0:6E:63
Certificate issuer: /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial: 019FCD8BCCE1171428E2E671FF238008E4A7
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/NGoPAy1-QJd49yaBDPx999XgbmM.roa
Signing time: Tue 04 Aug 2026 16:11:58 +0000
ROA not before: Tue 04 Aug 2026 16:11:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211496
IP address blocks: 185.99.22.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:8b:cc:e1:17:14:28:e2:e6:71:ff:23:80:08:e4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Validity
Not Before: Aug 4 16:11:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346a0f032d7e409778f726810cfc7df7d5e06e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:36:52:f4:11:78:1f:8c:ed:26:33:13:5e:
2b:71:be:49:09:e8:43:a6:5e:25:34:d3:70:bf:81:
42:90:ab:6f:1c:83:f4:f2:2e:3d:f2:b4:36:28:46:
56:f6:1b:6d:7d:c6:9a:d9:e9:c9:6d:40:08:e1:8a:
c7:fb:25:b5:35:01:64:b7:72:8b:73:de:f0:a6:e7:
4c:07:12:3f:4b:80:18:e5:26:4f:ee:44:57:52:35:
74:a8:2a:1d:de:b4:b6:0a:2e:c2:11:e3:3c:6e:38:
24:0f:85:d6:47:63:b0:2b:1a:b5:86:e6:00:92:c4:
33:ad:e4:cd:61:ce:03:cb:f8:f1:71:66:75:03:a2:
07:c9:77:d8:51:cd:c3:94:91:cf:9d:2e:66:34:78:
bb:3f:54:0e:88:1e:63:51:50:39:11:c3:2e:00:84:
c3:8f:81:50:06:19:28:06:87:63:31:eb:c7:cd:4e:
19:5d:b3:a4:ee:04:44:e7:2d:8a:11:cd:c4:e2:1c:
82:6e:5c:80:7b:48:1d:94:05:c8:54:54:41:d7:fe:
7a:69:b4:b4:2b:86:4f:ca:45:56:4f:1e:fd:5a:5e:
30:74:94:d8:7d:a0:3b:51:e1:6a:6c:5c:1c:5e:d3:
5f:be:f8:64:ff:62:3f:6d:ad:06:54:34:dc:a0:0d:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:0F:03:2D:7E:40:97:78:F7:26:81:0C:FC:7D:F7:D5:E0:6E:63
X509v3 Authority Key Identifier:
keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/NGoPAy1-QJd49yaBDPx999XgbmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:de:f5:2e:1e:a4:f1:44:43:b0:e4:1a:78:ae:e9:d4:56:64:
15:8f:b9:1c:9e:fe:83:76:52:69:e8:1c:88:04:15:1c:be:18:
9f:b6:c3:a4:88:98:73:de:07:07:cb:9e:fc:3a:72:15:6d:b6:
a0:80:7f:89:20:57:1a:21:d1:88:65:dd:ba:76:a7:d3:65:ff:
c4:8c:ad:5d:0f:94:a1:d6:50:25:c9:0d:8f:aa:96:22:32:45:
d7:e3:d9:f1:a6:31:50:c9:9e:b4:fa:b6:d1:ee:9e:d8:41:7c:
ff:c9:2e:a8:b3:4b:e8:5c:a8:28:4e:a4:fc:3c:14:ac:73:91:
30:93:71:85:c5:d6:25:6d:6e:cb:33:81:47:ef:0d:dd:4e:ae:
bc:cb:71:56:21:56:9e:c5:71:3a:06:a4:82:fe:0a:00:a7:bd:
65:e7:58:39:4f:57:62:f3:fc:5a:f4:af:b0:0b:79:23:e8:6a:
be:c7:74:55:e0:8c:50:dc:ce:75:3d:ae:b5:8c:74:f7:61:45:
47:ea:c3:59:82:f3:b2:f7:b2:06:9f:87:dc:28:07:59:a3:04:
75:ae:5f:b9:84:bf:bc:37:05:2f:0d:29:0b:25:27:30:96:c3:
ad:07:d5:75:9d:1e:f6:71:3c:4a:6c:22:1f:cb:d5:c6:e5:1b:
5f:57:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:40:45 2026 by rpki-client