Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/NsNcJKwraZtwMSEz_TUgSceIE8U.roa
File: NsNcJKwraZtwMSEz_TUgSceIE8U.roa (raw, json)
Hash identifier: DUS5cdKTRr1YlPMQatFq6XwfO0uPHkerNfO9NxoRktc=
Subject key identifier: 36:C3:5C:24:AC:2B:69:9B:70:31:21:33:FD:35:20:49:C7:88:13:C5
Certificate issuer: /CN=a6d7341ba6ab14b25c8447a8ed261def1f0d2f37
Certificate serial: 019F2368F9423667B49179BEF8D5F267625B
Authority key identifier: A6:D7:34:1B:A6:AB:14:B2:5C:84:47:A8:ED:26:1D:EF:1F:0D:2F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/NsNcJKwraZtwMSEz_TUgSceIE8U.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51925
IP address blocks: 91.220.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f9:42:36:67:b4:91:79:be:f8:d5:f2:67:62:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d7341ba6ab14b25c8447a8ed261def1f0d2f37
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36c35c24ac2b699b70312133fd352049c78813c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:98:e4:15:3a:03:73:9d:57:ef:1d:e4:f0:
e4:ac:20:4c:d1:7f:09:81:f0:44:65:0f:58:aa:fc:
fa:c6:f9:de:39:53:24:e8:56:a4:ad:93:50:ca:f7:
ba:b7:11:1c:29:4d:1d:00:3a:df:2c:fc:13:b4:64:
f8:7b:93:a6:34:35:84:4a:2b:a6:eb:20:a9:24:9a:
d1:84:d9:92:e5:63:a7:b7:02:c4:f2:5a:8a:80:cd:
ec:de:74:45:0c:0b:ae:9e:32:c5:50:2e:8c:18:cc:
db:99:82:98:0b:28:6e:f7:14:c2:de:37:b7:18:74:
69:70:fc:60:33:b8:69:1e:c8:f1:7e:e6:91:65:cd:
cb:31:6e:1f:58:c7:29:ae:bc:73:7c:8d:cf:b8:cb:
7c:7b:f3:c4:55:52:b1:b9:73:06:06:ae:6f:73:42:
c7:bf:93:91:9e:e1:d2:2b:d1:d1:15:95:08:9b:f9:
c2:83:89:bb:97:1f:d9:5d:2d:32:88:aa:86:09:0b:
1d:fd:07:35:7b:2e:ec:2f:33:76:a8:0d:2b:a9:79:
32:bc:d7:ea:7d:af:96:cc:16:b8:27:05:9d:69:01:
d6:ef:a4:2c:f9:b5:e0:a0:21:81:ab:32:f6:11:5b:
71:58:6b:51:f8:de:d2:57:f0:d9:ed:c8:55:7f:b8:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:5C:24:AC:2B:69:9B:70:31:21:33:FD:35:20:49:C7:88:13:C5
X509v3 Authority Key Identifier:
keyid:A6:D7:34:1B:A6:AB:14:B2:5C:84:47:A8:ED:26:1D:EF:1F:0D:2F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/NsNcJKwraZtwMSEz_TUgSceIE8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.189.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c4:98:d9:89:49:bc:f7:81:6b:60:5a:8f:b1:46:23:17:14:
15:df:f3:65:d5:14:4e:e8:8f:2c:b9:d4:8e:b1:08:74:c0:18:
ef:57:c0:43:ea:b7:fe:7a:d6:32:c2:b1:7c:92:7e:ed:09:be:
80:82:ab:ce:5c:5c:ac:12:6c:7d:ef:ca:50:54:2f:78:50:85:
32:80:3d:ff:24:8a:bc:13:1d:5a:b7:63:1c:12:16:29:ff:38:
b3:74:3c:73:16:47:8c:1c:87:8d:34:51:50:85:60:1b:3a:ab:
56:26:21:e7:95:68:1b:54:af:11:0b:b3:1c:3d:d2:8a:09:2f:
0b:77:46:5b:0d:21:f2:94:38:b0:0a:e4:3c:67:7c:5b:30:81:
5e:0e:73:25:63:be:e7:45:87:f0:b0:fd:9b:37:b4:42:d0:eb:
ba:66:b2:77:5b:cf:9c:49:d2:06:9a:a0:6b:90:30:8a:92:9a:
c5:05:d9:12:6c:44:f3:13:db:6e:d3:38:07:c0:f1:0a:f0:fc:
a9:c9:88:09:bd:31:52:4b:69:44:99:97:86:24:78:e8:c5:9f:
b6:d9:0c:da:b3:ab:6a:ee:e2:4f:67:45:63:56:d6:2f:79:3f:
4b:63:65:a5:93:70:d5:84:22:05:bc:00:48:c2:b5:94:8e:7d:
15:b2:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 16:51:41 2026 by rpki-client