Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/NzGOwWDQOPETxj9EvmXudQeuwLI.roa
File: NzGOwWDQOPETxj9EvmXudQeuwLI.roa (raw, json)
Hash identifier: Kknhz18DNtR1usJp51T3b1nw1Fkr9AIsd/KE8XOKe1s=
Subject key identifier: 37:31:8E:C1:60:D0:38:F1:13:C6:3F:44:BE:65:EE:75:07:AE:C0:B2
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A0F0128035B69D9DAA59AEC5BF740A6BE7
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/NzGOwWDQOPETxj9EvmXudQeuwLI.roa
Signing time: Wed 30 Sep 2026 02:08:59 +0000
ROA not before: Wed 30 Sep 2026 02:08:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219187
IP address blocks: 2a14:9d07:200::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:12:80:35:b6:9d:9d:aa:59:ae:c5:bf:74:0a:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Sep 30 02:08:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37318ec160d038f113c63f44be65ee7507aec0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:18:ed:57:b9:3b:5d:49:e2:cb:ca:fc:68:
9f:50:33:44:b5:80:18:4d:65:b2:b9:cb:75:a8:35:
09:d3:5b:a0:8c:3c:59:76:0e:71:06:49:d3:b8:47:
73:71:06:05:3b:de:f8:d8:5a:c6:98:15:3d:df:40:
2f:b0:1e:ef:c1:44:22:b4:72:ca:5d:ad:f5:2e:13:
cd:43:65:40:ab:a4:d2:9d:6b:b0:ca:e9:26:7e:c2:
bd:af:ae:ec:5f:29:39:2c:4c:99:50:7a:24:37:ce:
c9:60:ee:85:c1:f3:ca:6c:50:f6:b2:5f:6d:4f:7b:
43:01:2d:8a:a2:af:d2:64:da:50:53:9f:de:c0:ff:
6c:06:ba:50:25:85:e3:a0:db:96:ac:59:47:d0:e7:
c0:83:71:fa:ac:29:52:db:2f:17:03:4c:f8:ea:53:
75:58:e1:11:11:5b:cb:7d:3d:be:1c:c8:9c:b6:1f:
d5:f1:53:f7:3a:88:12:83:5c:c9:d4:87:99:c3:67:
27:19:7b:9a:c6:a0:10:ac:25:a9:85:8a:84:e5:49:
e9:63:2f:48:28:36:93:42:df:3e:9e:22:68:f6:4c:
03:bb:61:95:4b:40:eb:44:a1:c9:f9:dd:92:27:8d:
28:4a:18:3b:dc:72:f6:ad:68:2b:63:5f:b3:b2:fa:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:8E:C1:60:D0:38:F1:13:C6:3F:44:BE:65:EE:75:07:AE:C0:B2
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/NzGOwWDQOPETxj9EvmXudQeuwLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9d07:200::/44
Signature Algorithm: sha256WithRSAEncryption
03:9d:ae:5c:ea:dd:ba:65:e0:71:7e:e6:53:46:d6:e6:53:d5:
75:81:23:b7:4d:b1:3c:35:0f:1e:53:65:bd:f5:28:ed:f8:14:
14:62:5f:fe:c7:41:b2:ed:6e:d1:14:c4:4b:8b:9d:6d:17:43:
bd:70:3c:b1:04:b6:1e:b9:e0:01:71:8f:2e:27:76:74:3c:77:
7c:dd:be:87:08:ce:51:15:83:d7:20:aa:03:0c:39:72:03:42:
5b:e2:9d:0a:ca:90:b7:29:b8:2e:f0:c5:9e:47:5b:03:42:da:
10:d9:cf:49:7e:25:ad:b1:eb:25:4c:93:99:04:94:91:f2:19:
a9:84:dd:f9:7a:92:7d:e9:fe:70:38:00:29:c4:51:9f:ec:98:
af:e3:92:fe:51:e1:74:14:75:2c:cc:06:dc:ac:10:6b:c6:48:
a8:69:ca:c3:28:17:bb:80:db:ad:f8:93:03:ef:56:56:7c:a0:
7a:8a:5b:e0:c7:34:10:0b:72:8e:91:fc:c7:96:36:4a:ed:0c:
1e:7c:65:94:1d:dd:ce:0b:ee:c0:64:7e:ac:d4:c7:82:d5:1e:
fb:9d:15:e6:a3:1b:b3:05:f9:65:ee:df:77:5d:3e:d4:4b:6e:
de:ce:f7:f9:55:4c:de:0f:ee:69:85:52:0f:cd:53:dd:df:05:
cd:36:af:c4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDwEoA1tp2dqlmuxb90CmvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjY1YThiYWViYTRmZjYyMTQ5MmViZWU2ZmMxZTg4YWRi
MjFiMDMwHhcNMjYwOTMwMDIwODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzMxOGVjMTYwZDAzOGYxMTNjNjNmNDRiZTY1ZWU3NTA3YWVjMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZEY7Ve5O11J4svK/GifUDNEtYAY
TWWyuct1qDUJ01ugjDxZdg5xBknTuEdzcQYFO9742FrGmBU930AvsB7vwUQitHLK
Xa31LhPNQ2VAq6TSnWuwyukmfsK9r67sXyk5LEyZUHokN87JYO6FwfPKbFD2sl9t
T3tDAS2Koq/SZNpQU5/ewP9sBrpQJYXjoNuWrFlH0OfAg3H6rClS2y8XA0z46lN1
WOEREVvLfT2+HMicth/V8VP3OogSg1zJ1IeZw2cnGXuaxqAQrCWphYqE5UnpYy9I
KDaTQt8+niJo9kwDu2GVS0DrRKHJ+d2SJ40oShg73HL2rWgrY1+zsvp5WQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDcxjsFg0DjxE8Y/RL5l7nUHrsCyMB8GA1UdIwQY
MBaAFDO2Wouuuk/2IUkuvub8HoitshsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0Njkt
ZDU0NzE4NTUxMmRlLzEvTnpHT3dXRFFPUEVUeGo5RXZtWHVkUWV1d0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0NjktZDU0NzE4NTUxMmRl
LzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhSdBwIA
MA0GCSqGSIb3DQEBCwUAA4IBAQADna5c6t26ZeBxfuZTRtbmU9V1gSO3TbE8NQ8e
U2W99Sjt+BQUYl/+x0Gy7W7RFMRLi51tF0O9cDyxBLYeueABcY8uJ3Z0PHd83b6H
CM5RFYPXIKoDDDlyA0Jb4p0KypC3Kbgu8MWeR1sDQtoQ2c9JfiWtseslTJOZBJSR
8hmphN35epJ96f5wOAApxFGf7Jiv45L+UeF0FHUszAbcrBBrxkioacrDKBe7gNut
+JMD71ZWfKB6ilvgxzQQC3KOkfzHljZK7QwefGWUHd3OC+7AZH6s1MeC1R77nRXm
oxuzBfll7t93XT7US27ezvf5VUzeD+5phVIPzVPd3wXNNq/E
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:08 2026 by rpki-client