Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/n5NcxiT9PS0KRcc3R-BBqbuxAco.roa
File: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (raw, json)
Hash identifier: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=
Subject key identifier: 9F:93:5C:C6:24:FD:3D:2D:0A:45:C7:37:47:E0:41:A9:BB:B1:01:CA
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F2369207D9A8B72BF4DB26FA6D1774A6E
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/n5NcxiT9PS0KRcc3R-BBqbuxAco.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49150
IP address blocks: 93.174.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:7d:9a:8b:72:bf:4d:b2:6f:a6:d1:77:4a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f935cc624fd3d2d0a45c73747e041a9bbb101ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:78:ab:b2:2f:bc:65:71:60:8a:6c:3e:90:
75:c5:62:4b:21:7f:84:ab:7e:00:7f:3d:6c:15:11:
82:30:d1:61:69:03:c8:b6:ea:a9:41:f6:69:1c:de:
8b:5a:ec:5f:45:39:db:a7:e5:69:6e:cb:93:c3:d0:
4a:8b:f8:67:84:9a:10:e2:ab:c6:2e:c9:b8:07:8e:
f6:8a:f3:58:59:6a:bd:76:90:92:4a:44:bc:cb:45:
fc:62:52:79:2d:4a:80:80:5f:18:a2:86:bd:8c:19:
40:c2:e6:ff:4a:de:ba:39:c6:5d:44:6e:8d:63:c7:
81:e5:f3:22:89:ae:b1:6c:d4:3d:44:d9:09:2d:50:
f0:69:d7:bb:4e:1a:3e:4a:92:5c:98:93:44:8c:25:
65:4c:61:eb:fb:03:45:10:66:65:93:e4:da:f0:a8:
6d:b5:ee:1b:13:16:4a:3b:c1:b7:b5:b2:56:5a:45:
3f:92:f7:fe:72:cf:f0:64:10:73:8f:d9:86:ff:5d:
88:57:2e:5d:39:8e:dd:dc:52:24:f6:09:0a:97:f6:
ea:79:bb:14:a6:ce:90:78:3d:10:61:a1:8d:d6:32:
8b:5c:84:70:74:01:63:c2:c2:18:d8:20:93:09:52:
da:7c:d2:f8:0b:69:13:8e:80:e4:a6:ee:f9:16:43:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:5C:C6:24:FD:3D:2D:0A:45:C7:37:47:E0:41:A9:BB:B1:01:CA
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/n5NcxiT9PS0KRcc3R-BBqbuxAco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0c:74:4f:56:85:d4:d6:be:f5:b5:91:4b:d8:75:a0:4e:97:
73:8a:90:3f:15:18:87:fb:65:3b:87:fd:2d:08:11:ca:99:46:
4b:30:41:b4:e3:0c:b7:6b:9d:e6:55:96:c1:98:d4:10:3e:01:
ed:55:ef:69:c1:75:21:f3:69:ed:e1:3e:2b:1a:a7:45:2a:fd:
e3:e2:f2:60:09:bf:4d:65:05:45:0b:45:0d:ff:a3:16:73:72:
22:ad:d1:23:6f:76:44:ca:4b:ad:df:c7:54:59:f0:a3:38:e4:
2e:0f:a0:4b:fb:9a:e1:d7:bb:02:af:fd:70:ac:86:b1:14:23:
e7:a9:88:a3:44:df:89:f6:43:c2:84:ad:57:3a:18:73:be:86:
30:4e:ce:73:0f:4a:30:77:f7:67:20:d9:1a:bb:f1:05:d9:9b:
91:15:62:2e:d8:e2:1e:41:af:83:4b:8b:1e:4b:88:ee:7b:53:
18:4a:2f:72:e3:d8:f9:02:8e:f1:04:47:a3:df:00:f2:94:8e:
01:63:65:11:86:63:a5:f9:d6:9b:2c:33:0a:00:ea:08:ff:0d:
b7:47:20:ab:e6:f5:9d:12:5a:ee:70:1b:52:dd:80:6a:2c:61:
b4:d0:b7:91:cf:fa:be:e9:67:2a:c2:8b:ca:2a:9f:8e:0d:4a:
69:37:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:18:17 2026 by rpki-client