Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ni-XBNNPqXjztDC1H4xsA6EFrMk.roa
File: ni-XBNNPqXjztDC1H4xsA6EFrMk.roa (raw, json)
Hash identifier: TnZruDoC+EIBj2t46cVZ2ydFCB/MPG03Q6lpZKRTZgw=
Subject key identifier: 9E:2F:97:04:D3:4F:A9:78:F3:B4:30:B5:1F:8C:6C:03:A1:05:AC:C9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D054AF15658C05FF926FE2D8E99F1DDCC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ni-XBNNPqXjztDC1H4xsA6EFrMk.roa
Signing time: Thu 19 Mar 2026 08:51:30 +0000
ROA not before: Thu 19 Mar 2026 08:51:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
93.113.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 06:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:4a:f1:56:58:c0:5f:f9:26:fe:2d:8e:99:f1:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 19 08:51:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e2f9704d34fa978f3b430b51f8c6c03a105acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:20:0d:4e:60:66:d2:80:00:b5:29:e9:9c:
b7:20:0b:2b:f7:9b:b3:29:0c:bd:09:07:fc:34:31:
a6:43:1e:6e:e9:b7:7f:05:51:3a:30:98:1c:e5:4f:
a0:d1:93:0b:fe:98:12:f1:70:30:2e:83:cf:e7:94:
ca:73:f4:c4:7a:c7:89:20:5a:38:59:f6:61:0d:2a:
f5:f1:e3:09:04:25:96:81:9a:67:f7:9a:58:fb:0d:
13:13:54:02:2c:42:01:79:bd:a9:d4:fe:4c:13:a2:
e4:4f:62:2d:d7:fb:6a:e7:39:3d:a0:07:90:d1:0c:
b9:47:b0:09:00:bd:c4:89:8d:7f:f3:1c:71:8b:12:
2c:0d:1c:94:c7:2c:e5:21:34:2e:fb:33:07:2d:68:
39:d4:3d:99:33:c5:a7:46:77:16:a6:b4:14:d1:66:
2a:e6:02:a4:3c:0a:43:55:d4:10:63:72:6a:e1:1b:
c9:31:31:36:7b:b3:80:f1:06:5e:4a:a1:6c:66:32:
da:c0:19:fa:5b:0c:f9:03:dd:e5:87:a5:56:89:99:
b4:b9:79:23:15:a3:79:6a:54:b8:7a:10:7f:87:f8:
14:02:af:de:47:cb:4e:06:83:3d:99:d2:15:33:66:
f9:ee:1f:76:b3:90:81:5a:af:c3:19:a3:fa:e0:56:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:97:04:D3:4F:A9:78:F3:B4:30:B5:1F:8C:6C:03:A1:05:AC:C9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ni-XBNNPqXjztDC1H4xsA6EFrMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.89.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
93.113.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6f:1e:fe:a9:6a:bd:09:9f:8b:d6:a4:10:b8:76:1c:e3:a1:
3a:e7:56:b0:61:79:52:0c:67:e9:23:36:8c:4d:69:9c:3f:40:
16:ab:cd:a7:c2:56:ea:a4:ee:4b:b9:da:b6:6e:a7:b1:3c:f3:
fb:9e:14:08:47:43:45:a9:f5:cb:e8:6f:ff:ea:05:90:0a:fa:
12:b9:e5:07:3f:61:37:dc:97:70:c0:dc:83:48:a3:3c:06:a9:
f7:33:d2:2f:7a:7b:ea:17:83:d1:2e:d4:a5:69:4b:78:cd:54:
5e:e8:6d:58:d8:24:05:d6:39:a1:25:b4:9f:c6:b3:04:23:ca:
f8:74:97:73:eb:f5:e5:2d:a0:b0:aa:cb:2f:38:74:69:c4:69:
4a:bd:6a:c8:88:36:79:f5:97:da:e2:68:87:07:32:6c:71:a1:
1a:b5:76:9b:30:b3:14:0f:2d:a1:7c:f6:12:3b:7b:7a:8b:76:
3c:e5:76:a6:0e:29:51:67:5d:d2:ac:82:24:91:5e:01:fe:5b:
5d:a5:5e:88:7a:e2:7e:6d:ad:02:a4:c6:95:03:f2:ee:11:9f:
16:6f:ca:40:f7:2c:cd:6e:45:59:30:4f:d4:81:08:ff:20:90:
15:9f:1c:75:52:59:cb:b9:e7:9d:ea:12:f6:4d:3f:6a:1e:2a:
80:3a:06:9e
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZ0FSvFWWMBf+Sb+LY6Z8d3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwMzE5MDg1MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJmOTcwNGQzNGZhOTc4ZjNiNDMwYjUxZjhjNmMwM2ExMDVhY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb8gDU5gZtKAALUp6Zy3IAsr95uz
KQy9CQf8NDGmQx5u6bd/BVE6MJgc5U+g0ZML/pgS8XAwLoPP55TKc/TEeseJIFo4
WfZhDSr18eMJBCWWgZpn95pY+w0TE1QCLEIBeb2p1P5ME6LkT2It1/tq5zk9oAeQ
0Qy5R7AJAL3EiY1/8xxxixIsDRyUxyzlITQu+zMHLWg51D2ZM8WnRncWprQU0WYq
5gKkPApDVdQQY3Jq4RvJMTE2e7OA8QZeSqFsZjLawBn6Wwz5A93lh6VWiZm0uXkj
FaN5alS4ehB/h/gUAq/eR8tOBoM9mdIVM2b57h92s5CBWq/DGaP64FYV2QIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFJ4vlwTTT6l487QwtR+MbAOhBazJMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvbmktWEJOTlBxWGp6dERDMUg0eHNBNkVGck1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAWSHBAwQA
WSpZAwQBWSpcAwQAWSuOAwQAWS4EMAwDBABZL3sDBABZL3wDBABdcbAwDQYJKoZI
hvcNAQELBQADggEBAD1vHv6par0Jn4vWpBC4dhzjoTrnVrBheVIMZ+kjNoxNaZw/
QBarzafCVuqk7ku52rZup7E88/ueFAhHQ0Wp9cvob//qBZAK+hK55Qc/YTfcl3DA
3INIozwGqfcz0i96e+oXg9Eu1KVpS3jNVF7obVjYJAXWOaEltJ/GswQjyvh0l3Pr
9eUtoLCqyy84dGnEaUq9asiINnn1l9riaIcHMmxxoRq1dpswsxQPLaF89hI7e3qL
djzldqYOKVFnXdKsgiSRXgH+W12lXoh64n5trQKkxpUD8u4RnxZvykD3LM1uRVkw
T9SBCP8gkBWfHHVSWcu5553qEvZNP2oeKoA6Bp4=
-----END CERTIFICATE-----
Generated at Fri Mar 20 16:01:55 2026 by rpki-client