Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nejnEje0m_4akP8UzHhXY4i_Xk0.roa
File: nejnEje0m_4akP8UzHhXY4i_Xk0.roa (raw, json)
Hash identifier: qTXm8go9juKpJqaKvHf/DrI/i1kFDp4sGtqOXU3BJrs=
Subject key identifier: 9D:E8:E7:12:37:B4:9B:FE:1A:90:FF:14:CC:78:57:63:88:BF:5E:4D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A1608138424B9F16BD5C7854F5752FF0C5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nejnEje0m_4akP8UzHhXY4i_Xk0.roa
Signing time: Wed 21 Oct 2026 22:07:23 +0000
ROA not before: Wed 21 Oct 2026 22:07:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14293
IP address blocks: 85.209.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:81:38:42:4b:9f:16:bd:5c:78:54:f5:75:2f:f0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 21 22:07:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de8e71237b49bfe1a90ff14cc78576388bf5e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:3d:81:d6:e8:93:02:97:99:ce:8e:5c:c4:
e5:26:fb:fc:fe:b8:22:46:c2:a9:c2:18:3b:89:44:
b4:15:d7:71:16:a4:ef:6e:a0:57:75:86:bb:55:5f:
e5:aa:17:89:82:eb:51:ff:42:66:7e:ae:2d:a0:04:
05:f6:3a:a2:92:dc:5b:e1:01:a0:b2:dc:31:e4:86:
e2:c9:52:32:b0:8b:7c:a7:7b:e0:a7:e0:88:f2:be:
b3:1f:8b:06:36:fb:21:6e:08:4f:c1:20:d5:28:81:
d7:8d:9c:7a:f2:42:55:f2:ee:46:b9:2e:e6:02:48:
dd:b3:4b:62:2b:e1:10:a5:fd:06:1c:bb:16:7d:01:
a0:1f:b4:b8:b8:cf:29:ad:42:b9:0a:15:78:0f:f8:
6a:1e:8e:59:28:9d:5a:ec:af:44:5c:0d:58:2e:28:
aa:a0:b8:af:5c:6a:b8:b9:64:8b:ec:34:7b:51:88:
7a:e1:8f:6e:ec:79:78:99:8f:0e:44:3c:fb:87:07:
6c:f0:bd:82:ec:ae:3b:30:5a:c7:bc:1e:55:83:fe:
41:65:7a:a1:d0:4e:96:43:a4:21:65:7a:f7:5b:f9:
fc:c2:33:a0:85:e9:36:95:5d:95:62:a7:34:24:c7:
11:b9:e5:02:ab:12:bb:2e:12:b3:db:76:25:b9:f4:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:E7:12:37:B4:9B:FE:1A:90:FF:14:CC:78:57:63:88:BF:5E:4D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nejnEje0m_4akP8UzHhXY4i_Xk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.160.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0e:d1:a8:26:1d:85:66:6f:99:53:a2:21:6d:a2:d8:d0:46:
75:c4:dc:b9:85:be:00:d5:78:70:be:18:80:15:29:be:31:59:
19:e9:09:d8:3a:c9:35:80:4a:13:df:ba:3d:28:11:8a:ba:e1:
c6:13:14:7c:ba:ee:b8:92:6c:a5:e3:ee:41:e5:d0:98:67:ea:
f7:1d:b4:e8:2d:90:1d:9c:3b:d1:69:d9:26:de:8c:ee:3a:2d:
af:60:6b:18:59:12:bd:21:0b:14:08:1d:ba:05:e6:53:96:36:
73:1e:c8:36:f9:ef:f2:ba:c0:b1:dc:42:a1:b9:bc:d5:4d:02:
54:cf:0c:b6:58:c3:b1:98:05:66:3f:1a:fd:08:aa:43:10:2f:
11:21:26:4b:f0:66:04:1b:84:6b:55:09:47:fc:c3:0e:02:9b:
19:93:7e:96:4d:5a:c5:3e:ee:ba:bf:86:7d:05:cb:32:27:92:
6c:5b:44:2d:48:3a:63:14:7a:02:78:54:4c:d9:88:f9:cb:86:
53:90:9c:2a:3e:11:dd:39:71:9c:bd:a9:c2:ae:8e:8a:b2:d4:
ef:3a:57:ba:41:d2:9f:34:6c:da:f4:93:29:c8:b7:ad:95:64:
1e:22:3d:f3:1b:e9:4f:45:7f:05:3e:bc:a5:a1:7f:c3:95:93:
87:7e:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:42:45 2026 by rpki-client