Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/naRiXx-Mer0byho__O-5n0xPHgQ.roa
File: naRiXx-Mer0byho__O-5n0xPHgQ.roa (raw, json)
Hash identifier: Df42QuhCufr9cZixvmZ61MXty55TKCqK/ygy04BSZAY=
Subject key identifier: 9D:A4:62:5F:1F:8C:7A:BD:1B:CA:1A:3F:FC:EF:B9:9F:4C:4F:1E:04
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FF9BF9B86480EC09068032399ABC300AA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/naRiXx-Mer0byho__O-5n0xPHgQ.roa
Signing time: Thu 13 Aug 2026 06:11:51 +0000
ROA not before: Thu 13 Aug 2026 06:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 82.197.200.0/24 maxlen: 24
84.245.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:bf:9b:86:48:0e:c0:90:68:03:23:99:ab:c3:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 13 06:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9da4625f1f8c7abd1bca1a3ffcefb99f4c4f1e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:43:0b:70:44:0d:87:07:d3:d3:58:26:04:
59:1e:bf:ed:bc:b0:78:eb:a9:82:f0:49:0e:08:49:
1c:1b:57:f8:c3:68:64:8b:40:7d:74:56:8a:b5:34:
f7:83:e5:c2:47:3e:76:e5:a7:63:4f:b1:9a:e6:33:
a8:0c:22:53:0a:fd:92:02:c7:41:a5:91:4f:06:f4:
fe:f3:70:83:43:ff:c9:36:fa:24:3d:4a:6a:6d:f8:
8f:03:1c:f2:04:8f:ca:ea:47:ad:22:80:ab:48:d2:
6b:e9:7a:be:d1:cb:b7:15:e7:70:86:9c:f2:99:29:
2d:41:9f:cf:ac:e1:3f:7e:d3:12:f9:60:eb:56:c5:
d4:81:9f:00:c7:d2:72:3c:57:0a:e6:2e:cf:74:6f:
5b:4b:6b:ce:31:ce:76:d9:ee:77:26:5c:92:e1:b2:
4f:de:0d:ea:66:31:e2:25:99:4b:45:6e:06:fa:6e:
94:da:02:e7:db:b0:ff:e8:32:9a:d3:c6:3f:3d:17:
66:b0:a1:47:ec:61:95:a1:b6:1c:1a:f3:17:ac:85:
97:62:2f:73:0f:f7:1f:f3:65:93:9a:35:21:44:4c:
2a:0a:68:bd:7d:6a:13:39:61:ae:fa:a4:b3:15:9f:
da:4c:17:24:56:94:9f:04:9f:45:0b:24:13:fd:90:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:62:5F:1F:8C:7A:BD:1B:CA:1A:3F:FC:EF:B9:9F:4C:4F:1E:04
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/naRiXx-Mer0byho__O-5n0xPHgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.200.0/24
84.245.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bd:dd:5d:fa:15:5d:03:4e:db:b9:25:ab:90:85:14:2c:f2:
9a:d6:a0:e5:02:65:b9:7d:29:03:fd:2a:1a:d9:e9:ca:a3:2d:
be:87:0d:3c:6c:90:b5:54:cb:6d:c6:b8:59:f7:93:0f:ed:06:
ee:af:29:6e:8c:3f:c4:71:4f:84:c5:af:1c:13:c0:0f:2d:80:
51:27:bb:7e:78:a0:7c:7c:f0:a0:a3:3f:88:4b:71:69:e3:4c:
c8:4a:08:98:3f:5b:30:cb:0b:48:a3:8a:38:f7:da:50:a5:87:
04:4e:83:69:7c:37:69:20:40:44:80:a5:63:1c:ab:84:eb:0c:
97:42:03:a9:9f:c9:18:e6:ea:a0:ce:37:ce:36:38:e1:3a:bb:
37:f2:f6:a8:e1:c0:44:7f:ff:58:bb:3a:57:75:ca:31:54:64:
b3:17:f7:93:f5:34:e6:c2:60:ff:5d:84:42:23:a0:b8:ef:2f:
76:1a:d0:aa:8b:cd:89:77:5b:fd:57:eb:cc:73:08:40:98:43:
9c:ec:6d:85:22:b6:14:ef:d5:62:01:15:4b:78:dd:6a:2a:8f:
a6:3a:f3:09:78:c7:6a:c4:ee:e4:0d:bd:85:5f:7c:c1:f0:55:
b4:61:83:49:1b:36:43:91:9e:04:57:ae:da:da:ec:67:c9:f0:
8d:3a:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:52:59 2026 by rpki-client