Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/nPN1026MFxn1aBHjNnL1ChSjJ7g.roa
File: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (raw, json)
Hash identifier: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=
Subject key identifier: 9C:F3:75:D3:6E:8C:17:19:F5:68:11:E3:36:72:F5:0A:14:A3:27:B8
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019DC3CDF01AE280DA6DACD9090F3F1F75D3
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/nPN1026MFxn1aBHjNnL1ChSjJ7g.roa
Signing time: Sat 25 Apr 2026 08:42:26 +0000
ROA not before: Sat 25 Apr 2026 08:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:cd:f0:1a:e2:80:da:6d:ac:d9:09:0f:3f:1f:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 25 08:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cf375d36e8c1719f56811e33672f50a14a327b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:1c:4d:8c:9d:59:88:2a:08:47:b0:93:ed:
3f:39:6b:cd:14:b2:51:c5:0d:be:62:22:85:a4:65:
e8:b7:0d:99:39:e8:68:00:b9:bf:c7:a3:76:a8:34:
e8:83:73:c2:83:13:05:4e:e4:2f:df:90:87:09:97:
cb:cd:17:cc:5e:47:84:f1:fb:85:71:0d:b1:96:fa:
6e:d2:3e:d0:3e:67:dd:91:4f:d3:4e:67:54:04:6a:
8a:af:b9:50:46:f9:ef:7b:33:94:91:e7:a3:a1:a9:
11:b4:26:32:0f:2d:ca:46:5c:91:7e:d5:e8:df:b1:
6e:89:3c:78:95:61:d5:67:0d:22:82:e9:24:48:a2:
5c:49:ab:a0:33:9a:06:7e:5c:8f:cd:32:79:e8:62:
9e:5c:d8:08:39:23:9e:67:46:eb:59:ba:19:5b:d5:
75:a2:ef:a8:67:86:61:8d:e2:30:6c:bf:53:ab:7a:
a5:35:db:7d:1c:90:9e:38:99:a9:c2:e8:06:f7:d9:
e8:28:5a:1c:70:4a:c8:e8:74:10:5a:56:66:48:48:
ed:87:01:66:0c:48:b3:4c:3f:51:f0:7e:4d:7a:2e:
57:72:1a:e5:cc:05:5d:e6:d5:65:55:40:56:27:ac:
1a:0d:10:f1:f3:9c:36:51:30:ae:38:6b:11:10:37:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:75:D3:6E:8C:17:19:F5:68:11:E3:36:72:F5:0A:14:A3:27:B8
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/nPN1026MFxn1aBHjNnL1ChSjJ7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:84:c3:38:64:57:b6:8a:c9:0e:84:61:7d:06:8e:22:45:4c:
7a:4e:9a:4a:0a:d0:5f:a0:1e:1f:1e:09:9f:26:63:3d:30:92:
8e:c1:c7:ce:c2:b1:c5:69:cb:17:eb:75:de:46:90:ca:7d:d5:
c1:2f:ae:a1:aa:b6:98:f3:f7:1d:43:ea:cb:29:c9:69:c7:fd:
cc:73:ad:ab:01:9c:fd:c0:03:24:af:2a:ae:c9:47:6f:00:b6:
72:d7:1c:d9:a9:d5:03:4e:51:bb:a9:ea:e8:3b:35:a6:9a:b7:
e2:92:4f:32:99:87:7f:a0:b4:5b:c1:fe:51:7f:31:c5:23:9e:
c9:3f:5d:85:23:fb:ed:32:96:c8:bd:f5:4c:81:b7:fd:36:e3:
b6:cf:d6:a3:c1:92:86:b4:aa:40:a7:8c:78:40:76:52:76:2a:
27:1b:06:d5:cc:4a:70:55:60:7d:1c:ce:97:38:70:50:fb:9e:
af:b3:46:54:3d:90:ce:b9:69:0f:f2:3a:2e:dc:c0:2d:b9:50:
a6:00:f1:c1:5e:c7:62:3f:fe:bd:b0:3e:c0:93:de:62:8c:e0:
3e:d6:87:a8:ca:be:a5:5f:46:65:87:6d:8b:35:9a:9d:8a:3d:
c6:87:a7:11:15:5f:e7:9d:7f:70:81:38:62:7d:cc:05:41:71:
83:f2:e1:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3DzfAa4oDabazZCQ8/H3XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjYwNDI1MDg0MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2YzNzVkMzZlOGMxNzE5ZjU2ODExZTMzNjcyZjUwYTE0YTMyN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokscTYydWYgqCEewk+0/OWvNFLJR
xQ2+YiKFpGXotw2ZOehoALm/x6N2qDTog3PCgxMFTuQv35CHCZfLzRfMXkeE8fuF
cQ2xlvpu0j7QPmfdkU/TTmdUBGqKr7lQRvnvezOUkeejoakRtCYyDy3KRlyRftXo
37FuiTx4lWHVZw0igukkSKJcSaugM5oGflyPzTJ56GKeXNgIOSOeZ0brWboZW9V1
ou+oZ4ZhjeIwbL9Tq3qlNdt9HJCeOJmpwugG99noKFoccErI6HQQWlZmSEjthwFm
DEizTD9R8H5Nei5XchrlzAVd5tVlVUBWJ6waDRDx85w2UTCuOGsREDefyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJzzddNujBcZ9WgR4zZy9QoUoye4MB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvblBOMTAyNk1GeG4xYUJIak5uTDFDaFNqSjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5rMA0G
CSqGSIb3DQEBCwUAA4IBAQBahMM4ZFe2iskOhGF9Bo4iRUx6TppKCtBfoB4fHgmf
JmM9MJKOwcfOwrHFacsX63XeRpDKfdXBL66hqraY8/cdQ+rLKclpx/3Mc62rAZz9
wAMkryquyUdvALZy1xzZqdUDTlG7qeroOzWmmrfikk8ymYd/oLRbwf5RfzHFI57J
P12FI/vtMpbIvfVMgbf9NuO2z9ajwZKGtKpAp4x4QHZSdionGwbVzEpwVWB9HM6X
OHBQ+56vs0ZUPZDOuWkP8jou3MAtuVCmAPHBXsdiP/69sD7Ak95ijOA+1oeoyr6l
X0Zlh22LNZqdij3Gh6cRFV/nnX9wgThifcwFQXGD8uFa
-----END CERTIFICATE-----
Generated at Wed May 6 01:14:18 2026 by rpki-client