Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/nv21OigN87U1G6sGTNGYMRv3SAI.roa
File: nv21OigN87U1G6sGTNGYMRv3SAI.roa (raw, json)
Hash identifier: DWTFJPnSyrT48yNLniGwTf7rFLrLf6mgvfHkPF65lhU=
Subject key identifier: 9E:FD:B5:3A:28:0D:F3:B5:35:1B:AB:06:4C:D1:98:31:1B:F7:48:02
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 019FC0DA8A2528E4A87AC8FF2CD89934D324
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/nv21OigN87U1G6sGTNGYMRv3SAI.roa
Signing time: Sun 02 Aug 2026 05:02:55 +0000
ROA not before: Sun 02 Aug 2026 05:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 193.148.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c0:da:8a:25:28:e4:a8:7a:c8:ff:2c:d8:99:34:d3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Aug 2 05:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9efdb53a280df3b5351bab064cd198311bf74802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:19:90:b1:ba:08:6b:12:e7:70:52:e8:1b:
92:bb:70:f6:f3:47:ed:4c:11:fe:9b:f1:1e:f7:51:
aa:f2:17:fa:8a:e9:eb:0d:03:19:ff:29:0c:b2:96:
60:33:a6:6d:a7:ab:e8:22:d4:f3:8a:f9:88:64:34:
b1:62:bc:86:76:5c:1c:e7:34:9e:14:a1:fc:91:fd:
d6:80:fb:49:e7:f3:7a:74:4c:62:51:3a:24:d0:31:
5a:d6:17:1a:e6:39:10:cc:f2:8a:76:f3:b3:ec:79:
32:26:f1:ee:39:3a:39:c7:a8:32:54:23:68:e3:0c:
5f:bf:05:a4:6c:12:c7:bd:e4:17:07:a2:24:c8:71:
f2:ac:9e:fc:1c:95:2c:e6:6e:10:df:80:c8:80:a0:
b5:ec:bf:ae:79:f6:b4:79:5a:5b:c8:f0:8b:16:9c:
a6:98:05:a6:cb:11:3d:2e:3f:f6:e5:33:b7:f9:dd:
b1:96:31:f2:8f:eb:7d:58:69:63:82:50:18:71:74:
ec:35:de:16:33:dd:f9:1b:00:81:f0:26:85:2a:45:
1d:d8:d8:b9:b4:32:13:fe:b5:f0:35:a0:11:b2:06:
99:fc:51:b7:ef:8e:69:11:d1:f6:26:cb:e0:a8:59:
fe:fb:e7:69:c4:21:96:24:01:65:34:4a:4f:2f:b1:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FD:B5:3A:28:0D:F3:B5:35:1B:AB:06:4C:D1:98:31:1B:F7:48:02
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/nv21OigN87U1G6sGTNGYMRv3SAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:c1:3a:65:6e:ec:1c:b5:b3:10:f9:28:ab:f5:32:24:13:
b7:6d:6b:8d:1e:8f:90:8b:97:40:df:4d:06:d0:b8:ed:70:e3:
12:26:72:13:28:5d:53:74:76:51:2a:69:84:89:b5:74:cc:e6:
89:83:32:f1:8a:d2:4a:dd:6d:e6:99:66:77:5e:52:3d:69:4e:
9a:2b:3c:62:95:cd:6e:2a:8a:a7:63:f4:1e:87:21:fd:e0:c9:
7e:61:06:2d:ab:bd:6c:60:de:1b:b8:4f:1e:0d:d4:34:7a:bb:
92:d9:12:35:0d:c5:bf:e0:04:11:bc:47:d4:32:d6:1d:60:71:
50:c4:ff:06:c4:b6:2f:42:1a:06:0b:2d:8e:a0:e2:93:b9:e3:
0a:49:2f:be:4b:72:2d:b4:6c:a7:4e:89:af:a8:5c:8c:26:03:
13:ed:17:71:c2:c9:6e:4b:9f:4c:db:1b:08:eb:d5:f6:51:04:
1d:96:bc:b9:5a:f3:55:9d:a1:48:6e:fe:e2:f7:f3:55:69:ce:
41:e4:7e:83:11:64:6c:b5:31:47:71:36:e2:fc:85:2c:b5:f1:
14:d6:90:b4:10:70:27:ee:ca:d4:d8:95:e6:9c:d9:d9:34:ce:
2c:59:57:8c:7f:74:15:dc:ea:e3:27:32:ae:33:e6:16:0b:2c:
5b:ad:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:47:44 2026 by rpki-client