Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/nIcvudeqlMIht11QekdVthrczgo.roa
File: nIcvudeqlMIht11QekdVthrczgo.roa (raw, json)
Hash identifier: svSV1NBTRVorlHVW7eGPa2t3Z9YIKYtLoAxuuHh5a0M=
Subject key identifier: 9C:87:2F:B9:D7:AA:94:C2:21:B7:5D:50:7A:47:55:B6:1A:DC:CE:0A
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019ED7268CD1E9D87AB37406A01FC7C1F68E
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/nIcvudeqlMIht11QekdVthrczgo.roa
Signing time: Wed 17 Jun 2026 19:54:48 +0000
ROA not before: Wed 17 Jun 2026 19:54:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:26:8c:d1:e9:d8:7a:b3:74:06:a0:1f:c7:c1:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jun 17 19:54:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c872fb9d7aa94c221b75d507a4755b61adcce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:99:26:8f:27:c3:0b:e2:41:74:76:f3:f8:
12:07:c6:90:5b:49:20:df:d9:e9:49:29:c1:3a:48:
01:f0:f0:96:55:68:06:f3:fb:da:97:22:3c:73:77:
b2:7c:c1:82:7f:1f:fa:c4:36:68:00:5b:34:5a:f5:
6c:40:85:93:12:d9:97:bf:3c:1e:f8:19:5d:23:25:
1e:f1:a4:c1:19:79:ae:bb:5c:98:b8:63:b3:07:3f:
e8:72:37:bd:f1:08:dd:df:56:7f:cb:4e:32:04:36:
af:b3:9f:d6:98:de:a7:e8:ba:9a:32:31:c4:d4:b7:
e1:37:89:b4:00:0e:a6:66:b0:44:46:b3:f3:0d:c6:
39:82:d5:c5:d4:2d:c1:5b:a4:3c:ff:40:d9:2c:37:
82:76:94:10:26:8c:4b:7f:4d:07:80:39:f7:4b:6e:
c0:ba:89:a4:03:33:63:2c:21:2a:69:ce:8d:27:45:
0c:47:5f:e0:f0:c7:09:bb:7b:4a:f5:55:b0:c0:0a:
97:e1:9a:64:89:b8:f7:8c:7c:61:34:6e:da:24:52:
a1:bf:af:25:62:5b:1a:1e:b8:ef:3c:30:bf:87:66:
1a:7f:be:0d:ac:62:0a:6d:87:62:b0:ec:fa:88:09:
4f:ce:a0:44:14:64:66:66:d5:c3:07:f9:55:eb:9e:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:2F:B9:D7:AA:94:C2:21:B7:5D:50:7A:47:55:B6:1A:DC:CE:0A
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/nIcvudeqlMIht11QekdVthrczgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fc:25:f4:c5:4d:b9:54:ba:6b:29:ea:87:38:c6:b9:9a:e3:
3d:7a:63:4c:e4:17:2b:fd:ae:5b:d6:22:fe:5f:71:6e:5d:2a:
0d:0f:1f:d0:87:74:99:4b:de:28:0d:3a:3a:bb:d4:b4:be:7d:
4b:0e:61:a3:12:e9:7f:1b:57:2c:3a:ab:b7:93:cc:e0:e9:94:
25:a5:16:29:66:c8:db:5e:01:16:7a:dc:1e:32:3e:79:8a:1e:
02:cc:c0:27:cc:51:74:63:f1:61:d9:72:11:13:19:d2:db:03:
10:cf:b1:b9:e5:91:e2:a3:f0:07:62:2c:51:f0:d4:54:ab:87:
95:99:43:0c:b8:c8:4a:54:cd:d8:3f:0b:50:d2:ef:35:55:14:
11:b7:03:24:d5:6a:a3:62:34:86:cb:3e:ee:90:71:57:49:49:
ff:14:a7:2f:f5:cd:87:00:db:55:b7:14:a6:00:d1:06:63:cb:
9e:23:2c:45:06:5a:9a:46:e4:eb:ab:30:34:16:69:41:53:e7:
99:a3:64:09:bf:b9:a2:92:e4:3c:b0:6b:8c:d4:e7:06:34:74:
11:4e:8e:00:bc:ca:9b:b6:e8:fb:64:07:d7:60:5e:67:8c:88:
63:37:b3:9d:01:6b:f4:3c:18:84:74:b5:10:fd:33:c2:d5:17:
b8:74:12:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:06:22 2026 by rpki-client