Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/NGuLawNRpdMEyZa7IQEIZOQvj0U.roa
File: NGuLawNRpdMEyZa7IQEIZOQvj0U.roa (raw, json)
Hash identifier: Eq+j44jfbWnwDN+asP0NJUV62rEOZ/IR1jxzIbqGMTU=
Subject key identifier: 34:6B:8B:6B:03:51:A5:D3:04:C9:96:BB:21:01:08:64:E4:2F:8F:45
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019FC32BD1B9527F79DB1687711E831B6E00
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/NGuLawNRpdMEyZa7IQEIZOQvj0U.roa
Signing time: Sun 02 Aug 2026 15:50:56 +0000
ROA not before: Sun 02 Aug 2026 15:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 72.56.16.0/20 maxlen: 32
72.56.64.0/19 maxlen: 32
72.56.96.0/19 maxlen: 32
200.169.176.0/21 maxlen: 32
200.169.184.0/23 maxlen: 32
201.24.48.0/21 maxlen: 32
201.24.56.0/23 maxlen: 32
201.34.144.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:2b:d1:b9:52:7f:79:db:16:87:71:1e:83:1b:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Aug 2 15:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346b8b6b0351a5d304c996bb21010864e42f8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:8e:17:7c:40:e3:4e:05:71:bf:18:71:f3:
37:3d:f8:c9:4d:04:a4:57:4a:85:b5:87:85:5a:d5:
50:62:15:34:f2:f3:07:48:dc:0e:b7:6c:47:b3:f5:
2e:4a:2a:12:1e:af:70:05:21:bc:15:f6:2d:8b:0e:
60:18:89:df:bd:67:b4:39:f0:6c:23:b7:f7:10:7b:
18:4b:df:62:86:b3:99:79:fd:f1:5e:f4:c4:6d:f6:
b2:ec:cb:b8:1b:69:b4:3d:4a:ad:56:2b:48:6e:d6:
33:49:45:3d:42:23:c3:67:3d:a6:67:73:80:9a:92:
46:36:14:c0:4e:f5:bf:d7:95:17:4a:6b:17:78:79:
e0:ff:65:53:09:c0:f9:0c:9f:a3:26:e4:0e:03:5c:
e4:55:fe:26:00:9b:82:e8:d1:bf:2f:79:06:e9:d9:
0b:17:5c:e8:a2:34:7f:d3:35:a4:dc:c0:c5:47:3a:
e0:df:40:f5:0e:b2:73:65:e7:1c:9d:b3:ac:8a:50:
fd:39:d8:09:e2:5f:c0:18:8e:c2:00:92:1f:ea:c7:
1c:16:29:0b:31:20:95:33:1c:4b:bb:73:fa:ee:8f:
f2:f8:51:d1:c7:01:5a:bd:28:90:39:eb:2a:53:04:
b6:e1:62:e4:07:77:d2:95:67:69:b5:1a:94:3e:3d:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:8B:6B:03:51:A5:D3:04:C9:96:BB:21:01:08:64:E4:2F:8F:45
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/NGuLawNRpdMEyZa7IQEIZOQvj0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.16.0/20
72.56.64.0/18
200.169.176.0-200.169.185.255
201.24.48.0-201.24.57.255
201.34.144.0/21
Signature Algorithm: sha256WithRSAEncryption
11:64:8a:41:22:2c:78:ab:bc:5f:44:71:9f:97:58:86:85:8c:
40:dc:d0:46:e9:a6:01:73:08:ea:f4:50:b3:38:74:24:98:40:
ff:3a:1b:18:92:a6:45:35:de:c1:14:e1:c6:2b:cd:89:a9:c8:
c6:6e:1f:d6:95:b4:c9:97:a2:2f:b5:14:ba:9b:f0:ec:ab:c6:
7a:d7:4e:b6:cc:2c:7c:53:bc:f7:93:2e:e1:02:8e:cb:54:34:
22:ab:e2:89:16:e8:11:87:85:cb:8a:07:33:f2:8a:cd:3f:e5:
0c:9b:c0:a3:18:ef:f2:29:51:62:67:c2:c0:34:6d:dd:2a:2c:
2e:fd:cf:e1:57:7f:9b:2b:4d:f5:06:1e:b1:93:8f:ac:66:19:
55:94:f1:38:25:59:88:11:5d:3a:07:9d:5a:a4:e1:b3:85:65:
07:9d:34:f3:74:8c:db:6b:63:1e:2f:2e:b1:cb:06:b0:3f:42:
39:fb:99:08:84:db:5a:a7:44:da:fc:18:72:94:e4:35:56:79:
fe:09:fe:8f:2d:96:80:18:c1:49:a1:78:ee:50:b3:75:72:23:
7b:a8:86:d8:d9:ae:43:6f:95:ec:a8:8b:5f:2f:10:35:a5:57:
89:26:b4:32:f9:a9:67:87:6e:80:6e:44:12:7c:04:44:62:59:
af:bd:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:25:44 2026 by rpki-client