Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/Ncp12bGOlnl7zeDP17e5hwwIiXs.roa
File: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (raw, json)
Hash identifier: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=
Subject key identifier: 35:CA:75:D9:B1:8E:96:79:7B:CD:E0:CF:D7:B7:B9:87:0C:08:89:7B
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019EF8A4453FEEBFF64CA82C0F41FC0804C0
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/Ncp12bGOlnl7zeDP17e5hwwIiXs.roa
Signing time: Wed 24 Jun 2026 07:59:35 +0000
ROA not before: Wed 24 Jun 2026 07:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215547
IP address blocks: 89.33.16.0/24 maxlen: 24
185.91.24.0/22 maxlen: 24
2a00:1932::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:a4:45:3f:ee:bf:f6:4c:a8:2c:0f:41:fc:08:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jun 24 07:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35ca75d9b18e96797bcde0cfd7b7b9870c08897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:84:8b:c4:8e:ae:f3:2a:f2:d2:47:65:b5:
13:45:5e:55:4d:a5:31:37:16:cf:2b:49:e6:70:2e:
30:22:f8:d6:90:f3:06:ed:37:56:02:cd:1e:2d:86:
c1:74:75:05:8c:c8:04:fd:06:18:f0:c3:f0:df:b3:
fc:20:e1:4c:61:f0:65:cb:25:3d:7d:c2:fb:05:9d:
82:ea:74:42:ba:79:13:34:c5:a5:d2:21:aa:f2:1b:
25:1c:10:60:c1:70:4a:36:ed:5f:48:6a:27:ec:79:
bb:32:33:cd:40:d6:c0:60:fa:56:b3:46:06:4f:47:
76:65:1a:f4:35:de:8c:44:80:40:f8:b8:ca:9d:bb:
38:51:11:73:d6:c2:92:52:dc:26:4d:5f:f6:e5:c7:
99:1f:f0:81:e3:2e:bd:32:c6:1d:8a:a7:e4:5a:5b:
50:4d:30:a8:2f:95:d1:6d:ed:e7:a1:7b:05:86:7a:
21:a9:d7:1c:36:0c:18:32:6a:d0:ce:9a:81:47:72:
32:fc:4f:2f:8b:5c:02:0f:4b:36:a4:92:53:0d:05:
63:48:45:f7:2f:7f:aa:27:78:e2:86:56:09:c7:f8:
66:43:37:35:13:cf:ec:65:e4:90:f8:19:a6:65:2e:
fa:19:8a:18:30:fa:30:e0:ae:aa:38:2b:ab:53:9e:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:75:D9:B1:8E:96:79:7B:CD:E0:CF:D7:B7:B9:87:0C:08:89:7B
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/Ncp12bGOlnl7zeDP17e5hwwIiXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.16.0/24
185.91.24.0/22
IPv6:
2a00:1932::/32
Signature Algorithm: sha256WithRSAEncryption
ae:08:05:7c:ac:4c:64:88:a6:98:cd:8e:52:44:c0:ed:47:34:
64:aa:ce:8f:c5:fb:d6:06:ff:a8:fb:12:ac:5f:bc:e9:b3:3b:
2a:6e:10:2d:90:0a:37:d3:8d:41:b6:43:82:4c:e4:03:3f:e7:
12:bd:23:81:9f:94:ae:a8:bd:11:cf:51:0e:a6:95:14:ac:ca:
ac:94:ad:cd:a6:fc:c0:13:59:c5:41:39:40:a5:02:ae:29:f5:
8f:5c:13:3f:34:65:9e:33:99:4a:83:b0:bb:1f:47:15:9e:9b:
f4:97:82:e3:42:26:fd:c0:6e:77:4a:83:f7:36:4b:9d:15:a4:
c7:b8:2d:78:76:77:84:f6:b7:b8:cb:79:e5:f8:69:0e:9b:f4:
fc:90:56:15:f8:c3:2c:ff:87:5f:91:10:e5:41:fc:01:e4:5c:
5b:16:c8:99:dc:9d:d2:64:ff:b1:3b:d2:6f:cc:1d:f2:f7:a5:
12:9e:fd:43:d7:77:19:f4:1c:08:5b:9c:86:05:3c:01:b0:5d:
e7:74:15:89:85:00:89:53:90:f0:6e:b1:60:52:3a:7b:4f:bc:
b2:52:c5:f4:9e:25:93:ea:0d:20:de:4b:19:bd:90:9e:ec:e4:
44:7f:5c:8f:b9:a6:0a:84:35:9d:3a:6b:6d:17:92:1d:3b:b5:
41:87:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:19 2026 by rpki-client