Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nemVn7TvE_9JaOaUS94Ophfmpbk.roa
File: nemVn7TvE_9JaOaUS94Ophfmpbk.roa (raw, json)
Hash identifier: wcwuBqkKDIIwYm72r9u67nLKB9uiLtJ4jc8RIy6h9bQ=
Subject key identifier: 9D:E9:95:9F:B4:EF:13:FF:49:68:E6:94:4B:DE:0E:A6:17:E6:A5:B9
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019FC7F11E4A8F6DB7389EF5CA1A5078E273
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nemVn7TvE_9JaOaUS94Ophfmpbk.roa
Signing time: Mon 03 Aug 2026 14:04:55 +0000
ROA not before: Mon 03 Aug 2026 14:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.133.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 09:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:f1:1e:4a:8f:6d:b7:38:9e:f5:ca:1a:50:78:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 3 14:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de9959fb4ef13ff4968e6944bde0ea617e6a5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:e2:2a:16:b4:26:84:60:34:8b:fe:60:b0:
6e:d1:33:b4:fb:6f:a7:d6:29:6d:b6:7a:60:35:d6:
b3:0e:45:3e:e4:f8:c8:21:6a:79:5f:a0:42:8a:2a:
93:19:3b:af:08:fc:1f:80:68:28:d0:72:b4:55:20:
7f:98:b3:c5:af:6d:aa:fb:3b:59:91:08:fc:dd:85:
33:af:66:ab:ba:5d:17:b8:7b:43:67:df:44:54:3d:
60:a0:06:c5:de:81:c8:2f:62:ba:08:e2:fa:1c:90:
01:3a:19:00:e3:d5:a7:ea:1e:3c:28:e0:f7:07:7d:
cb:a2:0b:28:2a:6c:27:3d:81:f0:31:0b:af:ab:ff:
18:b9:fa:42:2a:d8:49:33:eb:31:af:3e:22:22:a5:
0f:49:fb:dd:61:c1:6d:5d:2a:3a:41:5d:e7:10:ac:
0d:18:99:1b:df:86:b0:e9:bd:2d:09:4c:ae:53:26:
59:94:2e:05:4c:71:db:bd:c9:81:55:3a:d3:b0:0d:
8e:af:e0:59:d2:99:35:08:de:9b:5b:31:64:ae:17:
87:59:70:9d:de:59:fa:ef:49:85:76:6b:e0:49:13:
3c:bf:de:cf:4d:03:97:5f:c9:90:20:b5:16:cd:0b:
ef:4c:d6:9e:6b:6e:fb:e8:a2:26:df:30:a1:c5:87:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E9:95:9F:B4:EF:13:FF:49:68:E6:94:4B:DE:0E:A6:17:E6:A5:B9
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nemVn7TvE_9JaOaUS94Ophfmpbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.237.0/24
Signature Algorithm: sha256WithRSAEncryption
84:44:e5:be:eb:5e:bb:a4:17:b9:49:d5:2c:5b:ed:04:d5:8d:
d9:97:ae:c2:55:b1:e2:92:36:d1:d6:02:ee:ec:3f:7f:08:42:
b5:ff:c0:71:94:68:1e:9e:26:b8:48:55:15:c6:ab:32:1d:48:
c8:7d:45:3f:d2:e1:f9:fa:67:53:e5:5c:32:ee:19:01:40:2f:
9d:44:56:01:bf:0a:a8:fb:d8:1c:8b:53:e8:35:00:86:8a:4c:
cb:d0:74:cb:b5:36:ad:3d:93:7b:51:93:56:97:f3:32:c8:47:
25:73:ce:99:f9:91:2d:cd:01:de:10:e9:5c:37:1c:f5:d8:6e:
f1:53:98:86:49:fb:10:5c:92:03:84:2b:dd:35:23:d7:44:fe:
ed:fa:39:e8:a3:31:cc:3b:a9:95:9b:bc:68:e6:64:e3:b9:56:
ae:89:5e:83:e8:a0:b0:8f:70:2c:00:7c:9b:f4:96:20:bc:3c:
ce:52:43:4e:7d:77:48:af:96:97:09:49:97:ff:1d:df:cd:2c:
5b:44:6a:53:27:b7:b1:2f:86:f8:71:e8:bc:f6:03:47:fc:1a:
15:13:ff:46:e7:04:3b:2e:b8:97:dd:6f:d5:7a:a0:35:38:5a:
b5:07:24:bb:4d:f3:ba:58:ce:14:78:1d:8e:43:2b:fa:36:87:
89:ef:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:58:21 2026 by rpki-client