Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NGtSOpih_RmkEVDFl0Q3HW7bBuE.roa
File: NGtSOpih_RmkEVDFl0Q3HW7bBuE.roa (raw, json)
Hash identifier: srisolAPpfKl/APr6TQ9chUVtYM+my32I+rlaSig/+o=
Subject key identifier: 34:6B:52:3A:98:A1:FD:19:A4:11:50:C5:97:44:37:1D:6E:DB:06:E1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019C060DED3DF09E2B0D1A9BF15644B7199C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NGtSOpih_RmkEVDFl0Q3HW7bBuE.roa
Signing time: Wed 28 Jan 2026 19:21:41 +0000
ROA not before: Wed 28 Jan 2026 19:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 89.251.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:06:0d:ed:3d:f0:9e:2b:0d:1a:9b:f1:56:44:b7:19:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 28 19:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346b523a98a1fd19a41150c59744371d6edb06e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:2d:40:5d:f8:b6:f4:69:ab:2c:c3:59:80:
d2:22:a0:62:2f:21:2e:52:99:42:98:29:2f:a6:40:
f0:08:60:c7:76:31:8d:e8:e5:45:82:ac:93:39:52:
d2:62:21:d5:fd:4f:3a:8f:9f:da:f7:d0:5a:eb:9a:
a6:38:c2:1c:04:b8:c4:00:05:c7:f3:a8:16:c6:5d:
72:a3:dc:da:7d:69:46:86:89:6c:5b:c5:fd:81:9f:
34:fc:9d:3b:56:e0:30:05:07:b0:ec:33:11:c2:68:
a5:33:d0:f0:24:31:30:2a:cf:4b:ce:a9:d5:d6:91:
a2:af:31:e2:bb:31:22:8f:ef:7e:33:17:e1:49:0f:
68:2d:ef:da:61:16:ee:f3:fb:bb:78:cd:27:e0:a1:
93:72:f4:c3:b7:9c:b8:56:60:85:4d:76:2d:43:da:
e0:01:f8:ce:61:f0:47:38:3b:38:6c:67:fe:d1:2e:
01:71:c7:26:34:e3:2e:e2:8c:23:8a:28:ef:7f:1d:
4a:49:02:28:89:8f:10:22:d3:5b:f5:39:be:f1:73:
14:38:47:83:f3:d9:52:87:69:bd:0b:d5:0b:2e:93:
b5:29:41:a5:ee:cd:2d:60:73:c7:c1:e8:1c:43:ad:
5f:0d:de:2b:29:7d:eb:b8:31:70:35:56:3a:57:28:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:52:3A:98:A1:FD:19:A4:11:50:C5:97:44:37:1D:6E:DB:06:E1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NGtSOpih_RmkEVDFl0Q3HW7bBuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f4:a1:43:9d:5f:8b:b0:f4:0d:ca:52:49:6c:7c:bf:03:c3:
dd:19:43:25:87:44:4c:9b:43:d6:6f:a6:7c:d9:83:eb:14:4e:
e9:76:b0:b6:b9:0f:c9:30:69:52:44:73:d0:72:61:73:e0:16:
3d:ca:8f:6d:91:ff:e1:ec:bf:95:31:28:c2:0b:19:03:7c:8b:
0d:fc:00:a7:46:69:9f:60:5f:4e:53:86:25:75:ab:3d:6b:dc:
c7:e3:46:41:4a:ba:04:b9:4b:07:48:8c:b8:f1:bb:6b:3b:9f:
3c:2d:5c:ff:b8:bf:32:0f:61:a0:78:80:bb:cb:93:4d:59:6d:
23:5e:dc:3b:a8:d6:a7:8d:9e:e9:c3:18:0a:b7:a4:62:03:c8:
65:12:ad:ce:d2:c0:a1:60:51:d7:ae:40:16:1d:26:d6:42:4a:
c5:8b:03:e4:f3:a4:e1:e3:dc:31:f0:4c:35:5a:ff:f2:85:95:
e1:49:7a:8a:84:ab:af:10:48:5b:7b:fa:75:f8:ab:4d:5c:cf:
ed:e5:7d:4d:69:06:6f:51:b0:a2:9d:d2:de:b2:c4:0e:b6:96:
8c:48:1b:fb:e1:9d:59:6d:4e:4f:06:5d:75:c4:c0:cf:7c:85:
c9:8f:2c:9f:ca:dc:e5:f8:a8:cf:77:b8:e5:3a:b4:13:69:a8:
56:14:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:27 2026 by rpki-client