Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_NZTCEQAswO8m4KIBaXtz4uWAOI.roa
File: _NZTCEQAswO8m4KIBaXtz4uWAOI.roa (raw, json)
Hash identifier: tqwLqbZLZn6kTQj8VJkIlJdvSkftbnaxgbR2Iv6u96U=
Subject key identifier: FC:D6:53:08:44:00:B3:03:BC:9B:82:88:05:A5:ED:CF:8B:96:00:E2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0A3F798E1EB777CB66B24E77FCCA20F15
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_NZTCEQAswO8m4KIBaXtz4uWAOI.roa
Signing time: Tue 15 Sep 2026 07:28:27 +0000
ROA not before: Tue 15 Sep 2026 07:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 92.71.9.0/24 maxlen: 24
92.71.12.0/24 maxlen: 24
92.71.23.0/24 maxlen: 24
92.71.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:f7:98:e1:eb:77:7c:b6:6b:24:e7:7f:cc:a2:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 15 07:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcd653084400b303bc9b828805a5edcf8b9600e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:a2:27:51:02:f4:5c:e3:53:c3:e3:b1:8d:
63:01:38:b9:f9:a7:ca:e8:98:95:7b:a9:e0:67:f7:
67:55:86:e2:a5:f0:08:23:48:17:d0:d6:75:e0:cc:
8a:0e:3e:3f:57:bc:80:cd:49:3f:59:5f:88:fe:75:
30:e3:42:87:24:e4:cb:a2:1a:ba:96:62:ae:ac:72:
b1:7a:01:7e:b7:4c:79:e6:12:95:7c:45:dd:42:5e:
96:98:c8:46:dd:da:12:9d:ed:69:07:66:d7:2e:e7:
d0:f4:6b:b6:4e:ef:9d:85:3f:ea:3a:12:7a:1e:73:
4a:ec:f9:ce:4a:4d:18:86:94:95:be:f5:47:e9:e8:
26:be:32:a4:8b:fd:fa:c4:95:e7:6e:9f:89:c9:b6:
af:6c:16:6e:12:65:86:d3:9d:fa:62:76:e1:5a:69:
d6:c2:09:06:70:0f:85:d3:77:f9:4f:a4:4d:ae:fd:
a4:5d:34:a1:8c:99:5f:cc:77:03:38:f3:fe:d7:a7:
70:21:56:b4:2b:2a:c8:49:e9:72:76:25:27:09:91:
b7:2b:16:b1:a0:ff:58:31:6f:83:1c:a9:ba:f3:83:
8b:af:a1:75:82:69:b7:f1:13:63:f6:4d:99:5f:9e:
f3:45:21:5c:7e:fb:6b:d3:58:b1:00:46:36:1a:d8:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:53:08:44:00:B3:03:BC:9B:82:88:05:A5:ED:CF:8B:96:00:E2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_NZTCEQAswO8m4KIBaXtz4uWAOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.9.0/24
92.71.12.0/24
92.71.23.0/24
92.71.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9e:68:15:6a:59:34:26:23:9f:37:7a:a0:76:94:d5:18:48:
22:bf:42:dc:2c:d7:c4:5f:97:24:a3:d7:5d:fc:43:4c:3a:7f:
34:b3:e4:f0:07:65:11:cf:44:b2:96:30:bc:cd:bb:82:02:78:
01:1f:87:9f:38:b0:60:5b:62:82:fb:4a:0c:ad:26:7f:56:16:
b4:61:05:79:3a:0f:52:07:47:27:60:ce:86:bb:76:f1:54:4c:
15:df:2f:8e:36:81:5a:e3:b8:53:d2:86:3a:6c:9d:ce:62:9d:
5d:af:dc:18:3e:9c:df:60:42:80:0d:4e:77:ff:a1:9f:f3:c6:
26:a6:e1:1b:72:fb:32:98:77:9d:c0:66:db:95:3c:12:25:18:
1e:3f:39:58:11:68:8c:9f:28:73:3c:38:26:f8:2e:cd:a6:dd:
59:69:5b:03:d4:97:d6:75:ce:2b:59:75:06:a8:b2:0a:a0:9c:
7c:ef:36:aa:c3:84:b9:98:ba:12:98:32:0e:a2:94:46:6d:7c:
a1:64:32:d3:27:c2:1d:80:6e:dd:93:dc:0c:8f:83:3e:43:9c:
03:45:8b:f5:a7:c8:ae:d7:a3:43:4f:9a:26:a2:b7:45:52:b3:
93:0d:db:5d:9f:dd:21:70:16:30:26:c9:91:6a:1c:9a:8f:bb:
ce:59:d2:46
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaCj95jh63d8tmsk53/Mog8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTE1MDcyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2Q2NTMwODQ0MDBiMzAzYmM5YjgyODgwNWE1ZWRjZjhiOTYwMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuOiJ1EC9FzjU8PjsY1jATi5+afK
6JiVe6ngZ/dnVYbipfAII0gX0NZ14MyKDj4/V7yAzUk/WV+I/nUw40KHJOTLohq6
lmKurHKxegF+t0x55hKVfEXdQl6WmMhG3doSne1pB2bXLufQ9Gu2Tu+dhT/qOhJ6
HnNK7PnOSk0YhpSVvvVH6egmvjKki/36xJXnbp+JybavbBZuEmWG0536YnbhWmnW
wgkGcA+F03f5T6RNrv2kXTShjJlfzHcDOPP+16dwIVa0KyrISelydiUnCZG3Kxax
oP9YMW+DHKm684OLr6F1gmm38RNj9k2ZX57zRSFcfvtr01ixAEY2Gth/GwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPzWUwhEALMDvJuCiAWl7c+LlgDiMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvX05aVENFUUFzd084bTRLSUJhWHR6NHVXQU9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXEcJAwQA
XEcMAwQAXEcXAwQAXEc9MA0GCSqGSIb3DQEBCwUAA4IBAQBfnmgValk0JiOfN3qg
dpTVGEgiv0LcLNfEX5cko9dd/ENMOn80s+TwB2URz0SyljC8zbuCAngBH4efOLBg
W2KC+0oMrSZ/Vha0YQV5Og9SB0cnYM6Gu3bxVEwV3y+ONoFa47hT0oY6bJ3OYp1d
r9wYPpzfYEKADU53/6Gf88YmpuEbcvsymHedwGbblTwSJRgePzlYEWiMnyhzPDgm
+C7Npt1ZaVsD1JfWdc4rWXUGqLIKoJx87zaqw4S5mLoSmDIOopRGbXyhZDLTJ8Id
gG7dk9wMj4M+Q5wDRYv1p8iu16NDT5omordFUrOTDdtdn90hcBYwJsmRahyaj7vO
WdJG
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:49 2026 by rpki-client