Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/niPlao_tYLOJsC-xIpudPImP4J0.roa
File: niPlao_tYLOJsC-xIpudPImP4J0.roa (raw, json)
Hash identifier: Z1jU2AJfD4s5PFPSlrQXgr5yCkxhn5+AlCnRXlH+p9o=
Subject key identifier: 9E:23:E5:6A:8F:ED:60:B3:89:B0:2F:B1:22:9B:9D:3C:89:8F:E0:9D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0F1A6978352F785F29BEB052612D48348
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/niPlao_tYLOJsC-xIpudPImP4J0.roa
Signing time: Wed 30 Sep 2026 09:30:21 +0000
ROA not before: Wed 30 Sep 2026 09:30:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 79.175.105.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
188.255.193.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:a6:97:83:52:f7:85:f2:9b:eb:05:26:12:d4:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 30 09:30:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e23e56a8fed60b389b02fb1229b9d3c898fe09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:49:0d:ad:ed:cb:2e:f4:b5:10:a8:03:72:
43:06:2c:a5:68:2e:68:07:39:d1:6a:2e:01:82:98:
ea:6d:ab:f4:a6:b5:15:17:f6:f7:04:db:cb:69:01:
b4:d8:7f:2d:6d:4c:b9:e5:15:54:6a:42:f4:48:71:
44:d6:c8:53:91:5d:96:4c:59:bf:5d:66:78:f9:f4:
36:76:6a:bf:42:9e:eb:69:08:21:4f:e5:3e:57:f6:
41:1a:ad:fd:ad:f1:f3:c0:ee:35:9b:a9:03:8c:94:
a3:1c:56:6b:81:f6:3e:fc:b0:f9:05:e4:d1:60:0c:
e2:e5:62:c5:91:37:d4:b3:33:79:95:e3:54:e3:a3:
72:49:59:af:cd:b1:5a:d2:de:d1:2b:60:69:57:22:
8f:d6:18:ce:5c:4c:89:7c:45:0b:58:61:e1:56:dd:
6d:f4:01:ba:50:0f:2d:2c:d9:12:f8:a5:37:80:9d:
2c:f8:6f:e9:3b:51:d1:5d:45:69:cc:39:6d:04:54:
8f:72:1a:e4:42:43:9e:d4:ff:65:7b:f5:ee:ae:80:
c3:74:b5:37:7c:8d:ca:80:e1:ed:d1:1d:b6:c9:7c:
b9:4b:c4:80:1d:2c:1c:65:33:c0:f7:0e:ad:4d:ba:
c3:23:98:bd:6b:e5:e3:3d:77:11:ae:fe:8c:59:0b:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:E5:6A:8F:ED:60:B3:89:B0:2F:B1:22:9B:9D:3C:89:8F:E0:9D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/niPlao_tYLOJsC-xIpudPImP4J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
93.186.71.0/24
188.255.193.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
34:49:2f:45:01:62:b6:84:63:20:f3:24:9d:78:2d:df:d0:b0:
62:36:7c:71:30:e9:b6:42:ec:d1:8a:0d:63:85:56:54:34:2c:
60:c9:65:4b:a8:5c:64:65:a9:98:a3:89:02:f2:9d:ff:ae:64:
08:9a:83:6a:fb:e3:20:bf:c3:2e:6d:d1:ff:85:1c:f8:4f:52:
18:d9:ff:58:e6:3a:c6:1d:2d:d8:3b:bc:3d:b6:74:d5:fc:eb:
fa:0c:7d:3b:ad:aa:3a:0a:fb:48:3b:1f:f8:b7:cd:ad:83:5c:
eb:7e:82:b5:9c:79:e1:d6:72:a5:cb:8c:39:13:e6:0a:f7:54:
d1:74:79:f1:cc:00:47:61:cf:5d:5a:11:fd:9e:a0:27:a4:79:
4c:af:e6:42:3e:c9:80:8c:01:4d:19:cf:0e:c7:19:a4:f9:26:
13:82:11:79:e2:c5:fd:f9:3d:d8:e1:ed:77:28:9c:e2:b5:63:
2f:4f:f4:f3:e0:a6:33:8c:ba:27:eb:cb:fb:2d:99:38:49:a3:
7c:de:6c:81:89:e3:b7:3a:83:b4:4c:64:e2:78:e2:e4:5c:fa:
1a:89:ca:60:f5:16:f8:69:2c:cf:4e:f8:a0:da:7d:9d:47:b6:
2f:06:17:cb:25:b1:94:82:81:97:69:c2:0f:0b:20:cd:fb:4d:
db:19:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:28 2026 by rpki-client