Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/nMCWTAdhKSMdxB_y_pexUq5LNoc.roa
File: nMCWTAdhKSMdxB_y_pexUq5LNoc.roa (raw, json)
Hash identifier: BC4uuAAEUU6uznWOrp48T+4GXzVn1vOOZMng6VoU7Kw=
Subject key identifier: 9C:C0:96:4C:07:61:29:23:1D:C4:1F:F2:FE:97:B1:52:AE:4B:36:87
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019D6C8EA1E639DAEE4DA9697D7DC8A5CF25
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/nMCWTAdhKSMdxB_y_pexUq5LNoc.roa
Signing time: Wed 08 Apr 2026 10:06:20 +0000
ROA not before: Wed 08 Apr 2026 10:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205719
IP address blocks: 88.210.62.0/24 maxlen: 24
207.89.20.0/24 maxlen: 24
207.89.21.0/24 maxlen: 24
216.162.45.0/24 maxlen: 24
2a14:a087:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:8e:a1:e6:39:da:ee:4d:a9:69:7d:7d:c8:a5:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Apr 8 10:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cc0964c076129231dc41ff2fe97b152ae4b3687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:86:c1:a4:13:59:53:25:30:6b:7b:6f:18:
30:99:6f:a1:88:44:f3:4f:10:31:d0:ab:ee:b7:1b:
a1:b2:9d:79:24:2c:20:bd:25:ee:26:ee:b8:0e:0a:
8c:e4:6f:28:5f:e5:f2:58:cc:c1:b8:6b:83:ac:91:
f0:dc:49:b4:30:fd:5f:28:c2:f1:db:01:6b:74:a9:
eb:f9:b0:c3:d6:67:9f:ef:23:cb:a0:79:d3:93:aa:
1d:78:26:21:c7:16:56:a7:a1:09:a5:71:d6:6e:eb:
2a:7e:a2:4a:2a:6d:a6:88:cc:1a:7c:33:89:7c:27:
03:bb:7a:32:29:56:a9:5d:15:da:98:61:58:16:ac:
45:24:9c:17:91:bf:5f:ee:45:49:33:1f:57:57:2b:
ad:05:cd:86:d9:4b:4a:5e:0c:7d:9e:ee:0f:2c:ab:
e6:2a:6f:51:19:f0:31:8a:22:16:ff:a0:3d:94:26:
10:a9:f4:76:55:45:c6:3d:00:fc:fd:65:1e:50:3a:
66:ef:d7:fe:90:f2:f3:d4:d0:9d:1f:ad:3c:e1:16:
7c:97:71:3c:c9:3c:03:58:33:08:05:d9:15:db:af:
2e:5c:88:36:ec:d2:d1:2f:20:97:26:3a:4e:5f:e2:
6f:30:90:ac:d4:94:20:96:71:93:60:3c:7b:29:2c:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:96:4C:07:61:29:23:1D:C4:1F:F2:FE:97:B1:52:AE:4B:36:87
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/nMCWTAdhKSMdxB_y_pexUq5LNoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.62.0/24
207.89.20.0/23
216.162.45.0/24
IPv6:
2a14:a087:2::/48
Signature Algorithm: sha256WithRSAEncryption
87:32:41:b1:99:05:54:a3:b5:ff:00:49:45:70:4f:d7:36:77:
75:74:d5:d9:1c:e1:bd:5c:d6:d2:83:7e:7c:81:8d:70:c7:52:
b2:1d:23:5e:64:ea:65:9c:86:41:04:38:a1:2f:3d:1f:bb:bd:
80:b0:44:8e:2a:d9:55:52:90:6a:19:0c:9f:f9:b8:4c:1a:17:
58:2a:45:68:80:50:0f:c2:33:a7:c9:3c:ac:1a:81:47:4e:81:
ac:c7:df:b9:73:ab:a3:be:08:5f:b5:94:1b:02:b4:a7:4f:1d:
19:bd:53:04:f7:2d:87:74:93:b1:c6:86:4b:49:ac:5f:75:c7:
4d:df:e5:c3:3f:80:05:cb:13:81:68:af:66:8a:dd:07:ca:c3:
e9:e8:36:7f:f2:87:29:14:49:28:a6:c0:05:9a:60:f1:91:49:
f5:0f:14:f6:45:af:19:ff:b4:1d:71:17:1e:2c:f2:a9:8a:3c:
f8:d1:61:a6:3b:93:89:77:97:c1:f8:f1:9e:e1:b1:9c:db:7f:
ae:3a:bd:19:41:26:e1:82:35:e1:1e:31:a3:71:19:7b:7b:ab:
a2:11:87:38:cd:fb:95:0c:1a:27:05:cc:52:87:8d:27:58:45:
58:d7:a1:ba:a0:11:dc:ce:5d:9c:a4:65:2e:73:e2:21:29:11:
de:e3:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:42 2026 by rpki-client