Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nb9txcj7Lar_SYzKynVJuhhzPPE.roa
File: nb9txcj7Lar_SYzKynVJuhhzPPE.roa (raw, json)
Hash identifier: sQI7/vYecDpbgP5FmF35anm/ANg3egZoQyllcZPR77g=
Subject key identifier: 9D:BF:6D:C5:C8:FB:2D:AA:FF:49:8C:CA:CA:75:49:BA:18:73:3C:F1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0874085469C783DCEFCC4A7E9D7822A45
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nb9txcj7Lar_SYzKynVJuhhzPPE.roa
Signing time: Wed 09 Sep 2026 17:39:07 +0000
ROA not before: Wed 09 Sep 2026 17:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 45.88.12.0/24 maxlen: 24
89.125.94.0/24 maxlen: 24
140.225.208.0/24 maxlen: 24
140.225.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:40:85:46:9c:78:3d:ce:fc:c4:a7:e9:d7:82:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 9 17:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dbf6dc5c8fb2daaff498ccaca7549ba18733cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:ef:94:7e:41:e8:04:26:8b:85:df:a0:c6:
e3:fa:0b:d5:1d:67:74:44:9f:cd:c1:26:89:3c:d3:
44:1c:f6:04:7e:7b:84:a0:93:2d:f0:73:c7:d6:e4:
90:31:fb:d8:8d:fc:67:c7:22:6c:f6:47:54:5c:4b:
e9:d5:3d:76:fd:e7:de:c0:71:d3:25:2a:47:94:53:
15:b4:69:90:f5:f5:75:09:42:b0:da:2e:9c:0c:6f:
c6:25:e3:59:11:51:b5:44:bc:aa:c4:5e:3e:7f:4d:
83:94:0c:ab:1b:5f:95:9a:49:a6:18:01:2c:a9:dd:
82:9e:ff:08:7e:b5:48:eb:91:61:88:3f:30:a8:19:
b7:0a:b4:02:c4:a9:5d:cc:cd:8a:82:01:67:5b:f3:
09:8b:ba:09:43:62:64:26:4d:15:50:62:90:42:7d:
6d:c7:e8:e6:67:8e:2a:fc:de:42:d8:a0:c3:02:1f:
1a:fb:2d:0e:aa:89:55:2e:9b:8b:23:41:92:99:56:
b9:71:87:6f:a4:45:1d:d0:c6:97:bd:d4:3d:b3:a0:
f5:d2:4a:45:c4:62:38:bb:fb:ba:7e:32:4f:e0:b5:
06:35:ad:b9:0c:a4:42:c4:55:ce:7b:32:b5:ee:40:
0e:be:2c:12:2b:41:fc:e1:6d:94:90:1c:3b:2c:c3:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:6D:C5:C8:FB:2D:AA:FF:49:8C:CA:CA:75:49:BA:18:73:3C:F1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nb9txcj7Lar_SYzKynVJuhhzPPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
89.125.94.0/24
140.225.208.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:6d:b1:bc:8f:cf:d1:5a:bc:c8:32:21:2d:3c:52:23:97:58:
11:10:ea:d3:46:4a:31:c7:17:3e:f5:ad:b8:ee:37:7b:59:93:
07:4f:40:66:fd:ad:4d:6b:7f:fa:2b:6f:67:83:5d:5b:ac:db:
6e:fd:a3:6a:85:0e:a1:a5:bc:b4:02:02:a9:27:15:ee:19:c2:
91:f9:99:34:39:d9:b0:64:f3:7c:2b:79:0a:16:26:b9:0f:9c:
a0:c4:b2:82:ff:11:be:59:b6:19:e9:0c:84:73:b5:ac:14:9d:
35:d4:f4:21:1b:61:ba:39:e2:cd:7c:28:10:3e:8d:a9:fd:f1:
eb:72:4e:99:d4:9a:9d:49:01:e2:83:fb:ac:74:32:43:ab:6c:
d9:f0:9e:34:45:d1:25:f2:3d:28:20:22:ac:6f:17:00:1c:e9:
55:4a:ab:41:5a:cd:a6:46:e1:a2:e7:40:8e:b6:04:04:fc:c8:
cc:39:21:57:21:13:2c:26:72:c5:0f:17:fb:0a:98:e9:19:87:
6a:98:4f:b5:2b:aa:5b:ce:d7:df:c9:b7:e9:74:1f:ea:9d:17:
90:de:08:bc:c5:b0:d9:24:7c:dc:dc:e0:80:62:ca:c5:6e:f8:
54:93:f5:30:82:d8:f1:6a:9a:e4:28:1f:cf:63:2b:29:37:e6:
0c:0d:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:38 2026 by rpki-client