Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa
File: Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa (raw, json)
Hash identifier: tWFA6luZXm6+YFp43tgoM3FIlmo/3WZAxBWjup0VIJs=
Subject key identifier: 37:3D:D2:5F:58:A5:8B:F8:4C:3B:FD:6C:29:5F:99:F9:5B:3E:74:58
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019B797DD95BBB948816DA33CC3409C59E37
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa
Signing time: Thu 01 Jan 2026 12:17:29 +0000
ROA not before: Thu 01 Jan 2026 12:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8803
IP address blocks: 193.5.172.0/22 maxlen: 22
193.8.176.0/24 maxlen: 24
193.8.177.0/24 maxlen: 24
193.8.178.0/24 maxlen: 24
193.8.179.0/24 maxlen: 24
193.8.180.0/24 maxlen: 24
194.124.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:d9:5b:bb:94:88:16:da:33:cc:34:09:c5:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Jan 1 12:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=373dd25f58a58bf84c3bfd6c295f99f95b3e7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:5f:3c:e3:90:cd:5a:29:9c:ff:6e:c0:96:
63:7b:99:65:ed:26:1d:26:d1:29:9a:f3:63:b2:39:
b7:08:06:a8:df:2c:12:5d:85:c6:dd:6f:4b:e7:ed:
33:9a:6f:5f:22:27:b1:dc:fa:fe:c4:89:59:ff:84:
58:0c:b4:ac:e0:66:a8:ad:68:4b:9f:b6:b1:8b:d0:
97:17:93:89:dd:ca:69:a2:11:39:a5:c4:51:2b:84:
60:a5:2a:e3:66:96:7a:a8:ba:5e:45:b4:60:5e:e2:
95:71:2b:3b:cd:8c:db:f2:c9:51:91:ef:e8:f3:70:
d9:ac:9b:4e:5e:a7:65:2a:4b:46:37:2d:5c:e5:33:
2f:30:66:15:87:61:41:fd:90:11:19:07:e7:05:b3:
af:10:f4:74:51:e1:e1:03:3f:09:e7:48:fe:ea:17:
35:00:c3:92:1b:60:77:1c:2b:55:e0:bb:58:1d:3f:
6a:08:a9:5e:86:d1:d1:20:96:1b:72:15:0b:67:79:
31:b4:8e:a7:c0:ff:7e:8a:8d:78:a2:80:f4:a6:65:
8b:6c:fb:dd:8f:54:61:ea:3b:e0:2b:da:f8:98:d0:
b8:e9:6b:6b:bf:d7:ee:72:e2:b7:6c:ff:82:7c:29:
22:16:98:72:48:e3:ba:51:2a:77:24:45:45:88:03:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:D2:5F:58:A5:8B:F8:4C:3B:FD:6C:29:5F:99:F9:5B:3E:74:58
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.172.0/22
193.8.176.0-193.8.180.255
194.124.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:82:19:64:4b:4e:4e:ce:de:9c:be:43:b3:f3:4d:97:96:9e:
d8:77:5b:7a:ac:f8:fe:83:83:3b:d7:69:ac:6f:d9:33:5a:d7:
4f:d7:75:01:f8:16:b6:d3:67:53:e6:54:88:dc:83:b2:f4:ec:
45:12:07:72:75:de:2b:96:9d:c3:97:56:64:4b:f2:53:32:c6:
3b:40:73:f6:76:2e:4a:cf:82:29:55:49:b4:63:f4:7a:be:d6:
37:66:ee:cf:71:5b:48:3f:63:ce:59:33:d2:c1:f8:55:7b:73:
16:dc:f7:af:7e:25:93:5b:3b:d6:22:9f:3c:00:43:f3:dd:a8:
d4:20:88:c8:bb:6e:86:9e:7e:7d:84:5b:8a:00:c5:56:4d:1e:
9a:20:9a:6d:d0:7d:16:0f:58:7e:28:cb:39:75:58:83:99:78:
34:2c:5a:db:d4:32:c7:6f:47:5c:67:f5:20:7f:ad:55:b1:11:
d2:14:ac:e9:e6:1c:d7:99:fe:84:d8:0a:dc:63:35:3b:5d:86:
7a:d2:b4:1a:75:85:0c:f3:27:d5:0b:ed:2d:cd:d0:c5:0a:95:
56:3b:63:72:97:bf:7b:b0:69:de:70:58:f8:05:e3:5f:07:56:
98:e0:d3:0b:1d:99:ec:af:ef:d6:7d:8e:eb:4f:13:7f:ea:56:
3b:40:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:11:07 2026 by rpki-client