Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nNVJkloGW526ZABz9LPNISAtKN0.roa
File: nNVJkloGW526ZABz9LPNISAtKN0.roa (raw, json)
Hash identifier: tPtqQY0TC8mVsaqu4oW9EbBZOPk/D/X3l5MOxtY0Kp0=
Subject key identifier: 9C:D5:49:92:5A:06:5B:9D:BA:64:00:73:F4:B3:CD:21:20:2D:28:DD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08A1D42A0546FF9D62919FDEC3F95833E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nNVJkloGW526ZABz9LPNISAtKN0.roa
Signing time: Thu 10 Sep 2026 06:59:28 +0000
ROA not before: Thu 10 Sep 2026 06:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401984
IP address blocks: 82.108.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1d:42:a0:54:6f:f9:d6:29:19:fd:ec:3f:95:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 10 06:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cd549925a065b9dba640073f4b3cd21202d28dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:19:91:96:1c:e4:cc:aa:fb:1f:92:67:2d:
65:dd:50:13:ca:25:25:8b:c4:93:25:d2:6d:9c:58:
64:21:12:18:d7:df:55:72:6b:5a:6c:e9:e7:a5:ad:
87:01:30:f3:f0:79:e3:63:04:f9:cc:77:d6:05:4f:
fe:04:a5:68:bd:78:74:e4:fc:2a:7b:61:8f:ac:2d:
d6:b5:6c:8e:be:e8:e3:5d:a8:a3:d2:ad:d3:0c:a2:
eb:d4:ca:c7:fc:39:ed:82:52:54:df:ff:04:91:75:
44:97:40:b1:40:a7:f7:e4:59:36:27:e1:ec:5b:70:
93:1e:34:f1:7a:54:ed:56:60:65:b4:d9:b7:fc:c0:
28:84:bf:9a:4b:ae:f7:6d:68:cc:6c:5f:58:50:a0:
d9:c6:b3:13:76:74:0d:51:d1:fe:5a:38:4f:b2:96:
dd:b8:ed:a8:ac:8d:50:e3:73:84:d1:49:3b:2d:bf:
7b:ff:eb:2c:1a:f9:2c:d7:73:f2:e6:61:44:41:cc:
93:4c:b0:20:97:fc:66:38:3f:b0:eb:a2:b8:47:1d:
84:e6:14:1e:dc:e9:30:5a:8f:6f:e7:f9:42:d2:c6:
d9:4a:a5:88:ac:02:21:8b:12:ef:d5:21:a6:39:08:
05:16:5e:f0:5c:63:c2:6d:b2:01:02:12:5e:c1:91:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:49:92:5A:06:5B:9D:BA:64:00:73:F4:B3:CD:21:20:2D:28:DD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nNVJkloGW526ZABz9LPNISAtKN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:af:13:06:28:35:e2:56:18:58:7c:9a:6d:a1:10:93:a8:17:
36:1a:dd:06:2f:fa:db:94:b0:c6:1e:2c:35:29:fa:ab:94:c9:
0f:71:0c:20:2f:71:cf:3a:4a:8d:8f:73:20:64:39:46:93:83:
29:a5:bc:44:40:8c:f2:92:6d:2f:a8:9f:d7:a2:85:3a:0c:dd:
08:4e:c3:8b:a0:5e:b1:ac:2f:1e:39:8c:47:6f:2c:89:92:09:
1e:5d:8b:79:5e:58:43:78:c2:6e:54:7f:4c:23:67:f7:e5:cf:
1a:c7:c7:e5:c2:d3:c8:43:b1:80:70:7c:93:54:86:48:8e:58:
65:50:52:cc:8d:4d:d4:4d:e8:9d:fa:5a:52:81:60:36:8f:60:
99:78:18:6b:0f:6f:db:19:9f:63:33:fe:17:f8:79:7e:40:ad:
9a:77:a5:fd:04:5d:5d:44:d2:ab:35:89:89:43:0a:64:0c:08:
5a:56:9e:b8:9e:1f:29:02:fc:41:f7:37:ee:51:2a:94:11:46:
f3:d6:cc:5c:f0:31:f1:be:0b:ae:4c:24:80:bb:da:c5:e3:f8:
1d:0b:bf:77:a2:4f:52:7f:8e:9e:91:29:39:69:c6:94:23:13:
37:9e:e4:72:69:48:19:e7:cf:72:26:97:75:d7:c2:68:dd:2c:
b0:b3:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:46 2026 by rpki-client