Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/nzUVm79WSsgylBeeF3cmt22tnus.roa
File: nzUVm79WSsgylBeeF3cmt22tnus.roa (raw, json)
Hash identifier: S8jcCAJbBM6A30EhdJUfMapUbEzjWTeiDUgx8PdzK24=
Subject key identifier: 9F:35:15:9B:BF:56:4A:C8:32:94:17:9E:17:77:26:B7:6D:AD:9E:EB
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 01A12020123BB009238FD18F60C8F22CF1FE
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/nzUVm79WSsgylBeeF3cmt22tnus.roa
Signing time: Fri 09 Oct 2026 10:05:35 +0000
ROA not before: Fri 09 Oct 2026 10:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 45.88.44.0/22 maxlen: 22
2a07:3b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:20:12:3b:b0:09:23:8f:d1:8f:60:c8:f2:2c:f1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Oct 9 10:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f35159bbf564ac83294179e177726b76dad9eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:3e:eb:2a:ce:c3:f3:72:ce:57:8e:7d:ed:
4a:05:65:d3:75:02:d9:b3:13:2d:0d:b4:57:29:19:
f3:2f:85:b5:e3:c3:0d:ea:cf:78:f7:fb:e4:1b:cc:
8e:0f:36:a5:5a:04:cc:70:7d:c9:76:7f:4f:f3:50:
5e:f7:b7:82:22:2c:f4:f8:df:e1:c4:3c:a2:6f:8a:
05:3a:0e:bf:75:8e:17:64:80:54:cb:8c:a2:c8:70:
72:78:a3:8e:cc:b2:b9:19:0d:3d:7a:d0:0a:9d:9e:
1a:f8:d7:31:67:e9:c6:6a:e7:f9:54:32:a0:3f:1c:
04:0a:a4:39:1a:72:5f:92:5c:3a:a9:cf:0e:2c:f0:
13:0c:3b:09:2f:44:8e:34:0a:46:37:88:26:a6:39:
ff:8c:78:b3:4e:f2:df:1b:30:28:3b:ae:67:51:ce:
85:fb:95:af:e3:ed:61:bf:0e:92:f0:65:96:e4:4b:
42:59:a0:05:af:31:28:de:8a:52:6d:91:9c:dd:b2:
a1:a4:ec:9e:6c:69:fc:13:1f:c0:5a:20:43:7c:c2:
be:e6:ca:bb:2d:a2:16:b2:ef:bd:78:fe:1f:81:d8:
b6:4b:a4:50:df:d4:8e:ac:0d:55:8a:71:c8:63:9b:
b8:dd:4b:4c:87:7d:05:38:f2:d0:e2:6c:ab:a7:b9:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:15:9B:BF:56:4A:C8:32:94:17:9E:17:77:26:B7:6D:AD:9E:EB
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/nzUVm79WSsgylBeeF3cmt22tnus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.44.0/22
IPv6:
2a07:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
11:6f:fe:f3:78:52:62:87:e5:79:19:89:8e:8d:2e:aa:32:e1:
83:e4:9c:23:aa:58:b7:de:e0:d4:a8:ee:56:7b:ce:38:b9:4c:
66:2e:79:de:4e:e8:2e:e4:91:53:3f:a8:50:8c:a0:22:09:71:
7c:94:56:1d:30:f7:7d:f8:03:a6:ca:ca:0b:46:52:70:00:ff:
d1:b7:03:b1:b2:5b:71:fe:a6:a9:cd:83:90:96:32:93:78:5c:
a9:bf:a7:b9:c1:34:e7:0c:92:b2:6e:93:f6:eb:29:41:57:48:
0e:20:11:a3:2e:aa:e2:36:91:75:84:ee:6f:da:17:44:7a:e5:
f1:59:8e:70:e1:ea:a9:86:64:78:95:d4:f0:41:5c:f0:38:4d:
78:be:a4:8b:2c:18:f6:37:a4:ca:ff:41:bd:8b:f9:ec:89:0c:
82:df:0d:34:0f:26:75:40:2d:05:a3:8b:0e:88:59:47:53:c1:
c0:e9:f6:f6:7a:5b:e4:32:e6:cc:54:a2:6a:25:33:11:23:4a:
cb:35:41:27:86:0f:a6:bb:f1:f1:24:36:d4:6a:e6:ba:39:ca:
9f:c5:75:16:ef:5f:fb:7b:21:e3:6d:7f:b8:6d:ea:b3:24:3a:
e0:5c:37:4a:b8:2f:63:d8:19:38:3a:68:c0:9f:d6:22:a8:8f:
81:68:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:22:43 2026 by rpki-client