Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Ngjw1vhloIp0UT-nauD8USjCudc.roa
File: Ngjw1vhloIp0UT-nauD8USjCudc.roa (raw, json)
Hash identifier: g4SQj8Dh7gq6fyHaa1thTApOrgQGR2g0qw8Of/lXJ6M=
Subject key identifier: 36:08:F0:D6:F8:65:A0:8A:74:51:3F:A7:6A:E0:FC:51:28:C2:B9:D7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0A913E0BA87AD57941B02D0B745B53FED
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Ngjw1vhloIp0UT-nauD8USjCudc.roa
Signing time: Wed 16 Sep 2026 07:17:27 +0000
ROA not before: Wed 16 Sep 2026 07:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 89.32.173.0/24 maxlen: 24
93.118.176.0/24 maxlen: 24
93.118.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:13:e0:ba:87:ad:57:94:1b:02:d0:b7:45:b5:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 16 07:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3608f0d6f865a08a74513fa76ae0fc5128c2b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:8a:a2:bd:53:7f:ec:15:49:61:65:6f:4b:
6e:57:f6:a5:b8:fc:2b:3e:d5:09:81:db:d4:16:44:
c4:f3:4d:6b:ef:f2:69:75:7e:10:b7:00:58:16:41:
ed:cc:75:25:be:30:94:f4:df:8a:ea:ee:39:1a:19:
75:bc:75:ee:97:0f:52:c0:7f:bb:89:04:df:ce:fe:
3d:a0:20:7f:f9:de:c9:8c:2c:12:3e:b0:c1:8b:9f:
b0:91:29:5c:4a:66:bc:03:9c:09:02:5f:3a:82:00:
f1:78:27:61:94:9f:eb:41:f3:bc:c1:ab:89:eb:45:
26:3a:e4:a3:6d:51:a7:d5:4d:ed:e8:d3:eb:c0:02:
dc:52:c2:7f:46:1f:fa:c1:ea:ff:2b:72:f6:e5:2d:
95:84:e1:10:a3:a0:ce:c9:fc:2c:25:b8:a2:9e:cf:
99:4c:2a:35:f9:e7:a4:38:1c:64:6c:d8:f6:79:06:
cf:db:fb:46:3d:83:9a:50:33:8a:07:98:25:6d:fa:
7e:6f:d7:b0:11:ca:12:f0:4d:7e:ba:f4:8c:b2:55:
14:73:7c:7c:eb:51:a5:b2:42:d7:78:29:ee:08:57:
9d:26:5d:3c:c5:6f:35:24:de:6c:aa:9e:11:ee:a3:
3d:69:ed:4e:b8:6d:35:da:c2:74:d9:4d:b6:d8:a8:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:F0:D6:F8:65:A0:8A:74:51:3F:A7:6A:E0:FC:51:28:C2:B9:D7
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Ngjw1vhloIp0UT-nauD8USjCudc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.173.0/24
93.118.176.0/24
93.118.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c0:6d:65:5b:11:36:61:d7:b2:ab:2e:1b:68:47:9d:84:3c:
43:aa:26:4a:c5:91:6d:fe:b5:b2:79:3f:7c:ab:6b:67:7f:43:
f0:a2:43:1a:4a:3e:1b:7c:17:1c:d7:b1:97:b3:31:65:13:2e:
f2:3a:49:1c:3d:5b:ac:96:2e:34:06:67:37:88:6b:0c:d5:b7:
8a:da:b4:27:6f:c9:5f:5a:8e:c6:4a:52:cb:cd:81:67:01:27:
c9:c0:65:72:10:72:ee:40:2a:f0:5a:e0:2c:bf:68:98:40:c9:
b9:db:13:73:48:62:51:23:d4:47:8c:3e:eb:40:4a:1e:fe:73:
39:49:bd:dc:8c:5d:f9:fd:af:c4:09:cf:d4:bf:5f:29:e4:59:
92:21:8c:5c:44:5a:94:d7:42:34:d8:ef:1c:03:33:fb:9a:d1:
5b:5e:eb:6b:28:10:18:16:f5:8e:77:70:a5:c8:e4:ce:bd:f7:
24:b5:5c:ce:f1:a2:6b:97:2a:00:ea:e3:ff:f9:9a:4f:79:1f:
e0:6c:ee:2b:4e:bc:f0:43:fe:da:43:87:24:c7:90:38:13:06:
3f:19:85:72:e8:1f:be:01:d5:e5:47:84:46:ec:75:8d:64:fb:
36:81:69:2b:14:af:d8:64:7c:3d:92:e1:6d:26:a2:9a:84:dd:
05:c1:58:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:34 2026 by rpki-client