Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa
File: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (raw, json)
Hash identifier: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=
Subject key identifier: 35:93:E6:19:F3:25:5C:D5:D5:08:8C:E3:D8:14:0F:9D:02:37:7B:FF
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019C95B5849A10EEE9530BC974A5D45497D0
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa
Signing time: Wed 25 Feb 2026 16:50:26 +0000
ROA not before: Wed 25 Feb 2026 16:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3348
IP address blocks: 93.92.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:b5:84:9a:10:ee:e9:53:0b:c9:74:a5:d4:54:97:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Feb 25 16:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3593e619f3255cd5d5088ce3d8140f9d02377bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:0f:a3:e7:7c:1b:81:84:cf:94:bf:aa:3a:
b7:cf:95:94:ca:c3:ac:6d:24:64:86:e4:6a:74:43:
fb:bb:34:78:58:a3:ea:23:e4:80:1f:43:0f:d8:20:
a2:c0:d8:1a:fd:64:0b:89:7c:b2:26:66:24:93:a6:
e8:c5:c8:db:f4:5c:23:08:b7:6f:c7:2d:c4:d5:96:
4e:a6:d8:2d:de:69:64:21:4e:a1:14:9d:63:0a:c8:
7e:c3:17:a1:72:93:f7:d4:56:aa:ed:0a:96:93:82:
69:e2:90:3d:d6:c2:c7:b3:16:7a:44:e2:ca:b8:e5:
ac:08:72:3a:20:e6:6a:d8:31:83:4d:06:09:5a:d2:
7c:5f:46:19:5f:d7:e1:e8:94:92:ec:5f:52:ed:cc:
83:8f:b3:c2:c3:fa:ac:0d:d5:d5:a0:6e:ee:8f:d8:
68:2c:75:64:9f:53:a2:31:1b:a6:f1:99:fe:bf:4d:
f6:4e:ad:b5:d9:b0:a6:57:b9:bd:c7:36:bb:39:7d:
65:57:16:0e:ee:7c:6d:76:d2:09:eb:6f:c2:f5:da:
90:aa:1b:ed:8a:84:9e:ce:04:8d:14:2b:d5:74:09:
47:ec:7c:87:b3:b4:6a:7b:97:cc:46:95:86:48:c1:
d0:af:da:e2:79:be:4d:35:91:28:e3:32:5f:58:43:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:E6:19:F3:25:5C:D5:D5:08:8C:E3:D8:14:0F:9D:02:37:7B:FF
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:47:45:2b:22:0a:3f:3d:5b:6a:25:06:23:8b:59:a2:ea:fd:
e8:88:d5:15:0f:8a:d7:1e:8b:c1:7b:fe:83:23:30:ac:cd:65:
d5:eb:5d:88:aa:cf:fb:e2:2e:bd:a6:f4:42:2b:fc:00:6b:6e:
9d:93:f5:bf:b9:76:b0:b2:6d:ee:3f:2d:ff:91:8b:1e:16:64:
81:7b:86:c5:bb:dc:b8:b7:5c:5a:0a:d9:9d:0e:6e:c7:bf:2a:
0c:39:35:1f:12:a9:b0:59:9c:23:19:6f:07:82:e4:81:c8:a5:
d1:18:a1:4d:1c:ff:75:2c:17:66:bf:66:8c:99:2a:6a:a7:6b:
55:e6:df:1d:06:e7:2c:f1:5b:0f:bc:36:3e:e2:64:78:b2:ce:
55:0d:30:d9:15:9f:80:09:3a:d0:29:64:94:dc:f5:81:44:ee:
85:63:ee:e7:3a:18:4c:85:e1:25:3e:22:44:41:ca:4f:49:bc:
d1:7c:4e:e4:14:d9:79:a2:75:a5:86:f8:29:5b:d8:4e:58:b6:
e5:0d:a3:a2:4c:fc:35:87:d4:bb:ac:c4:e4:0e:05:35:9d:c7:
fd:50:ec:1c:66:11:4a:83:02:b2:1d:3c:d7:6d:c5:de:a1:55:
74:e2:38:10:7f:43:91:d2:36:6d:ed:68:1d:c5:d4:5d:8c:cd:
a5:38:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:53:10 2026 by rpki-client