Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/NjjGyupk2EJG8TJjJA1Myg_WAwA.roa
File: NjjGyupk2EJG8TJjJA1Myg_WAwA.roa (raw, json)
Hash identifier: 1JLpN2xJETUSv+Ius8OCYEkY3ODiPgVoMCOqIZ1UHNY=
Subject key identifier: 36:38:C6:CA:EA:64:D8:42:46:F1:32:63:24:0D:4C:CA:0F:D6:03:00
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A086442489668E9C52680EC8888A56F16B
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/NjjGyupk2EJG8TJjJA1Myg_WAwA.roa
Signing time: Wed 09 Sep 2026 13:03:27 +0000
ROA not before: Wed 09 Sep 2026 13:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 91.200.253.0/24 maxlen: 24
110.172.189.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:44:24:89:66:8e:9c:52:68:0e:c8:88:8a:56:f1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Sep 9 13:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3638c6caea64d84246f13263240d4cca0fd60300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:c2:70:d0:ea:7b:b0:9c:8e:3b:c1:8b:da:
03:fe:12:b6:45:f8:29:62:67:f1:df:2e:c6:04:5f:
d9:e8:b0:0d:df:ca:25:9a:32:05:a9:01:95:79:0c:
ac:38:c2:37:84:48:7c:2f:67:cc:9d:be:9d:cf:54:
54:e1:6d:05:34:ee:bb:d1:e2:9f:bb:b2:a1:7f:a3:
df:16:8d:0c:d7:e9:52:23:5a:ce:e6:f4:2d:46:b8:
bf:32:50:22:1e:55:61:4a:6a:74:ff:26:c3:37:92:
4d:25:a6:37:b7:c0:fa:20:33:ab:63:91:50:af:10:
e3:f5:7c:ef:7a:2f:ab:0d:b1:24:4e:bb:80:33:9d:
cc:7b:2e:23:2f:69:91:c3:74:30:58:b6:6e:b4:02:
2c:fe:57:5d:49:b1:dd:0b:ff:2b:95:d0:67:e0:86:
da:44:88:cc:bf:c9:9d:51:58:c7:e1:58:d7:94:9e:
6c:66:a2:94:88:10:fb:d7:d8:f4:c6:ff:e6:62:bc:
23:e6:5e:49:b7:9a:ff:9c:e2:a2:eb:3e:89:21:86:
15:8d:3b:82:89:12:e1:ba:58:a9:6d:4d:5d:6a:35:
b1:06:90:1e:70:d7:4d:36:15:5c:62:60:03:93:75:
4e:5e:34:ca:a2:b3:ea:d7:d9:68:12:98:64:c0:a9:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:38:C6:CA:EA:64:D8:42:46:F1:32:63:24:0D:4C:CA:0F:D6:03:00
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/NjjGyupk2EJG8TJjJA1Myg_WAwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
110.172.189.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a4:d1:6f:e9:96:6a:9c:d9:1c:47:55:30:75:3e:48:e0:b4:
4c:85:fc:70:e2:c9:8e:51:66:37:c4:f1:66:8e:47:d1:c6:e2:
6b:f6:30:62:06:ce:ea:36:6d:45:c9:52:de:d1:e7:44:1a:f3:
28:2b:26:1a:eb:6d:59:4e:6d:99:ec:81:72:9c:c3:bc:3b:6e:
0c:50:ca:2e:63:4c:9c:b1:b5:26:67:ba:7d:ee:4f:18:52:cb:
42:11:9d:f5:ed:8f:09:e8:a9:5d:11:3c:0c:e2:4a:54:22:6a:
70:93:7c:fd:7e:f7:36:ed:f6:2b:1f:89:5f:ae:f2:90:32:28:
fd:3f:d1:8c:c3:71:1e:bc:be:5b:42:23:3e:ef:88:e2:2f:83:
d3:0d:cc:17:4b:15:7a:e8:1f:d9:1b:6a:d8:57:6b:98:b9:22:
5d:d3:4f:44:c4:f3:e1:d7:7b:4d:98:9b:45:2e:38:9f:b4:95:
29:08:db:95:c2:67:95:01:2a:d5:6d:df:8b:9b:d1:cd:07:e6:
0f:bb:fa:4d:aa:6c:49:cb:11:b1:81:85:cd:39:7a:d0:f8:f9:
8c:2c:a9:1d:14:e0:bb:22:8d:67:98:b2:61:f4:80:d9:99:dd:
3a:e6:86:53:fe:ae:5d:0b:65:41:6c:be:1b:22:a7:8a:70:dc:
56:2e:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:19 2026 by rpki-client