Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/NIIcsX27k87ZvHHrcQDVVWFUF7I.roa
File: NIIcsX27k87ZvHHrcQDVVWFUF7I.roa (raw, json)
Hash identifier: XAZFhlhX49012CDEB0tGnNBN2ZuACEMyJePTLHi2yA0=
Subject key identifier: 34:82:1C:B1:7D:BB:93:CE:D9:BC:71:EB:71:00:D5:55:61:54:17:B2
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 01A0AF4F5541AAF262EA18208FA3C4730F85
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/NIIcsX27k87ZvHHrcQDVVWFUF7I.roa
Signing time: Thu 17 Sep 2026 12:20:07 +0000
ROA not before: Thu 17 Sep 2026 12:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 157.173.0.0/22 maxlen: 22
157.173.3.0/24 maxlen: 24
157.173.4.0/24 maxlen: 24
157.173.6.0/24 maxlen: 24
157.173.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:4f:55:41:aa:f2:62:ea:18:20:8f:a3:c4:73:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Sep 17 12:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34821cb17dbb93ced9bc71eb7100d555615417b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:34:f9:72:50:b7:b0:19:06:5a:71:91:7c:
a5:83:0a:be:b6:02:fa:54:25:f7:15:27:fd:48:20:
0d:88:44:3f:bc:39:30:6d:d6:7a:27:10:5d:97:50:
35:b4:d0:15:8f:31:df:9f:66:ef:ba:44:8d:07:25:
5c:55:e9:a9:84:98:59:f2:b8:78:a2:7e:50:3d:26:
e5:de:ec:fc:e4:e0:ea:9d:2e:c6:fc:60:48:d9:73:
a9:90:84:f9:db:1c:8c:d6:cd:6a:15:57:6b:e6:b5:
dd:8c:1c:bd:fa:7b:f7:fe:4e:9a:6b:7d:4f:c0:6a:
22:67:2d:40:2d:f0:f6:c5:e7:eb:aa:74:ea:65:8e:
2a:86:8a:f7:41:45:cc:74:ae:07:ef:33:31:0e:a1:
14:d2:57:38:bf:2b:45:c7:c3:9f:0e:d5:86:ea:b7:
4a:26:47:85:88:08:21:73:e5:41:c2:b6:ac:82:8c:
e3:8a:88:13:ef:ca:5d:78:9d:a2:03:99:6e:83:2e:
6b:7a:91:5e:9d:e1:ef:b8:5d:dd:56:8e:0b:48:cb:
fd:6f:92:1c:50:bb:58:58:50:eb:79:36:df:a3:71:
ca:43:02:4d:cd:45:bc:ef:46:22:cc:55:3b:a7:25:
56:09:bb:bc:19:fc:fb:57:d6:15:84:78:9b:13:94:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:1C:B1:7D:BB:93:CE:D9:BC:71:EB:71:00:D5:55:61:54:17:B2
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/NIIcsX27k87ZvHHrcQDVVWFUF7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.0.0-157.173.4.255
157.173.6.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:60:1b:db:47:40:df:70:38:64:43:c6:eb:c4:ce:3e:78:8c:
1e:66:38:99:7c:8c:cb:35:c9:98:61:94:5d:ee:f9:3a:90:6d:
83:60:22:78:39:25:8e:f6:bf:9e:31:53:a4:f4:86:90:16:12:
6b:04:a2:ff:79:4c:15:50:ad:1c:33:6a:39:bf:c0:b2:55:e0:
29:e0:6e:f0:17:07:51:57:6a:49:31:9a:5a:e3:17:09:1c:82:
f5:c6:27:43:8d:24:20:b1:a8:a5:4b:6f:94:94:90:06:c2:2a:
d7:d6:30:a0:25:5a:4b:c2:f6:f1:2b:b7:8f:46:45:c5:5d:26:
e9:c3:83:f8:7c:15:f9:9f:da:80:73:94:36:39:ee:c9:6c:12:
71:8d:a4:f0:1d:29:4c:e9:f1:86:ad:e9:d7:b4:58:b3:86:9f:
d4:52:08:91:05:01:76:b3:9f:c5:a0:cc:2a:4e:78:31:62:37:
52:61:73:d7:7f:9a:e7:6f:22:42:b7:ca:76:41:fe:de:c0:7d:
e3:39:a9:bd:b3:21:27:b0:79:66:74:11:c5:30:60:4f:24:a3:
45:1e:c0:8e:5e:37:1a:8f:11:7d:56:22:99:dc:58:80:1e:b3:
1e:fb:63:19:1f:61:e1:22:50:0e:5f:08:00:ac:dc:b0:7f:6a:
9b:f6:6b:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:45:13 2026 by rpki-client