Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/NK2t1r1Hx48nJrLENS2eIndh_OI.roa
File: NK2t1r1Hx48nJrLENS2eIndh_OI.roa (raw, json)
Hash identifier: cedqRcFG2bweZk21bnL20BmkgBj5cya2Q7JPY5R+njs=
Subject key identifier: 34:AD:AD:D6:BD:47:C7:8F:27:26:B2:C4:35:2D:9E:22:77:61:FC:E2
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 019F6FBF1E5F2DFBF544FD5EC51D851E6F71
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/NK2t1r1Hx48nJrLENS2eIndh_OI.roa
Signing time: Fri 17 Jul 2026 11:03:43 +0000
ROA not before: Fri 17 Jul 2026 11:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 185.230.230.0/24 maxlen: 24
185.230.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:bf:1e:5f:2d:fb:f5:44:fd:5e:c5:1d:85:1e:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 17 11:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34adadd6bd47c78f2726b2c4352d9e227761fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:12:7a:ec:e2:63:9a:f2:a3:6b:23:3e:f1:
f4:fa:8e:67:4a:c8:04:63:36:6b:2d:fc:3a:7f:2d:
38:eb:63:8a:de:21:bc:a5:39:dd:62:8c:0a:a7:fb:
3d:1d:39:67:97:3c:f1:ec:db:2a:85:56:8c:7a:6b:
7a:d4:1d:67:63:09:81:5f:1a:6d:be:e8:0e:52:20:
19:dd:a8:9c:db:c2:f8:38:7d:6c:6b:19:a0:26:41:
97:02:44:71:52:ab:d9:3b:54:80:41:50:11:44:9c:
10:3f:0f:9f:93:b5:af:35:b8:6b:a7:12:b3:d9:b0:
3a:a8:5f:af:69:05:3c:be:ca:ad:e1:6f:28:ec:f8:
9b:56:84:0b:61:41:fa:c2:ad:b3:de:cd:e4:bb:a6:
c6:55:76:38:df:b3:12:78:c8:c2:bc:74:27:73:0b:
c0:de:34:8d:75:1b:15:d6:e5:44:2e:cb:9e:f3:8c:
38:ca:2c:9c:3f:25:ab:e4:74:61:46:5a:dd:d6:02:
7b:ef:5f:87:41:18:3e:a9:36:bd:ce:88:3b:45:ac:
7e:92:c9:f9:9c:ba:1e:44:92:ed:20:f8:c0:96:d5:
cd:b2:b6:cb:d7:dc:5e:b1:46:38:5c:5c:4e:62:c8:
83:1a:0b:0a:1f:dc:13:c0:0a:be:85:cd:67:c6:49:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:AD:D6:BD:47:C7:8F:27:26:B2:C4:35:2D:9E:22:77:61:FC:E2
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/NK2t1r1Hx48nJrLENS2eIndh_OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.230.0/23
Signature Algorithm: sha256WithRSAEncryption
58:8e:32:f6:28:1f:15:93:93:f7:78:66:6d:6a:f7:93:d2:3f:
a2:7c:04:01:e7:23:7e:b6:a7:95:80:98:e7:eb:8f:af:8f:aa:
c9:c3:e0:b9:4e:12:6d:b0:57:60:05:8e:cb:46:64:b0:f7:fa:
73:11:db:4f:84:f6:0b:6a:68:96:24:23:db:6f:5c:0e:9f:59:
34:1f:55:0f:e3:fa:8d:d4:98:c0:5a:76:1b:7a:29:04:00:21:
80:9a:fe:41:db:9a:82:a6:6a:31:39:2e:7f:fd:cf:96:98:b9:
eb:a3:ce:8e:08:d6:a9:7d:2d:4c:3f:95:af:87:4c:0f:e8:83:
e0:fc:4b:eb:66:af:e0:f3:e7:ed:ad:5f:9d:04:e8:b3:3b:c5:
5d:8c:94:d4:cc:6d:11:be:60:3e:b1:05:d9:ae:b4:8b:3c:12:
ac:ea:31:e0:66:39:b5:b9:95:72:4d:9d:5f:c2:4d:46:c6:7f:
16:59:05:ce:30:00:73:51:ce:75:d8:ff:14:f4:a4:b2:31:9c:
25:34:43:bf:b2:f2:92:d6:07:ab:60:84:ad:83:3c:d4:a8:ed:
12:84:3d:79:f7:38:35:6e:5e:0a:96:ec:6a:b5:7f:22:df:a7:
11:f0:5b:a4:09:8f:06:61:d1:4f:80:2c:b6:69:11:35:5d:91:
84:59:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:47 2026 by rpki-client