Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nICtkOrdwClogI_43zN8fm206HY.roa
File: nICtkOrdwClogI_43zN8fm206HY.roa (raw, json)
Hash identifier: +FBMXLKgmloJSLgBiBDGHsNP2c06EjYzWnEU09+uc0M=
Subject key identifier: 9C:80:AD:90:EA:DD:C0:29:68:80:8F:F8:DF:33:7C:7E:6D:B4:E8:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F3D5F0531EDF1F52EF2D0BB53693921E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nICtkOrdwClogI_43zN8fm206HY.roa
Signing time: Tue 07 Jul 2026 16:17:45 +0000
ROA not before: Tue 07 Jul 2026 16:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 185.207.14.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 16:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:5f:05:31:ed:f1:f5:2e:f2:d0:bb:53:69:39:21:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 7 16:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c80ad90eaddc02968808ff8df337c7e6db4e876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:ea:25:5c:1c:3d:97:ff:7b:46:ca:4c:7e:
04:14:09:9e:20:80:fd:52:d8:88:00:a1:8e:a1:53:
48:9d:a4:f1:61:94:7b:87:2c:60:b6:21:cb:0e:c2:
05:af:d8:a3:ce:9a:2d:af:7e:c7:0b:68:13:c9:88:
2c:f5:dc:ca:80:90:b7:f0:76:be:3b:a3:16:3e:44:
c5:9a:f0:88:38:ba:fe:f7:e9:30:7e:4b:62:44:7a:
79:3f:8e:7e:c6:f7:32:b1:37:c4:0d:0d:87:24:a8:
95:b9:bb:46:c1:08:3b:c3:bb:ce:f9:11:2b:a1:a6:
9c:05:6d:2f:b6:bd:ee:18:2e:01:26:c2:c9:bb:c9:
b3:18:50:35:14:4b:e1:7b:58:93:20:ec:5e:45:7f:
bd:6a:cd:1c:b6:eb:99:6d:ab:c8:18:59:21:fa:92:
44:90:a8:fe:44:a8:8d:28:ae:9d:4c:71:48:1d:43:
dd:48:2c:b8:de:bf:86:ad:8e:95:19:c2:67:6b:4f:
13:89:49:90:c6:a6:46:29:ac:b5:39:94:46:d9:9b:
2c:6f:7a:9f:4e:44:9b:84:41:77:7e:5d:b0:9d:df:
0b:f9:0d:60:34:d2:72:2b:38:04:bb:40:d5:03:b4:
cb:b9:e2:e6:a8:75:39:88:61:c3:6c:43:df:33:07:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:AD:90:EA:DD:C0:29:68:80:8F:F8:DF:33:7C:7E:6D:B4:E8:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nICtkOrdwClogI_43zN8fm206HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.14.0/23
Signature Algorithm: sha256WithRSAEncryption
16:dd:16:de:60:6e:6a:0a:22:2b:16:6e:d5:7a:ad:ba:e8:03:
ee:5f:1f:98:5a:b4:22:07:fc:08:f2:19:11:dd:7a:ec:c7:19:
e9:af:f8:12:e9:40:10:53:55:6a:15:fb:e5:55:87:04:04:b9:
ab:27:4e:09:9b:67:81:36:60:42:d4:3f:27:d9:24:c2:6f:b4:
4d:a6:f6:82:fb:56:1a:d9:b2:47:82:9d:6b:90:60:3e:cd:e7:
0f:ae:a3:57:d4:8a:86:31:38:b8:82:e7:03:32:1f:36:8d:95:
98:9c:1a:71:52:1f:3f:4c:fa:fd:f4:e2:ad:df:be:71:36:38:
07:c5:ea:c5:7c:ec:1d:1b:df:4d:46:a0:be:c9:fa:22:97:3b:
ac:27:51:7d:4e:b1:d3:25:2a:8a:80:cb:d2:e0:83:a7:17:de:
24:20:bf:a7:e2:21:de:c0:8d:1c:c4:97:ef:29:51:f3:19:aa:
83:33:66:2f:8e:f5:0e:e6:41:3f:08:bb:0e:5f:7a:ea:59:bd:
5c:27:90:6a:72:e5:f0:e4:b8:79:20:62:07:de:f9:69:0e:72:
ad:7e:98:49:72:eb:2e:9e:ee:ed:51:63:f1:aa:3a:80:a1:b2:
47:2f:72:43:68:6e:88:d6:ac:9a:49:6e:d6:fe:31:73:64:50:
5e:16:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:13:53 2026 by rpki-client