Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nNS3hcjVlpkqn4LxAFDFEbrRAgQ.roa
File: nNS3hcjVlpkqn4LxAFDFEbrRAgQ.roa (raw, json)
Hash identifier: pTDbs0QSb62j/NUIa3YMAdqdCA/QfzAhnwvm/8XGnJc=
Subject key identifier: 9C:D4:B7:85:C8:D5:96:99:2A:9F:82:F1:00:50:C5:11:BA:D1:02:04
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F675B549F26DE524D67D4D09A58954B59
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nNS3hcjVlpkqn4LxAFDFEbrRAgQ.roa
Signing time: Wed 15 Jul 2026 19:57:46 +0000
ROA not before: Wed 15 Jul 2026 19:57:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:5b:54:9f:26:de:52:4d:67:d4:d0:9a:58:95:4b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 15 19:57:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cd4b785c8d596992a9f82f10050c511bad10204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:84:ec:5d:a0:ab:bb:10:18:a1:87:72:eb:
3b:87:6d:c6:97:96:ee:2f:87:40:d5:1d:48:13:5a:
71:f6:ae:01:b0:ca:52:4f:42:c1:dd:78:33:90:5d:
02:df:d6:bb:6c:86:65:a7:83:33:1d:e2:fa:60:70:
46:5c:c2:c9:a6:23:45:4a:45:9b:81:fb:c4:1d:a0:
3b:08:1a:8f:0f:45:3f:e7:37:1d:c1:02:25:a1:8b:
18:cb:07:8d:40:53:2f:91:d9:0b:79:ce:ce:bc:26:
1b:8a:9d:3f:90:35:ad:a8:f7:95:e7:32:3e:a9:94:
e3:fb:fd:be:af:17:ef:3d:44:cd:61:f8:6c:32:14:
69:7f:05:e7:27:90:32:77:99:4a:5f:08:f1:41:d0:
bc:25:f4:40:8a:bb:c5:ee:2d:95:2b:34:ad:8c:8d:
89:a1:42:6d:ed:e3:0a:70:8a:db:66:b3:89:87:42:
b0:69:ef:13:83:47:a6:44:f6:d8:c9:37:de:97:21:
ce:c7:b7:22:37:ac:ef:94:2b:f4:f5:f2:5b:9a:dd:
8a:9b:c4:d8:8c:f4:24:a4:b3:fc:a9:6c:a0:01:1a:
83:f9:58:ac:67:87:36:a8:c1:54:ba:a5:56:a2:97:
33:28:00:17:77:d7:89:32:c3:62:30:0b:05:7f:33:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:B7:85:C8:D5:96:99:2A:9F:82:F1:00:50:C5:11:BA:D1:02:04
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nNS3hcjVlpkqn4LxAFDFEbrRAgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c6:92:16:6c:ba:9a:8d:6a:86:6a:ac:b8:32:4e:e7:cd:1f:
15:8f:36:d2:cf:8a:b1:2b:8b:72:67:54:e4:36:e1:0f:ab:fd:
a8:85:43:4d:4e:41:49:ed:1b:e6:a0:85:2d:18:e0:5e:1a:a8:
2f:7e:28:6f:bd:46:8a:f2:e2:1e:dc:2d:b2:09:9a:b2:cb:00:
a3:1b:52:9f:11:65:c6:1b:7f:1e:96:4e:92:58:48:0b:97:63:
69:1f:05:4e:7e:c9:49:9f:46:57:d2:02:2b:1c:c5:81:f3:e1:
8d:34:76:2a:7a:9e:ee:7d:46:71:21:72:32:e5:bd:5d:b5:05:
df:5b:82:42:b8:0d:06:24:66:b2:ee:84:ee:69:b1:81:e6:6b:
c3:58:dc:20:8c:63:17:07:cd:c2:91:b5:ef:50:aa:62:07:9f:
01:62:a5:01:f7:bd:cd:e8:28:0c:51:d7:a9:c2:d4:b7:cc:10:
b7:a3:87:51:f0:83:82:48:a3:23:3d:24:e6:a6:00:c2:42:7d:
43:0d:3c:09:88:8f:36:6f:d2:65:55:99:b2:80:5b:ca:76:ab:
5f:11:dd:ae:1a:84:65:1e:ed:38:c3:8e:43:de:00:6a:3e:0a:
00:5b:66:f0:e1:88:89:31:7c:cb:54:7e:ed:d6:2a:a7:06:75:
a1:2d:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:00 2026 by rpki-client