Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nlOUp7e_vKkPI9yHLxXueLiIPDY.roa
File: nlOUp7e_vKkPI9yHLxXueLiIPDY.roa (raw, json)
Hash identifier: 5hFI0KBPpsMgRXdeoZGIXB0nurBqsQgMuhkh8SIdMJE=
Subject key identifier: 9E:53:94:A7:B7:BF:BC:A9:0F:23:DC:87:2F:15:EE:78:B8:88:3C:36
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EBF26D0AEDC404A0029733C3A39B68EB2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nlOUp7e_vKkPI9yHLxXueLiIPDY.roa
Signing time: Sat 13 Jun 2026 04:04:12 +0000
ROA not before: Sat 13 Jun 2026 04:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213622
IP address blocks: 185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:26:d0:ae:dc:40:4a:00:29:73:3c:3a:39:b6:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 13 04:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e5394a7b7bfbca90f23dc872f15ee78b8883c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:aa:ce:ed:72:d9:19:0b:6a:7d:31:0c:dd:
c9:09:28:b4:b1:91:42:b3:d1:bd:5f:cb:e9:80:c7:
b3:f3:53:e6:9f:6b:3b:6b:68:9a:09:e1:12:d6:ed:
cd:28:a2:a2:20:21:8e:f2:ee:61:2c:8c:05:5a:71:
c0:73:91:54:68:97:0d:7a:2a:e6:a5:7c:5f:95:cb:
a8:80:ea:5a:d3:b5:ce:af:bf:e8:08:ae:dd:32:72:
87:75:e2:77:00:f9:82:f9:c7:0e:8c:ab:b1:da:30:
24:90:84:58:9f:b3:cf:d3:19:a7:dd:dd:39:7d:e5:
4e:48:67:be:1e:31:a7:9f:69:f5:54:f1:6f:f5:7a:
80:8b:c4:2a:8b:f0:0b:11:71:b4:f1:24:3b:f3:7d:
8b:f2:67:1c:08:25:74:1c:ec:8f:05:43:a1:ab:0d:
71:22:3a:8d:2e:5f:f4:8b:7b:bd:60:4b:e3:ce:d0:
78:59:aa:5d:7f:6f:82:e9:7a:fd:3d:15:a1:34:b0:
ae:14:ce:85:53:87:7b:13:13:11:d6:9a:38:bc:38:
b1:32:95:99:ae:2b:80:41:9e:a9:c0:32:b8:49:31:
e5:13:12:5d:aa:ac:88:75:26:60:98:d3:22:70:16:
b6:79:53:dd:e6:92:e7:4d:c7:86:23:da:ca:df:ec:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:94:A7:B7:BF:BC:A9:0F:23:DC:87:2F:15:EE:78:B8:88:3C:36
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nlOUp7e_vKkPI9yHLxXueLiIPDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:82:06:cc:da:4e:b4:ca:b0:14:8f:19:8f:51:65:95:6c:0f:
69:dc:24:73:cc:be:61:d0:a7:47:5e:30:84:f3:a8:ea:14:79:
aa:72:cf:b6:16:fb:e9:24:3b:0f:a8:27:50:33:63:cd:b7:c3:
b8:bd:30:45:6e:d6:9f:8e:ac:7b:c4:3f:75:32:13:5d:91:e4:
69:27:31:f6:ae:a2:cc:47:42:57:ec:50:14:86:00:9b:1e:78:
20:29:f8:0e:a0:9c:9a:f7:9f:86:22:e1:22:ab:ba:12:05:7a:
72:55:62:4f:11:dc:65:3d:4e:e6:e6:17:25:47:fc:68:4d:2c:
9c:34:ef:c0:2d:05:e9:a7:e3:77:27:c3:df:75:34:0d:16:8d:
4a:ce:8a:17:18:a2:37:18:99:27:78:b2:c7:f1:c1:57:0a:59:
8f:b6:48:52:e0:9c:04:6e:79:29:8c:ca:01:ba:b6:99:2d:3c:
58:0c:22:31:4e:a9:6f:53:9f:43:cc:6d:b5:b6:e8:19:31:9a:
ed:3c:c2:d8:e4:79:df:38:8a:fb:15:9c:80:b0:d7:a4:c7:b9:
c7:ed:e3:f6:fd:81:80:c3:bf:ed:1f:46:32:d7:2d:b4:5a:22:
d5:50:c1:e7:bd:95:a5:eb:4d:bb:82:f5:59:ea:4f:6e:de:1c:
1a:ea:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:59:40 2026 by rpki-client