Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iv-nkHn1VmIO56sRaILek5xphgU.roa
File: iv-nkHn1VmIO56sRaILek5xphgU.roa (raw, json)
Hash identifier: S4wjgyTvZe9ABKWH67gBX8pLDZcSa0ZcHjsYhR5rOGI=
Subject key identifier: 8A:FF:A7:90:79:F5:56:62:0E:E7:AB:11:68:82:DE:93:9C:69:86:05
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019FECF4C2808078211865A92536FF15370F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iv-nkHn1VmIO56sRaILek5xphgU.roa
Signing time: Mon 10 Aug 2026 18:34:51 +0000
ROA not before: Mon 10 Aug 2026 18:34:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 45.144.212.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:f4:c2:80:80:78:21:18:65:a9:25:36:ff:15:37:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 10 18:34:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8affa79079f556620ee7ab116882de939c698605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:8f:dd:22:69:3a:7e:0a:88:60:ea:73:86:
0a:c5:cc:68:d6:27:a5:9e:65:7e:17:df:13:2c:91:
c5:61:84:af:a4:ed:a0:3a:8e:3b:9d:90:70:d3:58:
ca:d2:f1:ef:13:75:bf:ad:f6:9a:fa:6f:76:de:3a:
f2:25:15:a8:3c:77:c1:25:8f:91:fc:73:fe:44:e3:
4f:81:f7:7f:48:c1:af:a6:75:52:ad:c4:3b:7d:d0:
e8:90:a8:b9:8b:ae:61:2a:8b:7d:29:50:1a:d5:3c:
bc:27:02:9d:cd:66:7b:cf:01:4d:ef:12:db:2b:94:
cd:a8:a7:46:75:8d:94:74:ad:21:4c:30:1c:fa:e8:
bc:8e:58:14:37:e2:8f:09:c2:0e:63:c6:c4:d6:0f:
37:41:90:ea:38:08:83:bd:9b:90:4f:07:15:6d:f0:
89:66:e9:c5:17:2e:57:f7:20:98:0a:84:ca:82:83:
50:6a:61:42:37:bc:41:04:da:0f:d5:2d:15:82:bf:
ea:02:1e:d8:b8:98:31:49:e9:27:c3:a9:fb:5f:fb:
b6:8b:6f:d2:8d:73:71:76:55:72:ed:9c:06:a9:48:
13:3c:74:84:e6:64:bd:db:91:8f:f5:64:93:93:a4:
91:4c:2c:85:39:06:45:6b:c3:54:a7:ff:71:43:77:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:A7:90:79:F5:56:62:0E:E7:AB:11:68:82:DE:93:9C:69:86:05
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iv-nkHn1VmIO56sRaILek5xphgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.212.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a4:4e:af:ff:ca:8e:c8:36:87:01:77:cb:5d:32:2a:0e:78:
b8:a8:25:f0:99:1c:d7:8a:bf:dd:5c:8b:cd:2e:e3:77:b9:49:
50:26:00:c3:b8:e5:2d:d3:bb:c2:7d:a8:ab:b8:3f:87:21:a1:
6d:c3:fe:02:de:f6:9c:fe:42:5e:b4:9f:7d:d6:fd:58:b3:08:
68:b6:3c:d0:b7:9a:29:fa:a4:b3:43:00:7d:84:d2:44:0f:51:
73:2a:97:54:9f:d9:4d:d9:51:6f:c9:b3:ba:90:7d:d5:ca:89:
5f:69:91:94:cc:ad:8f:cc:b2:88:3d:6c:d9:af:12:4c:bf:a8:
b8:5e:cb:fd:10:83:70:d4:b9:f6:65:59:94:d5:77:75:6a:1b:
3b:8c:74:06:62:a4:25:b5:73:43:4f:90:0d:21:28:b4:85:05:
4e:20:cb:8c:79:ad:38:6c:b8:0c:73:07:b4:e2:6e:d4:9a:5e:
33:45:ab:6c:c6:94:4b:fe:67:fe:11:da:2b:b2:fe:ac:1e:c0:
74:73:da:79:72:db:59:95:89:26:45:dd:14:3d:00:0f:97:2d:
d1:c6:3d:61:7d:69:26:34:6d:8b:0f:16:26:22:c5:f8:8f:3e:
fa:cc:c1:2f:8e:dc:8e:3c:8e:eb:97:94:19:62:52:1f:6f:2c:
26:a2:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 19:56:10 2026 by rpki-client