Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Nf1KuZ7eKJgNzef1ciAIbxLvT2s.roa
File: Nf1KuZ7eKJgNzef1ciAIbxLvT2s.roa (raw, json)
Hash identifier: m9RxRgl4KBotL+QRS+zJWhYY82FdBZnHOwXnNwawYlk=
Subject key identifier: 35:FD:4A:B9:9E:DE:28:98:0D:CD:E7:F5:72:20:08:6F:12:EF:4F:6B
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F61B31A4423FC93337FB08BACC66
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Nf1KuZ7eKJgNzef1ciAIbxLvT2s.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18679
IP address blocks: 195.65.10.0/24 maxlen: 24
195.65.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:1b:31:a4:42:3f:c9:33:37:fb:08:ba:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35fd4ab99ede28980dcde7f57220086f12ef4f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:5a:3a:48:31:3d:86:9f:ac:9a:9d:2e:1e:
30:c9:7b:04:e5:61:ac:b5:02:44:a0:9e:a6:e7:ee:
da:2d:ed:d8:9a:35:12:71:e0:cb:f0:d4:72:e3:53:
55:a2:06:aa:a0:33:fb:f5:97:bf:bf:7e:ec:b6:79:
ec:7c:4c:fb:39:0a:f7:33:38:dd:a0:54:64:bb:48:
dc:69:0e:ef:0d:17:10:cd:18:02:ad:93:63:82:a4:
86:00:99:01:bc:e5:9b:9e:e9:9e:af:17:ec:ea:dd:
05:8d:d3:fd:49:96:9f:8b:03:ce:72:86:d8:fc:6b:
fa:ce:5e:2f:1c:b9:1b:88:89:e3:f2:06:6d:dd:8c:
33:8f:41:22:b1:ee:f9:7a:98:42:c9:47:ea:e4:6a:
e8:05:60:d3:a4:17:80:e8:5e:eb:4c:a1:9f:7a:55:
3c:90:e6:d0:9f:48:56:88:f0:af:9b:1d:75:ea:1d:
51:c4:55:47:94:c8:86:4d:f3:5a:c6:aa:09:51:9f:
56:6e:6f:b5:b5:90:57:b8:96:87:45:45:34:ec:3f:
e2:86:69:86:04:40:7a:56:81:bd:ca:bb:89:f3:6f:
e1:38:38:ea:b4:6e:7e:0d:11:d2:82:2c:bb:c5:3e:
72:af:4e:80:43:c6:da:6a:88:50:dd:f3:a4:87:3e:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:4A:B9:9E:DE:28:98:0D:CD:E7:F5:72:20:08:6F:12:EF:4F:6B
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Nf1KuZ7eKJgNzef1ciAIbxLvT2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.10.0/24
195.65.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b5:ee:b9:2f:0b:ed:a4:7b:f5:09:b4:16:37:e2:37:0a:bc:
40:9c:f2:51:10:ae:e5:e6:d1:41:94:df:d2:c5:2f:14:96:ff:
43:30:4d:a8:d4:d5:ac:e4:27:ef:c5:1c:ee:3e:24:95:30:aa:
f1:e1:9e:a7:46:64:f4:78:c6:9e:f2:64:72:e3:82:bc:13:85:
a1:29:e1:73:52:09:ec:5a:90:7f:93:ab:25:1a:0b:b0:f6:fc:
ca:2b:fb:a3:6d:c4:50:dd:d7:cd:37:80:ac:4b:68:72:a7:a1:
c7:26:a9:90:60:de:fa:4f:f3:85:53:b1:58:8b:f6:a8:8d:65:
18:5e:3d:c9:ce:91:86:29:10:90:cc:99:9f:c7:20:db:63:8e:
73:91:0e:56:70:d9:e9:3d:8e:04:b5:3e:3f:9e:bb:b1:55:91:
41:8d:06:91:ba:54:29:50:64:f9:58:b4:64:80:af:40:37:dd:
ac:02:76:11:ac:f3:ff:50:22:cb:64:00:1f:8c:da:d3:3f:67:
f1:45:5e:81:6f:35:57:fd:13:1b:b4:e6:a1:de:14:4f:24:80:
8b:d4:4f:a6:88:57:33:8c:12:17:dc:4a:5f:39:8f:bf:ed:1c:
ed:3a:a1:7c:49:3d:8c:be:49:f5:ad:08:67:4b:42:9d:f5:1b:
c6:56:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:47 2026 by rpki-client