Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/nJb4Xuh2R72e5h53vUEdD9OOPSk.roa
File: nJb4Xuh2R72e5h53vUEdD9OOPSk.roa (raw, json)
Hash identifier: TV9t2IL706DHQsp3CsiDYhb5n1v7wClr7OHnz0RCyAg=
Subject key identifier: 9C:96:F8:5E:E8:76:47:BD:9E:E6:1E:77:BD:41:1D:0F:D3:8E:3D:29
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 01A035704E558609D43C64A8C10EB3285BA7
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/nJb4Xuh2R72e5h53vUEdD9OOPSk.roa
Signing time: Mon 24 Aug 2026 20:22:27 +0000
ROA not before: Mon 24 Aug 2026 20:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 185.218.220.0/24 maxlen: 24
185.218.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:70:4e:55:86:09:d4:3c:64:a8:c1:0e:b3:28:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Aug 24 20:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c96f85ee87647bd9ee61e77bd411d0fd38e3d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:f8:fe:4e:d1:8e:3d:b5:35:fe:41:d3:c7:
d3:bb:3b:bc:b6:ad:ec:49:f3:a9:3e:33:05:e0:37:
52:1e:4b:64:f6:4f:47:e6:b3:5f:d8:9d:52:29:49:
f1:18:b6:0a:cb:b8:2d:7c:79:8e:08:a9:be:0d:91:
b0:74:65:c3:a6:fa:64:ee:a3:10:fa:64:95:46:81:
88:83:cb:03:33:3f:89:3d:28:ab:5b:f3:9d:1f:d4:
f2:05:9e:50:11:bd:cc:7f:5f:01:87:4b:0a:bc:09:
e3:20:81:fe:16:d1:44:29:84:2c:52:19:16:0d:c7:
eb:61:0c:7a:a6:f4:21:25:1e:57:2b:2a:5b:9d:57:
40:67:06:a3:46:1a:dc:56:d5:8c:b4:1f:c9:8d:55:
c8:fe:4f:29:41:78:c3:97:6c:a9:42:97:8e:f4:91:
e5:a8:00:68:48:c6:c3:a8:bf:d8:99:b4:63:4c:10:
3f:2d:9d:a6:cd:b9:04:47:db:63:7e:02:81:27:1a:
80:ca:91:37:34:5d:4e:fb:ac:0c:d1:ea:7f:fc:14:
21:f7:51:72:5f:e8:e2:7f:82:49:ba:05:c0:30:57:
48:cc:3e:89:41:8a:14:35:cc:74:af:93:a6:8b:d9:
03:ff:b9:84:f2:12:fe:96:24:fe:3b:77:99:51:dc:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:F8:5E:E8:76:47:BD:9E:E6:1E:77:BD:41:1D:0F:D3:8E:3D:29
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/nJb4Xuh2R72e5h53vUEdD9OOPSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.220.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:ff:02:c6:91:0b:bb:98:4c:f3:f1:b5:87:da:f8:a5:cf:fa:
67:0d:bc:c4:7a:e4:c7:55:d3:2e:68:9a:88:a8:89:eb:5d:75:
87:64:84:09:8d:51:3a:9e:fe:b3:7e:7e:57:c7:83:76:9d:56:
f5:65:91:f0:f4:04:17:05:86:75:c9:d9:81:aa:30:90:1e:d5:
7b:82:5e:b1:e6:1b:86:66:56:84:b6:9d:c3:9e:24:ea:35:2e:
c0:54:0e:f7:15:c8:3f:b7:c7:01:6a:8a:89:0e:cb:75:c6:7f:
cc:15:83:09:f2:ec:85:fd:4d:c2:57:a7:9f:6d:c4:18:8e:20:
6e:45:b5:c7:0e:2e:dc:80:3a:c3:72:be:e7:88:08:a2:57:b1:
c8:c0:62:e3:e0:fb:aa:e7:db:d1:4f:50:fd:3b:ad:eb:9a:bc:
c3:9b:12:06:cc:cf:06:fd:a4:85:74:3e:6b:bc:c1:2a:3a:70:
cd:af:2f:5a:c1:84:49:70:39:e4:f7:03:dc:38:94:4a:47:44:
9e:67:7c:29:9e:e0:a5:83:63:0b:7a:dc:d3:30:26:7f:55:8e:
a0:c9:22:85:16:89:61:2c:6d:82:c3:8d:27:1b:d9:1c:62:ad:
75:e3:73:f5:6f:ec:87:3c:21:eb:f8:9a:af:01:ff:e6:be:e9:
f1:87:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:24 2026 by rpki-client