Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NsHDsBlsQAGgspNiM-HwDV4swTc.roa
File: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (raw, json)
Hash identifier: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=
Subject key identifier: 36:C1:C3:B0:19:6C:40:01:A0:B2:93:62:33:E1:F0:0D:5E:2C:C1:37
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A033A2E20FD51AC84353F9701CAF293084
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NsHDsBlsQAGgspNiM-HwDV4swTc.roa
Signing time: Mon 24 Aug 2026 11:58:27 +0000
ROA not before: Mon 24 Aug 2026 11:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 93.190.13.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:a2:e2:0f:d5:1a:c8:43:53:f9:70:1c:af:29:30:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 24 11:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36c1c3b0196c4001a0b2936233e1f00d5e2cc137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:5d:63:de:87:02:63:f0:39:cb:3e:60:2b:
5b:00:69:4d:b6:f4:99:e9:1f:eb:cf:97:5d:79:43:
ab:f9:2b:af:c7:85:fd:b8:0f:86:23:d9:2e:7d:e2:
12:21:8a:b5:ec:df:57:c1:0b:ed:3c:5c:1b:cd:d1:
b5:a0:65:6e:40:c4:14:c5:aa:67:e5:0d:b2:18:2e:
a9:e9:85:d5:5b:e5:a7:57:aa:c3:8e:d9:c3:27:cb:
49:ea:ec:8c:f2:f0:fa:cf:7c:b5:42:28:9d:7d:70:
7f:1c:22:90:82:6b:79:69:2f:12:58:99:c0:d9:56:
d8:59:eb:bb:53:ff:9e:2c:d5:fb:7c:9c:c7:f9:db:
c4:28:28:b4:84:90:03:2d:c9:f0:c1:ba:90:8f:49:
53:49:5c:ed:ef:2a:1c:da:09:59:a4:81:47:0f:ab:
b0:58:42:51:cb:23:f8:d0:42:c5:06:53:d9:f0:a4:
8c:68:26:a0:5b:8a:4a:5a:7e:22:aa:00:8b:76:b2:
3a:04:5c:32:bd:22:b1:f9:9f:7a:45:37:77:97:96:
b1:eb:47:04:64:c0:6e:3a:63:e1:c2:6e:53:77:c7:
00:2a:f0:a0:20:4e:64:79:a6:dc:be:65:44:f5:0b:
3e:22:23:84:9c:6e:b9:e7:70:d1:22:c8:4f:c9:08:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C1:C3:B0:19:6C:40:01:A0:B2:93:62:33:E1:F0:0D:5E:2C:C1:37
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NsHDsBlsQAGgspNiM-HwDV4swTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.85.191.0/24
185.119.83.0/24
185.141.35.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5c:a9:d1:82:2e:a7:1a:b5:b7:65:f7:53:38:6e:50:ea:0a:
e4:ce:02:cd:33:27:0c:b3:d3:10:e9:92:f5:dd:ec:94:95:66:
8a:fc:c0:0a:26:ba:4e:fe:df:37:08:33:52:21:e1:ad:21:3b:
a1:df:b1:d7:51:1a:a3:05:15:c2:b0:63:4c:15:d6:05:32:34:
db:06:d6:7f:63:43:7b:74:e4:49:f0:0f:75:f1:0b:fc:c1:99:
9a:cb:83:9f:f0:85:d6:97:b7:a7:59:d1:b5:13:e1:a7:c2:3d:
93:a9:b0:63:dc:f7:d7:3f:d0:67:9c:2c:45:0c:0b:c2:62:4b:
87:90:c6:fa:9a:66:a1:aa:20:43:8e:7e:fb:6c:f6:cc:0e:65:
0e:a8:76:84:1e:9b:1d:70:9c:1b:dc:2f:f1:3c:18:e5:4f:01:
52:21:54:ce:24:37:12:f2:89:93:62:b4:dc:e2:78:5c:a3:10:
c7:86:7c:f2:bb:73:05:ca:78:e8:aa:cc:22:96:58:2a:1a:44:
25:3d:0d:1e:9d:84:f4:46:80:90:41:bb:d2:c7:1c:66:19:25:
2e:ba:99:40:b0:a7:e9:4a:3b:73:6b:77:a5:3e:6d:ce:08:cc:
07:e9:22:5e:63:99:97:9d:2e:99:ce:63:17:b7:5f:56:b1:24:
d2:3b:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:03 2026 by rpki-client