Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nJR5Pa0PzQ0BmKXNQ9kFurYwvTM.roa
File: nJR5Pa0PzQ0BmKXNQ9kFurYwvTM.roa (raw, json)
Hash identifier: Qswnxlod0XQLWSmfbGA37zgOZAKM1aXOGhiAxhufPjM=
Subject key identifier: 9C:94:79:3D:AD:0F:CD:0D:01:98:A5:CD:43:D9:05:BA:B6:30:BD:33
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FF63D79C62AFD7A8CCA9EF86569A39531
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nJR5Pa0PzQ0BmKXNQ9kFurYwvTM.roa
Signing time: Wed 12 Aug 2026 13:50:51 +0000
ROA not before: Wed 12 Aug 2026 13:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209711
IP address blocks: 185.86.155.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:3d:79:c6:2a:fd:7a:8c:ca:9e:f8:65:69:a3:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 12 13:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c94793dad0fcd0d0198a5cd43d905bab630bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:54:4f:a7:d1:34:37:78:08:16:b3:e4:25:
bc:82:d6:69:b7:c5:ec:c7:35:e1:ce:c0:85:71:8e:
38:20:da:bc:29:1d:b7:8a:3d:2e:39:2b:51:e5:47:
9e:cd:d9:8b:14:ca:55:89:76:ab:b7:90:6d:43:0f:
64:b5:94:86:ee:9f:40:27:26:15:f1:49:ed:6d:a6:
e2:65:eb:9c:42:15:ca:3f:39:61:b9:0a:2e:19:04:
34:08:eb:ac:bc:08:70:9a:4a:23:ab:51:f5:ef:a0:
08:53:86:ff:af:00:69:ce:bb:31:60:60:8e:0f:b6:
0a:2d:e3:93:8d:08:d8:9e:36:df:60:f3:47:ce:07:
23:11:80:8d:91:01:01:f7:4d:c7:4e:07:ff:92:6a:
6f:0f:91:6d:10:b5:27:a3:eb:e3:f0:de:1c:32:96:
68:1c:58:0c:4a:2d:f2:0f:be:65:d1:2c:bc:c0:d4:
de:7e:6e:ce:a8:01:76:39:c0:7b:68:cc:f9:10:40:
a3:9a:55:0b:83:c0:5e:77:ca:e3:1c:a4:0d:b9:e5:
60:2e:56:42:18:e7:97:9e:43:c1:11:41:5e:88:0b:
1b:bd:d7:91:65:39:c2:a1:ed:87:01:a4:25:09:74:
d4:d0:3a:1a:21:7c:10:92:b0:0e:bd:5a:92:b9:ec:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:79:3D:AD:0F:CD:0D:01:98:A5:CD:43:D9:05:BA:B6:30:BD:33
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nJR5Pa0PzQ0BmKXNQ9kFurYwvTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.155.0/24
185.98.62.0/24
185.184.25.0-185.184.26.255
Signature Algorithm: sha256WithRSAEncryption
82:db:5c:9c:11:bb:20:7a:36:1a:6b:b6:a9:86:96:54:bc:c6:
bb:4b:8d:5a:50:02:2d:aa:a5:d4:7b:ec:06:5b:21:7e:df:2c:
22:42:91:82:8b:cf:ee:c4:b7:13:48:aa:ca:04:a6:a3:72:0f:
e7:04:4e:22:17:5a:ff:44:4b:0f:3c:73:31:67:53:e5:e9:a2:
34:c1:c3:d6:0d:9d:48:3f:50:fe:79:97:09:17:6c:e0:af:3f:
e3:87:bb:fa:ec:e7:ab:67:55:7a:0e:3b:8c:02:1a:34:11:c7:
1a:60:aa:23:dc:eb:36:c2:c6:09:18:8f:84:a0:9a:ff:e3:bc:
94:ab:7e:fd:30:52:46:28:18:f2:e9:be:50:2f:05:7f:c9:3f:
54:4f:dc:79:4a:c6:6c:f5:0f:07:02:2c:c3:49:ce:32:c7:7f:
4e:ed:87:bc:c2:81:90:56:d7:d1:4b:a1:76:e7:e0:c6:f6:cc:
8d:d8:fe:29:bb:c7:dd:ba:43:c5:56:18:69:dd:1c:4e:54:72:
56:c9:63:23:eb:40:35:a6:99:77:80:8e:26:18:06:a5:89:d0:
11:3e:55:1c:0a:cd:8d:85:a8:f3:5c:35:53:86:66:96:00:58:
bc:45:a7:51:f4:7c:b7:85:c5:69:ad:fd:ab:69:5a:fc:ba:24:
4b:e3:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:13 2026 by rpki-client