Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa
File: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (raw, json)
Hash identifier: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=
Subject key identifier: 36:E4:DF:05:A3:71:E7:E8:A4:80:3F:55:B0:3F:9E:C1:D2:6C:B2:C4
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019F46403FF3D515FF7FDE916816130E3629
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa
Signing time: Thu 09 Jul 2026 09:40:43 +0000
ROA not before: Thu 09 Jul 2026 09:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6753
IP address blocks: 185.239.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 20:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:40:3f:f3:d5:15:ff:7f:de:91:68:16:13:0e:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jul 9 09:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36e4df05a371e7e8a4803f55b03f9ec1d26cb2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:fe:d8:54:00:fd:6b:ff:60:17:c6:3c:ec:
08:33:d3:f5:19:d6:bc:83:ed:99:19:7d:44:09:05:
6d:b4:f0:24:5c:ee:41:d7:56:3b:e5:c3:81:50:a9:
9c:a6:25:66:28:b0:86:14:dc:bf:3c:c0:27:70:64:
71:0c:6e:6b:bb:04:cb:ff:34:20:85:f3:91:2f:17:
50:ec:5f:b3:01:16:9c:e3:0a:81:3f:a7:22:6c:3a:
9d:f2:2a:05:c0:6b:20:fa:76:9b:be:fc:f3:02:b5:
af:af:d1:b1:d8:33:78:f8:58:54:95:33:6c:e6:47:
1f:5f:df:52:64:f9:ec:61:58:8a:c8:51:e4:83:15:
cf:31:9f:5f:39:3b:82:15:e1:c6:b8:47:d2:b1:da:
2f:a3:8a:fb:38:fb:ee:08:48:cc:7e:7d:5b:e5:dd:
18:d5:a5:37:44:e5:7a:2b:67:34:89:49:d6:7d:72:
76:52:40:07:18:9f:75:38:35:b1:03:28:a0:66:3c:
91:13:8d:5b:5d:fd:d4:3e:2f:90:8a:46:19:0d:be:
88:e7:27:a1:d3:7d:9f:4f:20:32:21:e2:d1:a9:d1:
d8:20:90:11:a3:71:fb:76:12:0c:10:be:5e:97:e0:
95:53:bf:f9:85:24:ec:07:f9:00:00:fd:e5:1e:f7:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:DF:05:A3:71:E7:E8:A4:80:3F:55:B0:3F:9E:C1:D2:6C:B2:C4
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:da:8f:dc:1d:ed:7a:f9:3a:ff:e2:df:6f:30:c5:7c:f5:7d:
d5:21:0a:6c:ef:ca:39:db:fb:ce:c6:da:a5:bd:6d:69:04:82:
94:ed:03:c7:59:41:91:85:ec:61:23:70:4d:bc:3e:75:0f:35:
ca:67:2d:4b:d2:a9:eb:6b:39:c6:ee:5b:12:a8:34:87:68:dc:
6f:ce:94:e8:87:05:66:7c:9b:a1:d1:8e:ae:68:cd:a5:18:69:
70:b5:83:2c:4f:02:c1:5f:7a:f5:eb:7c:6d:dc:48:36:f8:a6:
38:d3:ab:b6:8c:8b:85:57:44:81:f2:4d:64:c4:c3:e4:0f:a9:
69:5e:1a:9c:e6:6a:9b:bf:7b:15:6d:c3:04:be:9d:ff:dc:c8:
2e:e4:e4:01:f4:84:5e:43:f2:99:b7:42:56:35:39:9b:e8:75:
77:bc:f3:dc:77:bb:eb:94:aa:5b:13:e4:4a:c1:54:b2:74:01:
5a:00:3e:fe:1e:c5:fc:c5:5d:63:4c:81:70:d4:1a:cd:5d:34:
c4:5f:e2:df:b4:1e:87:fb:48:65:87:da:ad:b6:05:8a:00:f2:
a6:ec:f7:9f:ef:7f:68:95:40:08:5c:d7:9d:ab:f1:bf:d5:59:
7c:9f:15:c7:25:27:df:8a:c6:91:4b:95:8b:e6:2c:ae:79:5e:
0a:2f:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 00:24:24 2026 by rpki-client