Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/NfkWRTmas65GbmdGapyBWOQnVH4.roa
File: NfkWRTmas65GbmdGapyBWOQnVH4.roa (raw, json)
Hash identifier: jdk95gQhWP1t1SiRHYhWzmeo+n/TinPmU1aZwAHQUgQ=
Subject key identifier: 35:F9:16:45:39:9A:B3:AE:46:6E:67:46:6A:9C:81:58:E4:27:54:7E
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B49558C26907A07DFBA035BF791C
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/NfkWRTmas65GbmdGapyBWOQnVH4.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25152
IP address blocks: 193.0.14.0/23 maxlen: 23
193.0.14.0/24 maxlen: 24
193.0.15.0/24 maxlen: 24
193.0.16.0/23 maxlen: 24
2001:7fd::/32 maxlen: 32
2001:7fd::/48 maxlen: 48
2001:7fd:15::/48 maxlen: 48
2001:7fd:16::/48 maxlen: 48
2001:7fd:17::/48 maxlen: 48
2001:7fd:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b4:95:58:c2:69:07:a0:7d:fb:a0:35:bf:79:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35f91645399ab3ae466e67466a9c8158e427547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:0b:e9:e9:83:50:40:ab:4d:c9:4b:5c:79:
2b:04:69:7a:b1:b1:99:93:5f:9d:dc:16:ec:8b:b6:
ee:cd:ef:de:be:f7:25:31:ee:76:0a:ff:fc:c9:d4:
aa:2e:a2:29:b5:77:51:d7:70:8b:29:b7:4a:10:bc:
84:20:05:bb:e0:63:ec:15:48:a9:e5:f8:f5:55:96:
16:67:1e:94:56:7c:dc:df:6a:d2:f2:c9:c1:c3:19:
16:6d:3d:8e:9c:8f:bf:cd:8a:59:41:55:2a:88:94:
99:fd:ba:29:9f:a5:b2:fa:db:7f:5b:7f:4d:11:e1:
60:0e:71:e4:b0:c7:39:1b:82:0e:6a:31:63:af:4b:
d5:9e:2d:18:a2:72:92:21:84:69:98:80:6d:da:35:
cd:d6:cf:9d:b5:4a:45:5b:a9:61:87:a1:1a:b9:dd:
43:ee:55:7d:1d:13:06:6f:93:23:55:e3:0d:60:92:
9f:c0:8f:a5:1d:95:5c:c7:b6:db:95:27:75:dd:e6:
e7:1f:40:e9:03:01:09:77:93:e7:95:8a:83:2e:bc:
01:a4:64:72:48:e3:60:fa:c4:2d:1e:a5:72:94:b5:
14:55:7a:0e:99:d7:a9:80:2d:33:e6:ec:53:b7:72:
d3:53:e1:2b:0e:6d:bd:fd:9d:a0:6d:48:9c:27:49:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:16:45:39:9A:B3:AE:46:6E:67:46:6A:9C:81:58:E4:27:54:7E
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/NfkWRTmas65GbmdGapyBWOQnVH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.14.0-193.0.17.255
IPv6:
2001:7fd::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d7:b5:2f:89:83:33:63:67:4e:e2:36:d0:d1:d6:61:56:01:
ea:ab:88:ef:aa:78:98:8c:79:da:06:18:ee:e3:22:e5:6b:cf:
c9:35:50:e2:ce:7e:43:f0:3a:e0:46:1e:b5:88:83:52:11:46:
7f:8c:46:6f:5d:86:ef:a7:6f:be:54:6d:40:27:70:3a:78:69:
f6:93:70:42:82:e9:45:7f:b1:90:b5:09:6e:11:a7:8f:9e:99:
59:67:27:b7:70:5c:2a:1c:6f:bc:89:34:fb:4f:fe:3a:1f:20:
da:44:d4:1f:5d:01:35:17:1a:61:69:0f:91:da:8a:d4:b5:b4:
85:53:ad:d9:3c:1c:ee:56:0c:cc:6e:38:28:7d:61:4b:7d:be:
d1:f0:7b:26:de:a6:00:ba:a9:c7:b7:8e:e0:5a:e5:b5:2f:fb:
88:bc:bc:19:f5:38:47:ff:d5:f4:16:9f:5f:48:41:f8:d3:35:
94:11:42:53:d1:98:51:71:0b:2c:ae:c1:ba:e0:d5:c8:c8:02:
25:1e:1f:25:9f:04:43:d1:5e:0b:29:0e:be:31:41:20:29:f9:
8e:c1:c3:c2:01:90:ef:fe:1c:4b:54:e4:7e:57:5c:51:18:68:
11:7c:0b:f8:e3:bd:8f:21:21:1d:dd:03:32:d6:91:a6:ac:05:
72:8a:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:00 2026 by rpki-client