Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/1-NkprLROBhIrxdMdpHs0gAbXRhI.roa
File: 1-NkprLROBhIrxdMdpHs0gAbXRhI.roa (raw, json)
Hash identifier: OgYkvU3JluSk0A3KrSnV7EBSOaUe4dV5FbvvMxEA9E8=
Subject key identifier: F8:D9:29:AC:B4:4E:06:12:2B:C5:D3:1D:A4:7B:34:80:06:D7:46:12
Certificate issuer: /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial: 019FB1CE492C159A67A082B4FAC5C086E8D9
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/1-NkprLROBhIrxdMdpHs0gAbXRhI.roa
Signing time: Thu 30 Jul 2026 06:55:14 +0000
ROA not before: Thu 30 Jul 2026 06:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 185.50.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:ce:49:2c:15:9a:67:a0:82:b4:fa:c5:c0:86:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749304120ce64942efb3896623b386a041dcb364
Validity
Not Before: Jul 30 06:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8d929acb44e06122bc5d31da47b348006d74612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:c8:ac:bc:b7:40:08:d1:c6:2e:1e:5c:9a:
98:ff:a1:26:40:64:38:5f:fd:cd:02:89:66:62:7d:
ef:47:57:3f:18:73:07:51:28:21:08:ec:ff:25:dc:
97:0e:2f:eb:ea:c1:4f:ee:b2:72:82:74:7c:fb:cc:
fd:05:85:6b:3f:14:f1:57:39:ec:c1:70:31:12:65:
3d:e1:29:f7:9c:72:3b:eb:f4:c2:bc:8a:07:d8:a5:
9d:e8:3c:8a:79:c8:56:b7:bb:1f:6b:81:c0:81:6a:
00:5a:b5:d3:da:9c:87:f3:57:79:50:7f:cd:1d:6a:
c8:7c:39:e9:c0:63:2d:8a:79:d4:78:8e:64:0f:fe:
9e:07:a5:1e:e3:fa:1b:1a:21:8a:34:10:a7:33:ca:
4a:a0:e0:b5:e7:02:3a:94:f2:b0:04:d1:10:fd:cf:
00:86:83:25:e0:19:0c:dd:44:d2:78:8d:38:2d:29:
13:8f:8f:9b:7b:78:9f:3f:f7:49:24:5d:0d:73:b5:
ad:43:26:57:35:06:5e:f2:33:56:01:4e:2b:0c:54:
04:7d:3e:b8:a9:b8:a2:05:0b:7f:1e:3b:b2:1a:68:
d0:e8:67:ba:c3:cf:b7:e6:50:3c:72:ad:0b:ea:74:
d5:a0:6e:7f:91:dc:24:57:49:37:ee:2f:51:d6:42:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D9:29:AC:B4:4E:06:12:2B:C5:D3:1D:A4:7B:34:80:06:D7:46:12
X509v3 Authority Key Identifier:
keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/1-NkprLROBhIrxdMdpHs0gAbXRhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.167.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fb:23:35:59:4f:be:b3:89:55:32:57:31:f9:a9:0f:cb:fa:
b9:9b:de:01:9e:75:f9:8c:dd:06:c7:40:6a:9e:78:e5:db:b2:
63:7b:82:57:a8:dc:b8:77:d4:be:25:48:ec:3b:0e:6f:a5:d6:
34:40:82:06:df:66:5a:9b:55:5e:db:57:99:3f:5c:e8:05:3d:
a6:67:0a:49:1c:43:1e:9e:3c:f5:07:55:92:0e:51:ad:39:03:
8a:0a:eb:a4:3e:6e:a5:db:c4:32:e2:51:cb:84:2c:d9:7e:ba:
29:a3:0e:37:da:48:44:42:46:93:18:9c:ff:a7:13:9e:cd:95:
5a:32:af:90:ad:53:9c:13:a4:35:45:3c:54:79:7d:36:f0:29:
cd:c6:99:f0:b6:1e:16:27:06:4a:63:b4:9c:ba:48:be:96:79:
2a:99:02:27:79:e0:bc:a4:d1:bd:06:62:d8:1b:54:ea:ee:4d:
3a:d3:a5:d3:e0:bd:a6:53:5b:d6:51:59:1b:d5:87:ec:2e:0e:
1a:d9:ba:af:b1:a2:b4:9e:25:29:12:f6:ce:7d:4b:b1:fe:67:
f3:26:5f:c4:31:18:a5:d6:7b:af:eb:22:11:ac:11:be:2b:f7:
be:15:9b:15:e2:1c:88:2f:f6:22:ba:37:68:5a:04:05:8b:ef:
31:84:a2:ee
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+xzkksFZpnoIK0+sXAhujZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTMwNDEyMGNlNjQ5NDJlZmIzODk2NjIzYjM4NmEwNDFk
Y2IzNjQwHhcNMjYwNzMwMDY1NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQ5MjlhY2I0NGUwNjEyMmJjNWQzMWRhNDdiMzQ4MDA2ZDc0NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCjIrLy3QAjRxi4eXJqY/6EmQGQ4
X/3NAolmYn3vR1c/GHMHUSghCOz/JdyXDi/r6sFP7rJygnR8+8z9BYVrPxTxVzns
wXAxEmU94Sn3nHI76/TCvIoH2KWd6DyKechWt7sfa4HAgWoAWrXT2pyH81d5UH/N
HWrIfDnpwGMtinnUeI5kD/6eB6Ue4/obGiGKNBCnM8pKoOC15wI6lPKwBNEQ/c8A
hoMl4BkM3UTSeI04LSkTj4+be3ifP/dJJF0Nc7WtQyZXNQZe8jNWAU4rDFQEfT64
qbiiBQt/HjuyGmjQ6Ge6w8+35lA8cq0L6nTVoG5/kdwkV0k37i9R1kKeuwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjZKay0TgYSK8XTHaR7NIAG10YSMB8GA1UdIwQY
MBaAFHSTBBIM5klC77OJZiOzhqBB3LNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTIt
NDMwOGIxMDU0MTdmLzEvMS1Oa3ByTFJPQmhJcnhkTWRwSHMwZ0FiWFJoSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2MvYjY4NGRiLWI2YjMtNDhkZC1hZTkyLTQzMDhiMTA1NDE3
Zi8xL2RKTUVFZ3ptU1VMdnM0bG1JN09Hb0VIY3MyUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkypzAN
BgkqhkiG9w0BAQsFAAOCAQEAhPsjNVlPvrOJVTJXMfmpD8v6uZveAZ51+YzdBsdA
ap545duyY3uCV6jcuHfUviVI7DsOb6XWNECCBt9mWptVXttXmT9c6AU9pmcKSRxD
Hp489QdVkg5RrTkDigrrpD5updvEMuJRy4Qs2X66KaMON9pIREJGkxic/6cTns2V
WjKvkK1TnBOkNUU8VHl9NvApzcaZ8LYeFicGSmO0nLpIvpZ5KpkCJ3ngvKTRvQZi
2BtU6u5NOtOl0+C9plNb1lFZG9WH7C4OGtm6r7GitJ4lKRL2zn1Lsf5n8yZfxDEY
pdZ7r+siEawRviv3vhWbFeIciC/2Iro3aFoEBYvvMYSi7g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:23 2026 by rpki-client