Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RNUP1Np6QRktQX-s3eJMrgGbRp8.roa
File: RNUP1Np6QRktQX-s3eJMrgGbRp8.roa (raw, json)
Hash identifier: j8LadQgl763wWRgvHTVQo89AGNRGCnpRpcFPhvOGCfQ=
Subject key identifier: 44:D5:0F:D4:DA:7A:41:19:2D:41:7F:AC:DD:E2:4C:AE:01:9B:46:9F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F418E30E1384A2438E2380040C2D23EC8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RNUP1Np6QRktQX-s3eJMrgGbRp8.roa
Signing time: Wed 08 Jul 2026 11:47:45 +0000
ROA not before: Wed 08 Jul 2026 11:47:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 195.40.106.0/23 maxlen: 24
195.172.108.0/23 maxlen: 24
195.172.118.0/23 maxlen: 24
195.172.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:8e:30:e1:38:4a:24:38:e2:38:00:40:c2:d2:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 8 11:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44d50fd4da7a41192d417facdde24cae019b469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:79:77:5e:cf:ba:16:07:11:6b:d3:f6:70:
71:29:74:96:ae:91:8e:df:4b:db:70:32:66:4a:1e:
9a:43:b8:63:44:d2:80:7a:1d:10:88:7e:aa:5b:58:
48:b3:55:5a:06:1d:14:3d:1d:16:2b:8a:eb:ce:43:
4b:14:fa:bc:d4:80:38:75:0d:73:ac:89:f8:cb:f8:
fa:dc:1d:2e:7a:4a:e2:b6:0c:c0:c9:b3:77:ab:3d:
55:87:31:92:74:95:5e:34:77:ea:53:ea:3b:a9:0a:
74:ab:1e:01:76:72:2f:72:14:c9:c0:c8:18:73:fa:
41:19:93:69:f7:d6:0f:8a:fc:19:db:2a:f2:db:ae:
31:bb:07:26:53:4c:0c:ee:01:7b:06:43:73:3a:3c:
8d:5e:83:24:55:6c:3d:25:96:f6:ad:c5:21:f5:b6:
a3:f6:ac:fb:d0:ef:46:10:53:c7:e9:73:59:dd:7a:
92:3b:ef:b5:f3:30:9a:ca:03:c9:4a:eb:ff:71:37:
27:16:ee:3a:1e:43:12:9a:23:cf:dc:22:1e:2d:b2:
4d:09:77:73:80:e0:dd:ba:07:e5:9d:ec:8e:a1:f0:
f0:fd:a5:af:35:8d:ae:7f:cd:17:b4:99:65:83:73:
f5:b7:56:77:be:62:2f:35:25:b5:14:98:58:0a:9b:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:0F:D4:DA:7A:41:19:2D:41:7F:AC:DD:E2:4C:AE:01:9B:46:9F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RNUP1Np6QRktQX-s3eJMrgGbRp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.106.0/23
195.172.108.0/23
195.172.118.0/23
195.172.200.0/23
Signature Algorithm: sha256WithRSAEncryption
26:eb:d1:5d:eb:c5:0e:94:e1:93:c3:ca:89:d9:4f:eb:4d:92:
a7:63:19:3b:b4:12:71:14:f9:e3:9a:f0:16:d9:8f:2b:60:04:
54:f2:53:75:a9:e1:46:77:15:ea:d6:11:ff:db:5b:32:79:85:
a5:13:ad:b8:c3:45:e6:10:6c:df:dc:74:75:78:06:93:13:31:
fb:5d:0b:f3:fa:a4:90:2a:db:2d:d5:5c:98:2a:ab:ed:a7:58:
70:69:ad:a1:32:c8:3d:8d:c7:c1:c3:35:fb:49:b1:8d:c4:ed:
0f:62:89:4a:f4:e5:0d:02:59:5c:5f:ec:68:ab:26:45:4c:35:
2c:29:13:ff:c4:e0:7b:54:17:e0:61:6d:8f:8e:df:e1:9e:da:
81:44:38:05:37:05:74:6e:f6:38:69:ed:eb:be:29:22:16:c4:
8e:2a:68:78:a5:d6:40:93:97:35:4b:52:fa:42:19:b3:0c:c1:
ca:a9:fb:57:84:fe:60:37:01:ff:e8:4b:29:1b:d2:f5:a3:e1:
f3:a5:b6:b6:19:0a:ce:d5:96:2f:88:45:ed:d0:b2:6e:6a:73:
a1:04:ec:5c:25:6c:40:bb:72:81:af:03:0b:a0:34:5a:3a:99:
cb:10:6e:0b:44:15:9f:b9:16:09:b8:c7:ce:70:d7:93:39:e5:
40:c0:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:21 2026 by rpki-client