Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/nKL6RhWH03XSoqmIn1uFKrwasiI.roa
File: nKL6RhWH03XSoqmIn1uFKrwasiI.roa (raw, json)
Hash identifier: ueoRp7geMLYqs7Dnek2arZo3pMbpMq1QWXLA9HjHVyM=
Subject key identifier: 9C:A2:FA:46:15:87:D3:75:D2:A2:A9:88:9F:5B:85:2A:BC:1A:B2:22
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019FC81791DDCB41767AB6F4AC10F7376E33
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/nKL6RhWH03XSoqmIn1uFKrwasiI.roa
Signing time: Mon 03 Aug 2026 14:46:55 +0000
ROA not before: Mon 03 Aug 2026 14:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 185.179.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 12:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:17:91:dd:cb:41:76:7a:b6:f4:ac:10:f7:37:6e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 3 14:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ca2fa461587d375d2a2a9889f5b852abc1ab222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:ed:2d:df:8a:65:64:44:2f:8b:49:6c:67:
a1:3e:49:28:01:b8:5a:ec:4f:23:34:69:79:c2:12:
eb:3b:17:4f:ac:9a:94:e0:81:5d:95:2b:9c:d7:d6:
43:78:2c:8c:5e:b5:b6:83:99:8e:64:e1:e9:48:61:
66:8a:15:da:94:21:da:ea:ee:07:8c:2e:45:9a:af:
47:87:5f:89:d1:f6:eb:a0:b8:7a:81:09:70:20:e5:
9a:33:0b:05:ec:0c:ad:3f:8f:88:1b:72:20:fe:e8:
ac:76:15:21:10:ab:58:80:47:4e:d8:a5:95:8a:cc:
ac:7f:cb:61:6f:33:1b:03:67:ea:3a:dc:80:b5:46:
5e:97:19:09:4a:80:39:0b:7a:23:d0:80:24:0f:f5:
e2:9d:b5:d3:a7:fb:ca:12:a5:36:25:fd:dd:8c:7e:
04:2e:0c:17:15:47:26:6f:4c:a6:d9:19:03:b9:58:
0d:e4:40:71:5e:df:6f:40:8b:ad:c9:89:98:ed:27:
2c:a4:8e:1f:80:c6:10:45:9f:dd:11:13:29:40:56:
dd:82:75:c4:ba:f2:71:cf:f2:58:c4:34:be:c8:1e:
41:95:29:14:cf:a2:e7:f7:93:91:bf:7c:19:c9:66:
f6:97:92:70:a9:d7:dc:6a:78:0b:57:41:f8:d0:19:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:FA:46:15:87:D3:75:D2:A2:A9:88:9F:5B:85:2A:BC:1A:B2:22
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/nKL6RhWH03XSoqmIn1uFKrwasiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
23:30:78:b2:d3:cd:e6:20:c5:e0:f9:48:d1:cb:55:c1:2a:a8:
9b:3f:aa:72:b6:53:d5:6b:de:fc:53:82:48:0f:19:75:15:32:
4e:c4:63:10:0c:bb:dc:2f:6d:2d:bb:a0:0e:34:5e:64:22:1e:
dd:7a:26:45:0a:80:53:53:dc:f4:d5:d0:90:90:3b:ce:57:bf:
9f:5a:a1:9e:6f:fd:d0:6d:93:59:95:98:72:6b:ad:b6:68:27:
27:8c:d4:2c:e2:48:c7:11:06:85:9d:3f:9d:e5:22:42:a7:b8:
81:0f:68:37:f6:8a:9c:d4:f8:cf:09:f5:37:83:30:5a:49:b0:
5f:82:1f:d4:98:dd:88:de:42:72:03:c2:9c:bb:d2:5e:45:96:
33:43:62:f8:10:30:df:ad:ae:15:fd:10:c2:ea:12:90:af:22:
2a:6b:15:fb:7a:a7:28:cb:95:cf:18:75:20:78:34:a6:2c:5a:
6e:75:f9:ec:e6:31:06:a5:ea:c9:8e:ba:7c:f3:c5:78:46:f2:
42:75:d9:4c:85:8d:e6:1d:56:70:f9:20:c2:e6:23:1e:ba:00:
77:62:64:c0:aa:44:58:d7:86:8c:b9:fb:4c:e4:64:81:8a:db:
b3:aa:94:08:71:31:59:15:be:b1:cf:7a:53:d8:20:f0:f3:cb:
4b:71:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:11:57 2026 by rpki-client