Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/nk8y1H5NW2BwGJND1SRjjBwxuXU.roa
File: nk8y1H5NW2BwGJND1SRjjBwxuXU.roa (raw, json)
Hash identifier: jPTkLebAkQEPVryDlf6dqscgIcANFkCMCtjBSpohJJg=
Subject key identifier: 9E:4F:32:D4:7E:4D:5B:60:70:18:93:43:D5:24:63:8C:1C:31:B9:75
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 01A159DB6A89C0C2E56F9216A284774CA9F4
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/nk8y1H5NW2BwGJND1SRjjBwxuXU.roa
Signing time: Tue 20 Oct 2026 15:08:34 +0000
ROA not before: Tue 20 Oct 2026 15:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47542
IP address blocks: 87.240.166.0/23 maxlen: 23
87.240.166.0/24 maxlen: 24
87.240.167.0/24 maxlen: 24
95.142.204.0/23 maxlen: 23
95.142.207.0/24 maxlen: 24
95.213.44.0/23 maxlen: 23
95.213.44.0/24 maxlen: 24
95.213.45.0/24 maxlen: 24
2a00:bdc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:db:6a:89:c0:c2:e5:6f:92:16:a2:84:77:4c:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Oct 20 15:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e4f32d47e4d5b6070189343d524638c1c31b975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:97:77:65:9a:b2:90:3e:15:2e:e7:90:68:
e2:96:f5:38:96:e3:00:e0:fd:d5:12:5f:4e:98:9b:
23:1f:72:8b:d8:e3:b6:0d:e3:7e:b5:74:ee:a4:bd:
d7:74:3e:b9:77:a3:1c:cf:c6:68:59:34:cc:75:76:
f8:fd:48:34:22:e4:55:bc:fc:73:ff:b1:b9:6f:bb:
60:8b:4b:5b:f4:c4:f0:38:ca:19:ad:3d:af:5d:57:
ee:ce:0a:91:e3:6d:78:18:fe:fb:85:cb:a2:7d:07:
c6:32:2c:9c:7e:4c:a4:11:70:32:fc:e6:4b:44:cd:
f7:91:da:73:43:b6:74:e1:c1:05:9c:99:35:16:2e:
d3:9f:75:e0:d5:5a:f1:af:c1:85:de:2e:8a:94:a0:
d8:8c:78:82:cb:2b:23:80:10:cc:1c:0c:a7:67:c7:
4d:cb:ac:c5:07:ce:3d:e6:c0:12:09:d8:69:66:1b:
20:97:86:3c:44:c2:3b:dc:f6:6a:bc:52:96:17:de:
a2:00:d3:80:27:c2:ea:2c:5f:b4:c0:69:ff:1f:08:
8b:69:84:02:84:05:7f:1a:94:11:02:67:a5:0f:68:
f5:f5:e3:18:33:b0:c4:83:4c:b7:16:71:77:2c:97:
72:fb:ec:d5:ec:9a:20:02:e4:0b:d6:a0:1c:ac:c4:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:32:D4:7E:4D:5B:60:70:18:93:43:D5:24:63:8C:1C:31:B9:75
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/nk8y1H5NW2BwGJND1SRjjBwxuXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.240.166.0/23
95.142.204.0/23
95.142.207.0/24
95.213.44.0/23
IPv6:
2a00:bdc0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
52:5e:19:61:fc:90:30:17:b5:6c:15:d1:e9:be:d6:26:34:b0:
b0:61:2f:c0:25:a5:b5:82:f4:34:f4:86:66:a4:9b:c2:41:2f:
3a:c7:ae:db:f1:b5:26:9c:75:ef:4b:7c:2a:fb:2c:09:d3:0f:
6a:38:42:31:32:98:f1:02:c5:d3:a0:14:cb:d9:a1:fc:08:5a:
0f:8c:f7:09:76:36:47:bb:b4:a4:70:3d:37:31:33:5c:80:c7:
30:b9:3b:f7:25:2d:f4:90:91:f3:93:c8:dc:5f:56:15:d1:4a:
9b:a2:9a:16:f6:b0:b7:9f:02:67:c8:06:0b:91:ba:fb:90:0a:
c6:c9:57:81:f3:b1:12:a4:21:67:f4:58:33:41:3c:d0:ba:a2:
7d:2a:cf:16:4d:61:1b:e4:d6:23:26:3a:1c:b4:b9:3b:f9:c4:
45:78:d6:ca:fb:04:65:be:47:3f:5c:1b:2e:21:dd:57:d2:dc:
f4:01:47:fb:ba:b4:3b:f2:a5:d9:ea:a8:b5:cf:60:1c:1e:72:
40:be:55:dc:fb:9e:b2:88:2a:49:1b:e3:15:74:bc:19:3c:7e:
0c:e0:12:9b:97:fd:31:c8:ad:a0:ed:fc:71:07:e7:a8:96:55:
a5:3c:84:46:43:66:bd:96:a6:b9:ac:e3:af:ff:61:8a:e4:1a:
c8:7a:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:55:09 2026 by rpki-client