Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Nz_rhzIIcEfANx5vsO1ASWdqhzE.roa
File: Nz_rhzIIcEfANx5vsO1ASWdqhzE.roa (raw, json)
Hash identifier: 3huO9fPSJkSuTv6Ibn8AZSB4gHT/KqxGQidSH2kt68Q=
Subject key identifier: 37:3F:EB:87:32:08:70:47:C0:37:1E:6F:B0:ED:40:49:67:6A:87:31
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FE07A7CAC55BA9D36058011A31BE0518B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Nz_rhzIIcEfANx5vsO1ASWdqhzE.roa
Signing time: Sat 08 Aug 2026 08:25:51 +0000
ROA not before: Sat 08 Aug 2026 08:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 82.197.194.0/23 maxlen: 24
82.197.198.0/23 maxlen: 24
82.197.206.0/23 maxlen: 24
84.245.20.0/23 maxlen: 24
84.245.24.0/23 maxlen: 24
84.245.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:7a:7c:ac:55:ba:9d:36:05:80:11:a3:1b:e0:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 8 08:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=373feb8732087047c0371e6fb0ed4049676a8731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:a4:fb:32:47:02:ef:74:e6:db:ba:aa:12:
4f:4a:4d:04:0d:82:58:7c:e3:5c:31:e0:ec:50:37:
9f:c6:b0:1d:27:2c:86:d3:9b:cb:d0:15:b3:2d:9d:
20:7a:e1:2c:39:3d:e1:8a:f9:fc:e6:4a:9b:75:b3:
7f:dc:dc:ae:72:51:b4:5d:56:ab:5d:e8:22:ff:2a:
fa:e6:4f:27:29:a3:ec:55:25:7a:b6:5d:c2:4b:74:
0b:e3:59:c8:3f:df:29:33:a9:ff:76:c5:a8:71:06:
fb:5a:cc:59:b7:eb:61:4b:ed:e0:14:c9:ad:9a:ed:
c9:de:58:3c:34:4d:e2:7b:ee:1d:fb:af:d1:d3:24:
31:c2:60:bd:12:67:e9:7e:97:64:47:d6:7c:d8:12:
1c:0d:5d:48:40:af:ca:25:9a:91:1b:d8:51:7e:bc:
31:61:9f:10:d3:03:db:92:62:a1:12:db:48:02:ab:
d8:f7:56:d0:9c:a0:b5:3c:28:67:4f:ff:77:8e:25:
51:95:72:28:02:92:56:c8:2b:82:46:b9:33:4b:7a:
ce:f7:6a:84:cd:4f:4b:d6:0c:df:d4:2b:e6:a1:96:
dc:47:bf:1d:4d:5e:e3:d9:cf:f1:68:c7:80:46:b1:
f4:15:14:a2:31:99:98:64:fc:d1:aa:22:14:06:9d:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:EB:87:32:08:70:47:C0:37:1E:6F:B0:ED:40:49:67:6A:87:31
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Nz_rhzIIcEfANx5vsO1ASWdqhzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.194.0/23
82.197.198.0/23
82.197.206.0/23
84.245.20.0/23
84.245.24.0/23
84.245.30.0/23
Signature Algorithm: sha256WithRSAEncryption
60:83:9f:b2:f7:78:6f:7a:6e:79:d9:40:cb:64:b1:99:93:49:
65:c1:b6:1f:b1:54:4e:c3:ca:93:5e:f6:43:3e:2b:76:cb:d6:
4b:e9:73:9b:ea:b6:38:ef:c9:28:94:a8:c8:1a:b1:1a:46:2e:
3e:dd:63:38:a0:36:62:20:4b:33:ba:55:ad:17:5c:74:22:f6:
a4:d8:72:e8:18:a4:8f:e3:3a:85:c3:62:4a:73:66:1b:bb:d9:
bd:31:ad:5a:2e:1e:e1:5f:ac:ea:70:89:18:ff:56:66:95:7b:
f5:28:99:c3:e3:af:8c:76:aa:05:7a:09:12:cf:b6:ce:05:b8:
17:d4:05:f3:1d:32:51:2e:c0:3f:fb:32:5e:a8:27:28:4d:0f:
5e:a0:89:fa:30:da:7a:ef:72:2c:8d:56:ad:06:7d:6e:15:ee:
0d:02:19:4d:55:f9:5d:40:fa:43:ef:6d:d0:6f:c7:ba:f5:73:
31:7c:4d:d6:3f:63:a7:8d:c6:d6:01:02:1b:29:3e:07:d9:f9:
df:82:b0:a5:1d:8c:47:66:67:b2:50:24:c7:af:88:ef:4c:53:
ef:d5:82:01:88:be:28:39:bf:2f:9c:1f:9c:eb:ed:76:1d:0e:
35:f8:3b:13:42:3e:06:cb:4d:d9:d4:14:68:86:30:b2:42:07:
bc:46:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:08 2026 by rpki-client