Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/n1zkJekeyfI9nZXQvZObpf-kjPY.roa
File: n1zkJekeyfI9nZXQvZObpf-kjPY.roa (raw, json)
Hash identifier: AOTChG5S56HEDDpDg6TKRyUTp0vJHapTYmr3p4lJxj0=
Subject key identifier: 9F:5C:E4:25:E9:1E:C9:F2:3D:9D:95:D0:BD:93:9B:A5:FF:A4:8C:F6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A04853E52AF9F36030018599B8FC9B7372
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/n1zkJekeyfI9nZXQvZObpf-kjPY.roa
Signing time: Fri 28 Aug 2026 12:24:12 +0000
ROA not before: Fri 28 Aug 2026 12:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 188.240.73.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
194.242.2.0/24 maxlen: 24
217.19.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:53:e5:2a:f9:f3:60:30:01:85:99:b8:fc:9b:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 28 12:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f5ce425e91ec9f23d9d95d0bd939ba5ffa48cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:7c:04:22:b1:f9:81:37:ec:30:e4:11:32:
d4:1f:9c:0d:b4:0f:29:eb:c1:c0:44:8d:d3:11:54:
fd:9d:58:24:a2:ba:c7:41:de:09:aa:be:a5:96:d5:
93:e1:94:9c:cb:61:b9:b2:6b:e9:5d:d7:a6:1b:8f:
f3:c9:63:88:19:6d:c7:9a:b1:43:81:82:db:50:4a:
9f:02:7f:3d:5a:b1:80:77:1f:52:a5:38:c2:af:90:
c3:d1:2d:7d:aa:e9:e5:58:2f:e4:7a:76:4c:f2:87:
03:75:82:74:cd:92:d5:2a:58:82:e7:7b:b4:bf:75:
b8:b7:e1:47:5d:f9:c2:ed:02:4a:b5:67:49:b4:d4:
82:ca:07:22:5b:ab:3d:ce:eb:2f:02:20:36:c4:e9:
9d:36:46:0c:54:63:ef:65:7a:9c:07:68:80:83:1f:
13:9c:2b:1f:0e:e8:28:4c:3b:d7:9f:60:4a:09:33:
06:08:dc:d0:dc:d6:6e:b6:ee:15:9c:40:fa:b2:b0:
9f:95:92:a7:77:12:e7:31:5c:1f:83:9b:bf:56:2a:
18:95:54:cf:c3:00:c1:71:42:74:a8:0d:d2:09:d1:
9f:6a:05:b4:8a:02:1c:7b:f6:c6:ee:11:60:51:84:
be:99:22:03:5d:56:0e:04:ed:e9:0d:d6:f1:81:07:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:E4:25:E9:1E:C9:F2:3D:9D:95:D0:BD:93:9B:A5:FF:A4:8C:F6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/n1zkJekeyfI9nZXQvZObpf-kjPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.73.0/24
193.19.108.0/24
194.242.2.0/24
217.19.24.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2c:95:16:1a:04:1f:94:bf:f0:12:55:2f:fb:54:74:d8:e8:
35:4a:69:17:e3:87:50:c6:06:cc:1a:ae:85:15:e2:40:9b:67:
59:b1:86:56:a8:80:39:34:4c:2b:0c:81:b1:19:94:b0:59:cd:
b3:0f:62:56:45:12:1a:58:ef:a3:a0:4f:cc:b8:6a:21:77:0d:
88:92:8d:f4:87:34:ce:a3:8e:84:78:5e:8d:a6:8c:a7:e1:4c:
fc:4e:3c:55:56:ef:81:1d:c9:ff:0e:cd:9f:52:94:51:e4:88:
ab:67:8e:bf:55:19:c6:cf:56:33:52:8b:a6:8a:2a:63:93:5c:
df:17:cb:9f:d6:da:3e:c2:44:0d:bf:21:b4:18:d5:32:ed:0f:
97:be:f6:f5:3d:5c:0a:15:86:6e:5e:68:b2:b6:01:70:52:05:
6f:1d:b0:84:b7:2e:b4:ef:5f:6b:50:61:1c:30:5f:c0:12:26:
e7:be:de:82:6f:b6:12:b8:ff:6d:c4:ce:e0:de:2b:76:52:46:
3f:c6:83:74:8c:fe:c9:99:21:be:9a:c3:22:03:d4:86:ba:33:
5c:1e:4b:e6:e8:5e:e5:22:b0:f5:3f:c2:82:10:e8:8c:c9:6d:
50:96:13:d5:3a:ee:02:01:f6:38:b3:a5:c8:2e:3a:db:4d:b5:
1c:cc:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:36 2026 by rpki-client