Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/NFRDafdwtbHFs2DS-06WUfB0qjs.roa
File: NFRDafdwtbHFs2DS-06WUfB0qjs.roa (raw, json)
Hash identifier: CADabzrhmlSvgDt/e0SzZcFB32kEvIdohJzhJZyWJJc=
Subject key identifier: 34:54:43:69:F7:70:B5:B1:C5:B3:60:D2:FB:4E:96:51:F0:74:AA:3B
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019F6065AC8384B44008F9A19B31D31005CE
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/NFRDafdwtbHFs2DS-06WUfB0qjs.roa
Signing time: Tue 14 Jul 2026 11:31:43 +0000
ROA not before: Tue 14 Jul 2026 11:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 77.93.88.0/24 maxlen: 24
85.149.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:65:ac:83:84:b4:40:08:f9:a1:9b:31:d3:10:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 14 11:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34544369f770b5b1c5b360d2fb4e9651f074aa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:7d:12:5f:a1:a6:18:e2:c7:17:ab:21:3b:
3f:ac:15:67:b3:ff:52:68:95:d0:38:5d:9f:ff:29:
48:c1:55:5d:51:29:f8:53:8f:fc:97:83:75:78:55:
28:4f:a3:8f:ba:53:91:e2:de:65:c5:8f:8f:26:5a:
48:ad:ac:e5:a5:dd:c8:04:ad:e4:db:6e:4f:e4:44:
10:8c:b4:cf:7a:e7:b5:66:a6:21:07:3e:bc:72:14:
80:55:96:ac:86:b8:3a:99:d4:cf:d5:ed:7b:1a:bf:
bd:09:96:b0:bd:8c:49:de:80:f2:af:e4:5e:c9:a4:
f1:91:3f:84:91:eb:d0:df:af:5f:da:b0:12:f7:22:
7c:85:45:a3:6f:6b:d7:a0:c9:ed:52:2c:d2:9b:80:
dc:af:ec:ba:57:92:0a:41:51:47:5d:e4:d3:2f:db:
2c:78:7a:8d:e6:7b:bf:26:2d:73:b4:83:79:d1:ab:
35:be:ea:6f:cd:b7:c7:03:fb:d0:54:30:51:70:84:
82:30:eb:ff:ed:54:71:af:37:f5:cd:f7:60:69:7e:
de:d4:7e:a5:2e:1e:b1:a6:1e:88:c5:7b:6d:35:3c:
e1:28:cb:fc:c7:63:17:43:7f:de:c4:f6:62:55:92:
23:b8:e4:f5:32:ea:17:b1:76:4d:17:0c:a9:da:75:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:54:43:69:F7:70:B5:B1:C5:B3:60:D2:FB:4E:96:51:F0:74:AA:3B
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/NFRDafdwtbHFs2DS-06WUfB0qjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.88.0/24
85.149.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:38:e2:33:50:b0:74:dc:81:b1:0b:a4:17:12:b6:eb:a1:11:
dc:6d:cc:c9:f0:94:16:dc:82:a6:62:1a:fa:bb:28:a6:67:7e:
b4:77:ce:f2:1b:ac:76:d9:44:91:a9:f5:f3:8d:28:78:b5:1c:
e1:2d:29:71:2d:16:45:b0:be:a8:11:c2:34:54:21:71:e8:f5:
cc:b3:71:56:85:9f:19:d8:eb:ff:1a:db:a6:ff:bd:54:0e:d4:
4e:33:41:2f:ef:0a:46:d8:25:93:86:02:f4:7c:9f:41:5f:bd:
f2:96:5a:a6:78:99:9a:32:1f:be:64:65:56:8a:7a:2e:f8:15:
b4:8f:61:2e:bc:40:63:fe:e9:7c:87:90:64:b5:4c:ae:b2:29:
75:f3:7d:5d:1a:48:6c:3b:d6:3f:dc:be:aa:e2:0d:3f:3b:80:
5b:4b:c9:23:8e:02:b1:80:3e:49:98:71:a4:d3:58:b3:07:d3:
9f:28:3d:84:5f:20:fa:42:1f:f5:39:f7:8b:42:cb:9e:15:db:
a5:7d:73:94:4f:67:a7:a0:c3:b7:8a:0f:ea:6e:71:0a:2d:e1:
67:c1:62:84:58:b7:7e:61:e1:3a:1f:29:3a:6c:9a:e8:30:e0:
6a:fb:a9:84:df:ef:6e:5c:8f:ae:e5:4d:6c:6b:ea:e6:ac:f7:
30:f7:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client