Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/NRBS6ZtboB2iimKF471rwSY1gJo.roa
File: NRBS6ZtboB2iimKF471rwSY1gJo.roa (raw, json)
Hash identifier: TinIeELIj1280SRdWKZnK8lTmk3dSvkgs4pLOxMqj3g=
Subject key identifier: 35:10:52:E9:9B:5B:A0:1D:A2:8A:62:85:E3:BD:6B:C1:26:35:80:9A
Certificate issuer: /CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Certificate serial: 019F2368890FCA06ED4D8871CDC8C0A4A76E
Authority key identifier: 2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/NRBS6ZtboB2iimKF471rwSY1gJo.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6364
IP address blocks: 89.107.56.0/21 maxlen: 24
185.73.36.0/22 maxlen: 24
2a03:41a0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:89:0f:ca:06:ed:4d:88:71:cd:c8:c0:a4:a7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=351052e99b5ba01da28a6285e3bd6bc12635809a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:3c:7e:67:b7:3f:89:91:40:3a:d4:c1:6b:
6d:18:19:fa:a9:4a:85:a5:9e:7f:a4:14:45:da:a9:
bf:43:aa:2a:85:1a:d1:c0:b9:7e:ad:c4:08:a5:65:
2c:d0:ad:50:1e:d9:71:29:fa:56:c9:ee:fa:57:9d:
bf:00:45:e6:76:31:a4:ae:05:64:8c:aa:cd:5f:5a:
ce:a2:97:f8:56:b3:b1:a4:bb:1e:c6:6a:56:7f:79:
c1:0d:91:7d:b3:6a:f1:fc:f4:66:e3:57:b5:8f:81:
1a:07:d3:a7:4e:72:a2:1f:f8:2e:d4:d2:0c:60:ed:
0f:26:e6:35:36:5d:9d:af:81:9d:4d:27:81:f8:93:
b3:8d:c1:80:2c:f1:cf:38:74:14:17:5a:4b:20:47:
2e:c2:49:e7:01:ba:c9:83:dd:1c:60:aa:0c:1d:a7:
14:88:e1:9d:a7:de:b7:64:67:39:57:44:2b:51:d1:
ef:16:3a:94:75:ac:cc:cd:7c:6a:6f:44:1e:43:61:
7d:49:85:8b:6b:92:de:fd:24:23:bd:ab:b0:0e:f2:
9d:1a:5e:3f:d2:99:28:64:d2:95:d1:92:58:63:29:
aa:0c:1c:20:55:66:06:4b:d4:6d:2d:71:ba:72:92:
f8:26:fa:20:27:b0:a1:dc:07:fa:b4:c8:d6:6b:7d:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:52:E9:9B:5B:A0:1D:A2:8A:62:85:E3:BD:6B:C1:26:35:80:9A
X509v3 Authority Key Identifier:
keyid:2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/NRBS6ZtboB2iimKF471rwSY1gJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.56.0/21
185.73.36.0/22
IPv6:
2a03:41a0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:7a:16:f6:59:2a:57:e7:3a:df:f9:1b:f1:e6:31:1d:04:01:
8f:f2:3f:79:62:58:8d:33:a7:d9:7b:ea:c3:a2:72:d0:c2:60:
40:ad:2c:9e:db:f0:ba:f8:7a:a6:9b:bc:cc:83:be:df:f0:f1:
6f:d0:46:79:ed:7b:dd:a6:3a:7e:96:26:8f:86:20:8d:4b:2b:
ce:5c:54:4b:97:12:28:3b:8a:5e:13:ef:3b:5c:c4:33:65:67:
5d:31:23:65:62:c8:ec:4d:94:63:9f:c8:e3:89:4b:01:84:ff:
8a:34:20:0d:48:cc:04:bc:45:1a:f5:fd:83:1f:c2:87:33:a9:
00:26:79:e2:3f:f4:7d:88:22:84:3a:ea:27:3e:9e:01:2e:83:
dc:52:eb:32:f5:fe:48:be:53:cd:c7:53:27:e3:05:7f:06:93:
1a:13:26:af:09:ab:1b:b0:13:e3:99:4c:d1:7a:d4:ec:db:11:
15:11:51:f0:40:64:88:2c:05:3b:24:e4:4d:09:bd:fc:2a:b1:
0a:86:ec:db:29:04:8c:fa:cc:e5:36:05:50:8d:d4:68:95:2b:
fc:9d:3a:9d:45:25:52:d3:0c:e1:ba:ba:b0:9e:24:37:39:b0:
35:71:90:67:68:09:31:90:33:f1:ed:1f:42:33:98:bd:21:a3:
f3:9d:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:41 2026 by rpki-client