Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/NvGwv0tgbOiZD5vQjxJqJJXPvRA.roa
File: NvGwv0tgbOiZD5vQjxJqJJXPvRA.roa (raw, json)
Hash identifier: 3uFlLidOa4e1nDZau75bOj3y4T1goZPB2N6R1JL8d7c=
Subject key identifier: 36:F1:B0:BF:4B:60:6C:E8:99:0F:9B:D0:8F:12:6A:24:95:CF:BD:10
Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial: 019F75E2A11C002CAA33095D6A868220BC20
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/NvGwv0tgbOiZD5vQjxJqJJXPvRA.roa
Signing time: Sat 18 Jul 2026 15:40:14 +0000
ROA not before: Sat 18 Jul 2026 15:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213354
IP address blocks: 194.79.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:e2:a1:1c:00:2c:aa:33:09:5d:6a:86:82:20:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Validity
Not Before: Jul 18 15:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f1b0bf4b606ce8990f9bd08f126a2495cfbd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:1d:4b:9b:f4:34:57:4c:02:16:52:47:e0:
aa:15:78:77:11:6c:54:be:fa:e7:d0:4c:74:de:3d:
e9:ac:58:f3:68:bb:6a:e3:bf:48:ce:e7:66:1d:25:
32:d5:ff:ac:12:79:48:ae:72:3c:7c:bd:19:de:56:
87:c8:58:70:6b:fe:38:7d:2c:ec:37:e6:0d:99:f6:
a5:fc:16:cf:55:be:31:54:8e:32:d4:97:be:09:60:
2c:09:82:3e:0e:42:d0:32:69:39:40:d6:2c:27:00:
bf:6c:d6:94:a7:ef:3d:58:5c:47:61:f0:3b:ca:7c:
32:8b:10:ac:01:b5:74:16:72:d0:f2:1b:1f:7b:bb:
0f:ec:52:0d:f2:b3:26:72:8e:64:93:75:a4:01:27:
5c:fb:7b:d4:1c:dc:f6:00:a9:5a:13:6e:da:59:ca:
22:fb:c9:b4:d1:a9:98:ae:f0:a3:04:d0:96:ef:3c:
de:98:a5:39:7a:bb:22:70:1f:18:07:41:e9:f3:08:
1d:fb:6e:e5:1f:6b:f0:96:3a:85:4e:1c:dd:e3:0d:
93:be:c7:6d:fa:d8:71:ea:4a:18:75:a5:6f:d0:96:
6a:b1:37:e2:6a:ad:11:47:bd:ff:c3:8a:26:04:eb:
ab:47:ec:cb:9a:b4:45:43:e9:6c:5d:57:0e:28:52:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:B0:BF:4B:60:6C:E8:99:0F:9B:D0:8F:12:6A:24:95:CF:BD:10
X509v3 Authority Key Identifier:
keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/NvGwv0tgbOiZD5vQjxJqJJXPvRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.8.0/22
Signature Algorithm: sha256WithRSAEncryption
47:d5:17:c8:1b:a1:33:0d:8b:b6:ab:50:99:d3:b0:9b:28:84:
8b:fe:9c:92:f5:87:39:3a:72:ff:d4:c0:af:52:93:5b:63:80:
e2:2c:7d:47:6a:c0:76:33:48:30:ab:1b:9f:40:fc:29:df:ce:
4d:33:5a:1c:bd:4b:3b:94:ec:f6:c8:35:30:5f:ab:3b:06:6e:
f8:69:f5:c7:25:8a:26:aa:02:27:9f:23:14:47:42:a2:ae:76:
8d:73:80:db:2e:b3:f6:a7:88:ae:29:3d:ab:44:f8:e6:dc:79:
41:47:b1:e6:44:98:5c:6e:68:87:b9:53:aa:89:d5:f7:de:85:
64:7f:29:a0:c3:b0:38:c5:a9:ee:93:89:b7:76:14:67:6e:48:
b3:76:37:e2:20:1f:b2:3d:87:4b:a9:8f:6a:8a:18:56:83:8b:
c1:35:70:9a:3e:01:44:31:82:46:88:73:a1:c1:53:97:d6:f2:
d6:a6:71:b0:66:3a:34:ef:d9:71:28:74:e1:e6:bf:c5:35:04:
8c:c3:80:1e:ed:d3:15:3d:e1:36:01:fb:25:89:85:55:8b:1a:
ae:26:ee:8f:48:c5:8f:6d:1b:da:eb:6a:de:d7:26:63:03:c6:
a6:b1:fd:0b:9f:d0:0f:00:05:05:e0:3b:16:06:d1:6d:1a:5e:
f6:37:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:07 2026 by rpki-client