Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/nWV2WhqZ994NDP00nWeEB2vRwb0.roa
File: nWV2WhqZ994NDP00nWeEB2vRwb0.roa (raw, json)
Hash identifier: Cup9ltThtrCZ1UgDAuujOsPqhg/Kcg7e9Ea+9DWDXM0=
Subject key identifier: 9D:65:76:5A:1A:99:F7:DE:0D:0C:FD:34:9D:67:84:07:6B:D1:C1:BD
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019CD1F09506EC527850A65B922CB2E4BFF6
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/nWV2WhqZ994NDP00nWeEB2vRwb0.roa
Signing time: Mon 09 Mar 2026 09:32:10 +0000
ROA not before: Mon 09 Mar 2026 09:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199749
IP address blocks: 84.39.32.0/24 maxlen: 24
84.39.33.0/24 maxlen: 24
185.47.80.0/24 maxlen: 24
185.47.81.0/24 maxlen: 24
185.47.82.0/24 maxlen: 24
185.47.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:f0:95:06:ec:52:78:50:a6:5b:92:2c:b2:e4:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Mar 9 09:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d65765a1a99f7de0d0cfd349d6784076bd1c1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:28:d7:ac:ae:4e:df:6a:30:8b:1f:49:db:
96:e1:20:8f:c3:f1:c7:37:df:00:00:c5:8b:18:75:
33:1a:09:b2:74:55:d5:e9:46:88:3f:f9:84:0b:0d:
9c:9b:e0:71:eb:44:91:5b:95:1e:8b:7d:2b:96:0e:
1a:18:d6:68:49:37:b4:96:92:27:ff:3c:47:59:6d:
42:e1:d3:38:0a:44:15:79:01:8e:44:65:fd:5f:2e:
4e:c6:73:93:2c:0a:e4:40:df:3d:8f:5d:44:4b:97:
97:17:5d:97:aa:52:75:f9:b9:4e:06:57:a2:85:55:
1b:fe:ef:c6:93:0e:51:1b:0a:2a:24:41:e1:c3:2f:
bd:7b:f5:e5:73:e9:c7:20:a2:49:06:39:ba:b8:a8:
5c:03:a9:5a:21:9b:02:70:01:3b:41:d9:a5:77:87:
a8:0a:1d:7e:1b:4d:a8:fe:4b:34:e1:0c:05:4e:8c:
c1:e9:73:39:e0:18:c0:b3:5f:ee:a2:7f:cb:5c:7d:
e8:67:52:47:1c:12:07:f9:f0:b7:ec:2a:9b:81:aa:
d0:86:15:8b:5d:1e:79:27:16:87:30:5c:96:1d:c5:
cb:25:2c:58:c0:b8:f2:ce:65:76:9e:62:cf:2a:60:
ab:67:b2:63:06:bf:0e:bc:4e:75:7c:20:da:c8:55:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:65:76:5A:1A:99:F7:DE:0D:0C:FD:34:9D:67:84:07:6B:D1:C1:BD
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/nWV2WhqZ994NDP00nWeEB2vRwb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.32.0/23
185.47.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:5f:17:0c:af:8c:aa:ae:13:d2:52:a3:d6:d2:ce:c8:b1:33:
8f:d7:8c:56:8d:69:dd:fb:b2:2d:b8:82:61:e7:f4:31:17:71:
3c:74:b3:56:17:24:0b:cf:f6:97:6a:5d:d8:d0:16:dd:71:40:
b3:a7:2c:b7:11:fb:07:65:74:ae:40:b6:43:8c:fe:b7:b4:76:
20:e6:a1:1a:ee:17:fa:d1:ff:76:7a:eb:2b:5d:62:5b:3d:a2:
7d:5c:1a:e3:ff:65:1a:48:d6:93:9e:9a:f5:6a:09:9e:d3:c0:
53:d0:ea:0e:63:f2:97:c5:98:b0:66:2d:b1:1d:ac:a3:64:8e:
47:ec:48:cc:39:7a:0a:cd:51:38:c2:d0:2c:0b:13:f6:a6:36:
3c:98:d8:b7:64:f3:26:c7:0e:69:75:42:4a:d3:74:4b:c5:78:
29:30:63:e2:b9:1e:d2:cb:23:24:d4:34:30:87:0e:e0:32:d9:
e7:e1:93:a9:45:71:6d:ea:c9:26:ed:72:0e:dc:d4:e5:47:85:
69:03:43:37:25:4e:a8:f8:da:6e:56:01:d2:d2:04:20:68:70:
3f:76:4e:6f:c4:df:77:29:fd:33:88:19:eb:89:bc:6d:ec:d3:
27:eb:d5:22:13:fb:81:4d:f9:ae:35:46:23:a9:77:7a:46:04:
a4:51:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:07 2026 by rpki-client