Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NfhjXThRAR9WlLAnnMDPo95swGA.roa
File: NfhjXThRAR9WlLAnnMDPo95swGA.roa (raw, json)
Hash identifier: SMa2RFFbVljNgbhdlNWYkUqOIq1qiZ/eebXtBg1vaJE=
Subject key identifier: 35:F8:63:5D:38:51:01:1F:56:94:B0:27:9C:C0:CF:A3:DE:6C:C0:60
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019DFD42E4366FED5BD96C9F4874E085FE98
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NfhjXThRAR9WlLAnnMDPo95swGA.roa
Signing time: Wed 06 May 2026 12:28:32 +0000
ROA not before: Wed 06 May 2026 12:28:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60721
IP address blocks: 185.141.34.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:42:e4:36:6f:ed:5b:d9:6c:9f:48:74:e0:85:fe:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 6 12:28:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35f8635d3851011f5694b0279cc0cfa3de6cc060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:89:d5:e2:1e:df:32:34:c9:a5:8e:b9:63:
05:dc:75:21:be:3a:9b:e6:fe:f4:90:ee:dd:46:c4:
7c:f7:38:74:c8:18:c0:45:3e:f3:15:35:04:14:a3:
64:65:68:1d:d1:83:be:6c:ba:ae:c9:b2:ed:d1:4e:
6e:5e:29:e8:66:f1:8c:49:f9:f0:0f:5c:e5:b0:12:
62:07:21:bf:fe:00:c0:a8:e4:61:9b:ce:0f:a9:7e:
51:48:96:5f:3a:cc:de:46:7f:b7:13:ff:c8:d4:ef:
5f:c9:61:3d:7e:99:77:b5:37:98:82:79:ff:23:b8:
f0:98:b3:ba:42:71:5f:0a:ab:21:5b:46:3f:36:aa:
c5:82:27:d4:e9:11:33:8f:52:7c:2b:c0:0e:e9:00:
de:e3:e8:61:06:61:c8:63:e6:10:bd:b2:77:1c:5a:
26:3a:e2:50:08:18:51:48:03:86:3e:2c:86:2f:a1:
ff:fd:25:03:75:6f:4c:55:36:96:1f:dc:f3:b4:f6:
17:54:e2:ac:b1:7a:41:83:62:c3:55:a3:4b:93:00:
43:1d:e3:69:71:66:d3:31:e9:89:19:7a:26:bd:71:
2a:5f:11:1c:7a:0e:4c:7b:60:04:f7:3f:04:8e:1c:
b5:39:58:d7:b9:39:a4:cc:a6:69:f3:ed:82:85:69:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:63:5D:38:51:01:1F:56:94:B0:27:9C:C0:CF:A3:DE:6C:C0:60
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NfhjXThRAR9WlLAnnMDPo95swGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.34.0/24
185.243.182.0/24
193.160.142.0/24
193.223.104.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:8d:ad:42:62:03:9d:5e:94:53:17:94:33:77:44:90:10:08:
21:f9:c8:e3:7f:c7:e2:dd:a9:4b:2f:b0:d2:73:d7:3b:21:5d:
62:7c:b9:30:58:ab:db:cf:1c:38:1d:ff:24:88:9b:0e:f7:82:
64:8c:90:f2:c6:b9:4a:66:8e:fe:68:b4:73:61:0f:39:5e:9d:
78:07:86:6b:73:a4:47:ca:b6:28:e8:dd:ec:03:db:0a:b5:29:
00:02:48:06:cf:60:4b:2e:b9:03:b4:07:9f:25:3f:d2:79:b5:
76:d5:ac:87:99:44:4c:c4:c0:f6:42:23:67:f4:42:94:61:59:
d7:f4:f1:dc:96:61:27:aa:1e:e4:b3:8e:1e:66:31:c8:d2:8a:
6c:12:5e:00:4a:50:58:6e:1d:2c:12:23:f2:ad:2b:09:c7:e8:
f4:e2:ae:5e:7f:2b:91:dd:17:31:b8:8d:88:5c:7d:c8:b0:b4:
18:c7:06:de:91:00:89:cd:64:9f:8e:06:ce:52:a6:36:4c:14:
4a:d8:6f:17:ac:13:87:30:97:34:1e:fc:28:24:6d:f5:01:06:
a9:0e:4b:af:95:a4:91:9f:c5:05:2f:36:c3:1a:12:e2:ac:9b:
5d:50:94:05:c6:2e:56:f7:b5:46:f0:6a:bb:a3:17:ce:5e:94:
52:b8:60:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:13 2026 by rpki-client