Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/nwblp8j45JxKR4DziERGe--4qw4.roa
File: nwblp8j45JxKR4DziERGe--4qw4.roa (raw, json)
Hash identifier: KXUbXAoyGwmjgDKgVdVwzHhR+nJna06EKg7sAYzyOmE=
Subject key identifier: 9F:06:E5:A7:C8:F8:E4:9C:4A:47:80:F3:88:44:46:7B:EF:B8:AB:0E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A0584C9C113E31F798A4578C3877F578FF
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/nwblp8j45JxKR4DziERGe--4qw4.roa
Signing time: Mon 31 Aug 2026 14:50:10 +0000
ROA not before: Mon 31 Aug 2026 14:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203641
IP address blocks: 185.84.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:4c:9c:11:3e:31:f7:98:a4:57:8c:38:77:f5:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 31 14:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f06e5a7c8f8e49c4a4780f38844467befb8ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:2f:74:64:db:91:f4:49:36:ff:6d:22:d3:
e1:c3:66:18:3d:cf:e8:e4:fc:14:5d:d1:56:55:4d:
c2:a3:61:d2:0b:02:ec:e4:6c:fa:0b:ad:c3:17:ae:
ad:b2:c7:7d:49:41:a1:dd:8b:48:c5:36:05:90:a8:
a9:61:ff:21:5b:74:ac:d9:f3:4f:f7:7c:8d:20:9f:
8f:4a:a7:35:6d:36:d7:6c:f8:2e:7c:f5:12:84:d4:
59:93:77:3c:bc:d0:f1:cd:a3:79:c4:53:a3:8d:d2:
4c:ba:34:b8:73:8f:9b:9c:cc:e8:65:87:01:fb:b5:
53:1d:68:e7:18:68:7c:e8:e9:3b:0d:4e:35:bb:95:
02:d6:e9:53:ec:fe:bf:ae:63:32:5c:86:7e:4a:e5:
43:8b:6d:cf:1e:d0:ba:29:d1:59:e7:2c:54:42:88:
23:4b:61:7b:da:0d:c4:6f:17:d9:89:43:52:5b:36:
c1:af:25:15:8a:04:49:bc:bb:73:56:1f:7d:67:51:
fd:78:1b:1d:50:a9:3a:43:c3:d5:ba:3a:5d:99:eb:
82:3e:b8:52:23:8c:6e:ca:d7:32:37:13:53:38:84:
a8:69:a0:2e:14:63:9d:b1:9d:7a:ca:f6:77:69:c6:
8e:3b:03:19:75:91:6e:61:4f:42:a1:fc:0a:8d:f1:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:E5:A7:C8:F8:E4:9C:4A:47:80:F3:88:44:46:7B:EF:B8:AB:0E
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/nwblp8j45JxKR4DziERGe--4qw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d4:97:53:ce:2c:b5:0a:65:86:82:64:36:f8:d8:3e:32:5a:
2e:c5:3b:8a:22:bc:d6:d7:2c:0f:13:7b:a6:fa:30:66:d2:a7:
00:40:81:a7:04:b8:66:d8:b4:78:2d:22:93:96:76:c3:75:46:
4e:a8:78:f0:aa:e4:f3:db:9f:2b:92:2b:fb:06:94:35:22:7b:
05:d2:ba:17:97:42:3a:11:ee:41:c1:36:52:62:d9:62:87:9d:
4a:ba:15:7b:f0:40:f9:18:37:65:b0:41:40:63:90:50:15:e8:
a1:be:a8:14:52:e2:13:ad:80:73:20:ae:92:be:2d:b2:03:2a:
4d:8f:f0:0f:cc:ca:4b:59:e6:ff:6b:87:34:d5:bf:4e:33:74:
8c:56:3b:5c:c3:11:0f:d6:df:cb:ac:bf:7f:5c:49:4b:9b:43:
e2:6c:40:04:19:de:6b:06:22:b6:67:9e:6b:d6:9c:f5:a0:f3:
df:c7:6b:ce:df:80:e4:d4:ae:10:52:b8:4f:e0:65:f0:b1:87:
6c:49:b0:57:15:03:34:8c:97:59:15:8e:56:1b:16:02:5b:e8:
7d:6b:f5:ea:96:04:fe:77:ab:26:41:e9:8b:a3:c9:90:f4:89:
9f:44:ba:0d:e6:fe:c6:ea:8c:28:58:21:47:a6:34:6e:9f:6a:
81:cb:2f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:51 2026 by rpki-client