Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa
File: nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa (raw, json)
Hash identifier: eebZVUFclHYl/xNS3jIW8oNgi3gVg03bFj8wnZMugsg=
Subject key identifier: 9E:4A:6F:2C:DB:59:7D:EB:2E:DA:E3:3A:FC:19:A0:83:C0:A0:99:D3
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019EF47E4123341A5A8FEA13551ACFDB43B4
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa
Signing time: Tue 23 Jun 2026 12:39:35 +0000
ROA not before: Tue 23 Jun 2026 12:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50411
IP address blocks: 37.130.8.0/22 maxlen: 22
37.130.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:7e:41:23:34:1a:5a:8f:ea:13:55:1a:cf:db:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jun 23 12:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e4a6f2cdb597deb2edae33afc19a083c0a099d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:c2:a2:26:c0:7e:cb:97:d5:86:84:99:e1:
49:34:52:53:5b:c8:fa:4d:d7:1d:22:cd:30:a9:21:
93:54:1c:de:e3:45:64:a5:24:58:73:de:62:f9:a4:
4f:7c:1c:f3:9f:50:3b:54:a7:66:27:53:02:b9:b2:
73:7c:c3:5d:86:9d:54:b9:60:01:10:ff:2e:9a:f6:
c4:19:48:82:76:46:42:90:72:06:c5:ce:a7:b0:a3:
88:86:25:ae:33:d0:93:a3:f3:95:10:5f:d2:8e:40:
c2:d8:dc:23:4d:8e:38:a5:e5:fc:cf:de:26:53:a2:
4e:7b:31:7e:44:6e:d4:27:ed:fb:70:fa:01:d6:3b:
e0:ca:8b:3e:93:c6:c8:39:9b:f5:d2:2b:7a:39:8a:
5f:57:45:cd:f9:fe:ee:ce:a7:26:29:e8:6a:22:4d:
95:af:0c:eb:b0:75:5a:07:3e:47:be:c7:a5:71:68:
f7:dc:d6:9a:12:d8:d8:fe:c5:c5:71:d4:1e:9e:5a:
b1:de:0c:4b:ef:66:a7:71:ae:19:0a:e1:3e:d8:e7:
e0:dc:6a:fe:94:75:30:fb:d6:64:02:3c:68:77:26:
db:be:5b:94:02:8d:71:8d:40:2f:a4:3b:88:55:76:
d6:08:2e:d9:06:6d:e5:e4:5b:36:f8:23:05:19:c4:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:6F:2C:DB:59:7D:EB:2E:DA:E3:3A:FC:19:A0:83:C0:A0:99:D3
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.8.0-37.130.13.255
Signature Algorithm: sha256WithRSAEncryption
01:9a:60:eb:16:57:b9:5e:3c:08:67:24:95:02:ab:59:9d:aa:
c9:d3:36:50:72:81:fc:75:34:2c:5f:4f:f3:bf:a0:d3:36:c4:
8c:70:de:38:83:a6:4a:7a:f8:07:28:0e:f9:c2:e4:85:b8:1d:
75:4a:c8:54:31:7c:bb:1d:64:9e:35:f0:f2:f1:a1:d7:b6:9f:
dc:47:4d:44:2d:38:d0:cb:de:36:e9:1d:2c:f8:e4:66:c0:63:
e1:46:03:a5:00:3e:86:de:42:f9:a2:db:ea:60:66:98:94:84:
ba:d8:13:18:fb:a5:e8:fe:69:48:db:8b:63:e7:f8:5e:c7:a4:
2c:18:e1:ee:0e:8b:c2:b4:ef:a5:91:cd:0d:0c:39:4f:0a:00:
8c:3c:1a:83:07:00:a0:24:1f:ac:dc:d7:ec:90:81:30:f1:e5:
49:4d:cd:9d:e6:19:9c:20:78:69:bc:92:7c:e2:45:50:a2:e0:
14:22:4f:dd:ef:2b:50:76:96:b1:c8:90:e1:65:27:3e:fd:9d:
bb:ea:86:47:e8:77:d4:ec:13:38:36:e3:9b:90:20:8e:83:4b:
9b:5c:77:96:f2:1c:05:de:23:2d:53:2b:6c:be:59:ac:e4:30:
7f:23:46:f0:96:2c:bb:13:e9:06:76:96:83:3d:11:b2:2b:46:
48:a1:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:36 2026 by rpki-client