
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NhzWzhQ1VHt5ANcdbxomCk-mlGA.roa
File: NhzWzhQ1VHt5ANcdbxomCk-mlGA.roa (raw, json)
Hash identifier: +St7z3GTWeLhKwD3AMX9fF4U5I+d4nPKYEM2gfU13oY=
Subject key identifier: 36:1C:D6:CE:14:35:54:7B:79:00:D7:1D:6F:1A:26:0A:4F:A6:94:60
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0199DCFAA868961FD596EE03FF7D2BDC3114
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NhzWzhQ1VHt5ANcdbxomCk-mlGA.roa
Signing time: Mon 13 Oct 2025 09:50:38 +0000
ROA not before: Mon 13 Oct 2025 09:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26832
IP address blocks: 86.107.168.0/24 maxlen: 24
185.141.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:fa:a8:68:96:1f:d5:96:ee:03:ff:7d:2b:dc:31:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 13 09:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=361cd6ce1435547b7900d71d6f1a260a4fa69460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:2d:c7:9d:be:2a:ba:cc:b9:aa:b9:f9:5c:
d2:68:33:c9:87:f1:e7:5d:85:35:14:91:ba:cd:4d:
c1:ca:0a:63:5a:b1:82:f6:4c:2a:91:77:6e:bc:a3:
e2:68:84:a7:88:01:31:71:c1:36:52:c3:89:8c:b9:
92:5f:08:eb:bd:e3:de:29:4c:a4:45:31:3a:83:3a:
4a:10:06:f3:48:7a:c4:98:1f:f2:29:a8:b7:86:7b:
ee:fc:9b:03:60:3c:7e:f1:c9:34:a9:c4:de:19:a4:
3a:f0:3d:87:7d:d0:99:c8:54:c7:f4:02:a8:80:80:
b7:71:04:6c:af:4f:11:94:04:9c:db:14:3f:57:64:
d6:ab:62:a4:5f:ca:67:9f:4d:15:c9:f5:b4:64:a8:
0c:97:37:36:15:21:bf:30:58:81:b7:ac:5f:73:43:
53:53:69:e8:f5:ca:5b:47:84:a9:b9:72:3f:2c:ed:
45:15:0b:30:36:aa:7f:14:6f:44:70:af:5f:22:b9:
f9:ec:ff:0b:af:39:14:8f:5d:c6:88:21:43:7e:b9:
47:b9:86:9f:f2:37:8c:d6:90:c2:cd:89:e2:36:97:
ee:72:1e:92:af:07:c7:6b:63:40:27:ae:b0:4f:86:
55:d3:9a:db:b7:77:8e:a8:b7:1c:64:b8:89:95:ed:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:D6:CE:14:35:54:7B:79:00:D7:1D:6F:1A:26:0A:4F:A6:94:60
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NhzWzhQ1VHt5ANcdbxomCk-mlGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.168.0/24
185.141.216.0/24
Signature Algorithm: sha256WithRSAEncryption
82:86:f5:a7:a3:08:be:22:96:02:e9:e6:73:55:36:20:71:32:
35:6d:e9:20:83:c1:44:8f:63:7d:f2:a7:bc:c3:bb:a9:38:a2:
e8:35:52:55:88:f4:2c:4e:4a:d9:a3:d7:e7:70:f1:3f:45:b1:
5a:c5:e4:37:05:48:5e:b1:f5:3b:82:d5:54:6b:05:d2:81:6f:
9d:53:78:d9:47:e5:55:6f:61:a3:81:b6:f5:a2:eb:2a:9f:4f:
1b:d3:d9:74:24:42:d7:94:31:b7:8a:62:b8:e0:e9:5e:4b:c3:
bb:1a:8b:80:aa:04:13:5b:33:be:8b:db:ac:f1:a6:38:39:5a:
fe:2b:2e:e3:af:81:0b:55:63:c4:d7:ec:54:dc:8c:48:33:44:
e6:18:5b:55:fc:2b:75:99:c1:46:a5:12:77:85:68:9a:e0:0c:
59:77:11:ee:40:99:65:e1:0c:c2:99:27:c7:cc:8c:8b:de:e9:
6a:30:12:06:8b:b9:d5:b9:7d:d4:c4:df:a7:38:41:d8:3f:fa:
7e:11:72:97:d0:99:64:88:df:10:17:f6:8f:2e:da:a5:08:22:
af:0d:99:e2:85:87:21:e3:98:20:f1:4f:d7:a0:d6:2c:c9:ba:
0d:2e:35:74:da:4f:98:70:80:8e:7f:e7:82:ef:af:51:bf:c7:
d6:d3:64:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:52 2025 by rpki-client