Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/NneXFAismUTeCcIIpKAoI4yk5MY.roa
File: NneXFAismUTeCcIIpKAoI4yk5MY.roa (raw, json)
Hash identifier: sKjUqhA+u+X7YktHnUp5dUo2aDS2SF2s2/ZzRq8yHTI=
Subject key identifier: 36:77:97:14:08:AC:99:44:DE:09:C2:08:A4:A0:28:23:8C:A4:E4:C6
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 019F23691727A6E70AEEB3ACC27D11F94344
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/NneXFAismUTeCcIIpKAoI4yk5MY.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24634
IP address blocks: 80.77.176.0/20 maxlen: 24
185.125.152.0/22 maxlen: 24
2a06:b880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:17:27:a6:e7:0a:ee:b3:ac:c2:7d:11:f9:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3677971408ac9944de09c208a4a028238ca4e4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:4d:19:0e:0b:7c:89:e9:68:fe:5d:97:5b:
78:98:ec:97:fe:ce:5c:f4:d6:67:b5:51:db:14:d0:
40:80:86:cc:2f:17:c1:c2:ab:e1:10:f8:25:00:1f:
fd:b8:a9:a6:a7:eb:de:f0:21:9e:11:af:00:bf:bf:
02:89:a8:41:3b:eb:28:7b:05:c8:fd:08:32:e4:50:
06:82:b7:93:45:4c:5a:d9:84:e0:1b:79:d6:96:e4:
f8:80:68:56:48:1e:fc:c9:c1:b8:1b:e3:c3:7e:4e:
bd:c4:52:ba:c3:88:65:91:f2:64:40:00:a6:f8:08:
fc:07:69:52:b8:00:34:98:3d:45:e0:19:80:b4:99:
18:fe:7c:cf:cb:2c:a9:74:7a:0c:03:83:95:29:83:
5c:39:84:9e:3b:48:c8:9e:2a:32:ad:6c:5c:35:9b:
46:a2:ec:5a:0f:bc:ed:d2:8e:a9:97:69:1d:cf:71:
ed:27:f7:99:67:0a:7f:2c:0d:ac:e4:4f:76:86:2d:
96:7e:f4:ee:38:38:ec:fe:aa:d7:54:8f:b1:ba:e2:
6d:a5:eb:11:cd:08:a0:07:00:7c:1c:9f:7a:07:be:
40:84:29:b0:7f:ba:3f:56:00:96:10:74:13:14:85:
c2:97:28:a6:c9:87:5a:73:80:95:53:bd:79:82:18:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:97:14:08:AC:99:44:DE:09:C2:08:A4:A0:28:23:8C:A4:E4:C6
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/NneXFAismUTeCcIIpKAoI4yk5MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
43:c3:58:9f:20:a7:1a:5b:3e:26:1e:ed:2d:af:67:e2:45:5e:
f6:00:52:a6:4f:a1:69:16:3e:3c:c1:ac:ff:bf:0f:b7:a6:02:
1d:bc:0d:58:01:09:a3:ef:7f:94:24:1a:0b:0f:d6:4f:91:9b:
3c:1e:c6:17:a9:6d:ef:ce:eb:01:9f:9a:6a:92:b2:84:f7:ab:
87:6e:6d:fa:8e:b4:32:08:47:a8:7c:cc:f3:a8:24:88:03:cf:
0c:5a:23:a5:b9:b5:a7:7c:f7:59:91:c7:b6:38:86:12:54:cd:
86:ae:9f:8a:83:ca:3d:69:85:74:b9:06:4d:47:8f:7d:a1:df:
a6:36:c9:9e:f4:8d:4d:49:43:cd:73:17:eb:53:a3:35:e2:2e:
d1:02:4b:36:80:10:0b:d3:3f:6f:2d:38:57:e5:f5:81:05:19:
92:f4:f1:46:57:37:a7:4b:6f:a6:42:82:01:32:bc:0f:53:6d:
5e:d2:21:36:5c:c3:0a:0b:a5:63:f2:73:ae:3b:35:90:da:b4:
53:20:63:eb:d7:de:21:62:b6:93:fb:a3:bb:0b:eb:a0:06:77:
c5:f6:57:99:d6:2f:68:e3:19:bc:a6:f8:09:b7:26:ed:70:bc:
fe:f3:1b:3d:78:01:36:bc:28:64:5b:23:43:5b:6e:ef:17:be:
50:4a:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:08 2026 by rpki-client