Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa
File: Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa (raw, json)
Hash identifier: UNgTl0HhH/SBGa8ko1wMjVaJ6tBhwBkcw/5zum00v8M=
Subject key identifier: 36:4B:5E:F7:39:5D:AC:3F:C6:93:72:06:44:D5:8E:3D:64:03:31:BA
Certificate issuer: /CN=1c0784053fc866a556234548119416d1bd716980
Certificate serial: 019F3711D7E63A6C3C198CF55A3B683B8864
Authority key identifier: 1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa
Signing time: Mon 06 Jul 2026 10:55:44 +0000
ROA not before: Mon 06 Jul 2026 10:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 193.41.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:11:d7:e6:3a:6c:3c:19:8c:f5:5a:3b:68:3b:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0784053fc866a556234548119416d1bd716980
Validity
Not Before: Jul 6 10:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=364b5ef7395dac3fc693720644d58e3d640331ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:98:50:60:33:ff:e2:7c:9d:32:7d:a4:8c:
5e:8d:9e:a1:2d:1b:aa:a4:ff:34:4e:9a:9f:27:af:
98:30:d9:82:2f:32:55:52:a9:fa:5c:14:3d:7f:46:
3f:be:04:31:bf:0d:68:fa:4d:cc:72:5c:a6:79:08:
ca:d5:65:da:a5:67:31:98:23:6a:95:5c:18:3d:43:
12:64:f8:5c:7c:06:ed:44:e2:94:fc:bc:32:d6:62:
73:16:2f:f2:e6:a9:e8:9a:89:81:9e:01:d1:69:b3:
51:54:ec:a0:82:1c:1c:27:78:92:f8:01:0f:20:04:
1f:6e:a2:f3:65:ce:ba:ac:f9:64:45:e2:1f:2a:3c:
eb:8f:e4:3e:d0:5e:18:5c:a2:d5:b3:2e:ad:c8:ba:
43:e1:92:1f:8a:83:73:18:50:02:94:71:dc:3e:5e:
66:f3:a4:12:9a:4d:b0:a6:fc:c6:9f:00:7e:e5:bd:
f1:66:a3:77:e6:9e:d3:d7:35:83:60:44:f9:cc:69:
f8:ed:51:13:72:b3:0b:13:4f:23:79:77:88:82:80:
6c:23:4b:f0:5e:35:87:9c:2d:27:c0:1f:b6:82:74:
c5:41:7d:bd:7f:2c:9d:11:ba:28:5b:6c:87:88:67:
84:35:25:dd:4e:5c:ab:af:a9:24:2a:88:0e:28:e1:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:5E:F7:39:5D:AC:3F:C6:93:72:06:44:D5:8E:3D:64:03:31:BA
X509v3 Authority Key Identifier:
keyid:1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.4.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:98:e5:f7:44:5b:b5:bd:1b:c4:6c:30:b1:ed:62:28:2f:a2:
b7:14:89:92:4b:5f:7c:35:20:1d:93:10:b3:3c:b7:35:61:a8:
90:59:e2:1b:93:97:2d:a5:6c:d6:8b:0f:d9:1d:6d:69:95:af:
63:ae:72:ab:7f:e3:68:27:ac:a5:c7:76:cd:19:56:57:a5:3c:
c9:59:62:b2:ad:14:4d:59:48:89:20:37:d2:d8:78:25:95:20:
59:4b:15:21:57:05:94:3e:c4:80:6d:83:66:d3:23:0f:4c:66:
97:29:37:22:a4:7d:ea:e6:4b:3c:df:2f:3a:05:ff:df:77:8c:
18:37:6e:8a:1b:cc:2e:4e:39:1e:f5:a1:23:5f:84:45:13:a9:
72:cb:67:36:ad:6f:60:b7:fb:59:6d:fb:34:48:c4:0c:c7:63:
89:83:bf:7c:0b:b4:c1:16:00:32:b0:bb:bd:73:da:ce:90:dd:
bc:1c:62:33:7b:5d:c9:ef:d5:df:da:08:f5:24:65:34:4b:22:
7e:09:9f:fc:3e:9d:81:a4:ef:66:92:04:be:7f:9c:6a:4d:c8:
fb:7f:a8:e4:93:b1:ed:86:4b:15:95:61:3c:4e:0b:1f:cd:bd:
0d:ce:aa:7a:d4:d8:30:da:13:7e:2e:2d:37:17:ac:b9:86:32:
b4:a8:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:48 2026 by rpki-client