Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/NNYJKSx4PH4wHLznLKSJ_tdSV74.roa
File: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (raw, json)
Hash identifier: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=
Subject key identifier: 34:D6:09:29:2C:78:3C:7E:30:1C:BC:E7:2C:A4:89:FE:D7:52:57:BE
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 019F888CC347E9BAF6AAE8126FBB19A3A19F
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/NNYJKSx4PH4wHLznLKSJ_tdSV74.roa
Signing time: Wed 22 Jul 2026 06:39:14 +0000
ROA not before: Wed 22 Jul 2026 06:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25233
IP address blocks: 185.3.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:8c:c3:47:e9:ba:f6:aa:e8:12:6f:bb:19:a3:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Jul 22 06:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34d609292c783c7e301cbce72ca489fed75257be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:b7:71:40:a1:0a:aa:3b:e6:7f:6a:5e:13:
05:63:e0:64:57:56:2f:74:54:17:dd:38:6f:7f:89:
25:c3:32:4f:77:8b:7f:87:32:30:87:c8:4f:4e:aa:
04:3a:50:e7:e6:d9:7e:20:c9:d9:09:b7:25:6a:92:
de:5d:72:e0:45:74:9b:7e:d0:e3:1e:3a:e1:7b:20:
30:b5:48:d9:0f:d6:4a:a3:87:2c:f8:41:df:94:59:
f6:a9:ad:06:2f:68:c0:ac:eb:fd:15:6f:0e:18:35:
5e:e8:1d:ec:bf:ed:04:b8:23:3d:50:b6:31:c1:62:
af:c9:19:d3:91:bb:93:ad:22:14:23:31:15:19:71:
da:ea:2d:d2:12:01:12:2a:3f:c0:dd:62:3a:ec:49:
93:f5:67:79:67:e7:c1:8f:f3:a1:8b:18:86:a8:f4:
91:a3:a7:f5:4d:21:02:8d:f0:21:a3:0d:d2:85:86:
f0:2f:88:fd:3c:c8:1b:ca:d0:1e:fd:e5:51:50:4d:
63:e8:d4:ef:79:23:73:8d:ab:c8:75:db:52:fb:e2:
ee:fe:0f:77:16:37:0b:db:7c:ad:a3:9e:d6:ea:94:
d0:54:2a:c6:12:ff:92:ae:6d:3b:eb:45:f4:72:ae:
5c:c9:e8:5e:f8:a4:8d:a0:a1:a5:df:5e:46:04:a5:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:09:29:2C:78:3C:7E:30:1C:BC:E7:2C:A4:89:FE:D7:52:57:BE
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/NNYJKSx4PH4wHLznLKSJ_tdSV74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.122.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ac:c7:9d:60:14:bb:d3:1a:46:df:74:30:09:5a:d9:a0:4b:
d7:c4:9f:30:e2:e4:8a:8b:b6:ae:a5:34:4b:0f:6c:2b:f8:77:
f4:27:b6:a0:e4:d8:ee:04:8f:28:77:c4:f4:e0:fd:25:ea:7d:
88:e4:2c:ed:92:23:53:98:89:68:4d:ac:49:97:e3:4e:46:2e:
4d:cd:64:69:27:f9:7a:c5:22:cf:96:3b:b6:4a:e2:5a:34:a0:
14:e7:70:61:f5:86:93:c5:e0:16:02:32:e2:2c:4f:29:b0:3b:
c0:63:43:bf:e4:88:27:0d:f5:9d:04:bd:07:93:2c:94:d5:1a:
27:25:24:28:2a:b5:4a:b6:77:93:9c:31:12:5f:f6:1d:ec:e1:
99:a0:02:d8:9a:38:e9:7b:9c:12:45:3f:ac:04:3f:e6:59:c1:
cd:98:c5:29:3f:68:45:94:b5:74:51:5a:e6:5a:c2:b0:2d:54:
84:15:b8:ab:9f:f1:14:f0:08:9b:6a:e5:7f:46:26:68:43:9b:
de:b5:71:18:7c:3e:b3:3b:23:ec:8c:a2:66:1b:e9:b5:56:c9:
4b:99:ff:59:14:f8:60:31:71:39:df:f4:6d:02:89:39:02:3e:
a7:c8:22:e7:fc:5f:0d:59:9d:f8:71:52:d8:b6:de:74:e8:87:
cd:1e:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:42 2026 by rpki-client