Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/NHFVYka2133iQXjNTWLuhJeJRYs.roa
File: NHFVYka2133iQXjNTWLuhJeJRYs.roa (raw, json)
Hash identifier: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=
Subject key identifier: 34:71:55:62:46:B6:D7:7D:E2:41:78:CD:4D:62:EE:84:97:89:45:8B
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019CD87FA934CA796FBCB1DD67CADF7CE4D7
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/NHFVYka2133iQXjNTWLuhJeJRYs.roa
Signing time: Tue 10 Mar 2026 16:06:10 +0000
ROA not before: Tue 10 Mar 2026 16:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 185.11.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:7f:a9:34:ca:79:6f:bc:b1:dd:67:ca:df:7c:e4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Mar 10 16:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3471556246b6d77de24178cd4d62ee849789458b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:64:e4:6e:81:c0:0d:88:c7:6f:30:6e:3b:
c8:39:07:55:82:bb:a5:ce:2d:93:f0:47:4d:9f:b3:
1e:2e:e1:92:1c:5d:51:55:dd:96:56:de:e0:db:3a:
a5:86:6e:97:1b:3a:79:98:b7:33:f2:db:d9:66:70:
d8:c8:a9:56:d7:72:1f:db:d1:97:ad:4b:59:3f:58:
b6:58:71:a5:ef:2c:b5:de:dd:f7:34:25:20:a9:8b:
c4:61:2a:d0:a2:33:64:d5:07:5e:ca:d7:65:54:37:
ba:a2:fc:32:d1:d9:81:7c:b7:75:f2:08:c5:b1:22:
14:4c:cb:d7:00:9a:9b:0f:9f:16:06:46:6b:65:35:
f1:ab:d1:fc:8e:ce:cf:0c:ba:4d:82:70:d4:af:e0:
af:10:f3:98:c6:6e:dc:6d:b3:35:8a:c5:c3:49:2c:
4e:e3:79:60:94:99:52:e9:8f:53:89:a6:7e:a2:c3:
ff:97:45:a6:73:2b:a3:34:04:52:43:bd:02:67:b0:
66:d1:32:70:bb:65:59:d6:ae:6a:29:64:5e:23:6e:
64:42:62:d4:3f:3f:df:0a:7d:07:ef:38:7b:fd:e8:
20:b1:69:8d:2b:c1:f6:5b:54:4e:48:45:f7:fa:a6:
8a:5f:32:db:ee:e2:e2:b5:4e:2c:e7:fe:70:77:b2:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:71:55:62:46:B6:D7:7D:E2:41:78:CD:4D:62:EE:84:97:89:45:8B
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/NHFVYka2133iQXjNTWLuhJeJRYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.94.0/23
Signature Algorithm: sha256WithRSAEncryption
65:d8:ca:91:24:98:88:f7:b0:97:3f:49:81:af:ff:93:27:6b:
36:7c:38:f0:12:82:1f:14:f5:a8:8e:e8:ae:4d:dc:f3:07:8a:
7d:b3:27:13:4d:e8:7f:96:57:53:88:c8:fd:a3:6b:26:31:80:
aa:14:89:bb:e0:11:3b:86:ac:69:4e:9f:6c:f3:46:23:53:be:
6e:d9:3e:44:1e:30:ab:50:50:b3:21:23:12:ff:7e:73:37:97:
b7:8b:d0:e2:d5:d0:bc:1d:76:f9:26:36:98:5a:28:4f:d5:56:
b5:66:e4:dd:0e:4e:fb:1c:0b:2d:f8:9e:c7:da:2f:4b:29:6f:
9e:d9:8f:02:dd:67:32:3f:ab:f9:e7:71:bd:8a:c5:37:c4:4c:
37:50:af:44:aa:aa:90:66:48:69:6a:a2:e2:7f:74:71:f2:aa:
4d:be:33:31:47:d3:3a:cf:5f:a8:13:92:bd:62:1c:d4:b3:88:
8d:90:79:ca:46:0c:d7:98:86:4a:9c:83:7c:71:ce:f4:a6:e4:
eb:ac:f5:3f:90:c9:de:cc:8a:a6:ff:60:fb:38:5c:bf:8b:13:
78:3a:36:c3:7a:2a:e3:75:93:b1:32:b1:fe:26:a2:a0:94:63:
57:50:30:4a:99:10:81:bd:85:ac:d3:92:a0:af:88:50:ef:1c:
59:3f:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:47 2026 by rpki-client