Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/NsAPtZ0V_3NKEfpZ6_Ltz0WioGk.roa
File: NsAPtZ0V_3NKEfpZ6_Ltz0WioGk.roa (raw, json)
Hash identifier: pk96ZHNdz1l8TpNgLet0ZjT2wOKGutCpzFiNze8k9AE=
Subject key identifier: 36:C0:0F:B5:9D:15:FF:73:4A:11:FA:59:EB:F2:ED:CF:45:A2:A0:69
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019F9086637BCD543641A517D8C3E123FE6D
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/NsAPtZ0V_3NKEfpZ6_Ltz0WioGk.roa
Signing time: Thu 23 Jul 2026 19:49:14 +0000
ROA not before: Thu 23 Jul 2026 19:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15386
IP address blocks: 185.67.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:86:63:7b:cd:54:36:41:a5:17:d8:c3:e1:23:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jul 23 19:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36c00fb59d15ff734a11fa59ebf2edcf45a2a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:3a:dd:f6:c7:10:f5:bc:92:98:b0:20:36:
41:0a:54:1b:21:66:92:67:03:99:67:ff:07:42:98:
55:c4:cc:56:fe:dd:57:32:8a:43:2b:f4:46:8f:d5:
fb:aa:9d:26:97:5e:f1:cb:7b:a1:cb:45:fb:a9:b9:
8b:33:bd:66:b2:c7:ed:58:e5:26:d7:e4:c8:77:83:
10:28:eb:f8:e8:95:98:c8:fc:69:88:f1:44:46:a7:
6f:3a:35:9e:21:a0:38:5a:0f:d8:7a:3a:d2:89:e0:
b0:bc:8a:35:68:7c:66:12:fb:6d:82:48:d2:32:2c:
8e:43:1c:23:b4:b6:e8:40:ea:bd:ad:ae:fd:f0:03:
36:f1:11:6d:80:8e:40:73:6c:a0:9a:4b:72:77:2d:
87:e6:9a:dd:13:e7:64:49:a2:ca:c9:1a:5a:40:10:
cb:54:ec:bc:92:ba:6a:83:b6:6b:dc:bf:e6:c7:7f:
f9:9a:6a:ba:f4:f6:00:cc:c2:2c:13:a6:4b:f8:ee:
25:62:fd:4d:e9:f1:a4:71:4a:d8:e3:27:dc:53:22:
48:42:ec:57:01:f0:60:b5:69:cd:ed:ce:71:f7:a8:
19:82:90:e9:c7:84:8e:24:45:d9:ce:3c:2d:d8:82:
95:b8:3d:5e:25:80:45:15:9d:1a:f2:97:1e:2d:3c:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:0F:B5:9D:15:FF:73:4A:11:FA:59:EB:F2:ED:CF:45:A2:A0:69
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/NsAPtZ0V_3NKEfpZ6_Ltz0WioGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.20.0/24
Signature Algorithm: sha256WithRSAEncryption
58:60:7a:26:79:ca:07:96:52:37:17:d0:ef:37:ae:14:17:ea:
e9:2f:fb:8e:aa:d4:42:77:ce:12:c3:8c:3c:1c:c1:a6:7e:c9:
0a:6b:1c:7d:f7:fd:97:71:65:34:0f:1b:b1:64:09:b3:46:ad:
1d:a6:d2:4f:f7:f1:a5:d3:9b:e5:65:32:48:48:61:db:b9:51:
fc:9e:5d:25:78:f7:49:c8:93:30:f9:6e:2a:c9:fc:b9:d7:51:
9e:dc:e5:e6:b5:0d:e4:54:af:f5:15:51:c9:44:c4:59:96:70:
be:46:fa:f4:7c:b9:d6:6d:1e:be:8e:b2:e0:f9:fa:9e:37:ce:
8c:74:ae:53:22:09:5d:42:dc:a1:f4:d2:75:3f:b3:0b:a5:44:
e5:c5:46:10:67:0e:5b:15:a7:c7:5a:0e:57:a6:3a:d9:6f:18:
29:65:cc:a6:5c:6f:7e:1c:05:50:29:16:b6:23:5e:ae:dd:8d:
63:6e:87:3b:b2:6e:ad:97:c4:da:dc:5c:59:91:ea:ba:ec:15:
73:33:e7:b3:9e:b9:ed:e0:16:01:ad:cc:8f:eb:3f:75:5d:ca:
ed:d0:87:63:87:39:35:e7:36:80:81:71:c0:6c:fc:80:65:31:
45:5a:88:a5:99:53:2c:0d:66:a5:02:36:95:fd:4b:3e:d9:de:
a9:5b:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:49 2026 by rpki-client