Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nc-3Jgth1VJUzJyieVfa2mJLl8A.roa
File: nc-3Jgth1VJUzJyieVfa2mJLl8A.roa (raw, json)
Hash identifier: 0JYOL+QEa3W6iAuUqZwr2pSUBIMCoCzBmv7/XFY226U=
Subject key identifier: 9D:CF:B7:26:0B:61:D5:52:54:CC:9C:A2:79:57:DA:DA:62:4B:97:C0
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019E82BFC995CD09F6C6A2AD6C47739C4843
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nc-3Jgth1VJUzJyieVfa2mJLl8A.roa
Signing time: Mon 01 Jun 2026 10:34:27 +0000
ROA not before: Mon 01 Jun 2026 10:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
95.170.19.0/24 maxlen: 24
95.170.25.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:bf:c9:95:cd:09:f6:c6:a2:ad:6c:47:73:9c:48:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jun 1 10:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dcfb7260b61d55254cc9ca27957dada624b97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:d1:af:8c:da:f9:38:af:09:27:07:a5:94:
67:70:dd:91:51:c6:29:b1:2a:a8:2f:0d:7f:0e:dd:
45:66:28:9a:da:2f:1b:7b:91:68:67:af:bc:c3:6a:
c3:35:f7:b2:73:46:ba:f0:55:16:06:aa:5b:26:82:
7f:0c:12:e1:53:50:d0:ca:c8:98:08:c0:4a:3c:9f:
71:f0:f6:f3:9e:b4:e3:1c:41:2b:68:ba:1d:c1:14:
11:da:f9:53:46:8e:6a:48:d7:6f:07:45:d0:66:95:
e8:5e:06:5c:2a:3e:d5:9e:1f:c3:40:a6:78:e8:94:
bb:df:c2:32:87:74:3c:c0:74:95:ae:e8:30:50:2f:
1c:f2:19:18:b5:dd:7c:ee:82:5b:4b:72:1c:69:e4:
03:e4:d6:d2:d2:69:94:08:f2:dc:dc:18:6f:e3:92:
08:21:ca:70:d8:e4:9d:b4:36:9e:01:7b:b5:10:f0:
2a:41:e8:e0:0d:8e:56:f6:fe:9c:ce:d2:08:29:c6:
17:e8:34:c5:67:ec:d5:57:1a:05:f5:95:90:5b:cd:
83:17:f2:55:ac:75:08:b0:43:f5:cb:22:31:45:94:
0d:bc:4d:44:d1:cc:bb:4a:e5:33:d5:4d:e6:7d:16:
53:62:06:07:23:06:03:75:05:b4:96:1d:36:7c:d9:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:B7:26:0B:61:D5:52:54:CC:9C:A2:79:57:DA:DA:62:4B:97:C0
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/nc-3Jgth1VJUzJyieVfa2mJLl8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
95.170.19.0/24
95.170.25.0/24
95.170.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f3:56:4a:00:98:ec:1d:fe:b0:c3:1d:08:e9:2b:d9:85:20:
9e:73:ce:43:25:3f:c7:09:fe:78:47:80:f2:ca:6e:b9:30:0e:
ad:bb:eb:f5:e8:f1:6b:77:58:96:a2:26:ee:21:f7:4c:d0:d4:
06:57:64:34:23:a2:04:92:13:16:f5:cb:c0:e0:a2:b6:b3:3c:
d5:1c:f4:70:f1:0c:4e:8e:a6:5d:a2:98:3e:0c:4b:4f:4c:e3:
99:60:65:a3:f8:80:4b:c8:07:df:53:1a:ea:25:50:e4:ad:e1:
65:eb:4a:c2:c2:34:c8:5c:4f:fa:97:7e:19:a8:2f:ef:fc:37:
93:54:74:c7:17:a7:87:7a:eb:9e:98:d7:41:ef:5e:7d:82:e8:
78:ab:46:f8:f4:82:74:83:ac:08:7c:84:29:3a:71:bb:fc:4f:
62:08:e5:a2:2a:e7:8c:3d:44:d8:5e:50:82:f1:32:4e:4d:cc:
9e:31:a4:36:4c:15:2c:45:fd:4a:ea:d0:17:f9:4c:c8:34:50:
37:07:0a:3f:fd:0c:fb:a5:4e:db:ec:60:e8:bb:25:ca:78:cf:
e6:13:df:e7:ea:cd:ad:09:fb:47:34:5d:c9:84:49:af:fd:b6:
eb:a4:cd:c5:19:1a:a1:0c:4d:06:15:28:23:0c:23:8e:e1:ae:
6a:4a:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:45 2026 by rpki-client