Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nxt8i0wm--MnMdjD131-QjwI5fA.roa
File: nxt8i0wm--MnMdjD131-QjwI5fA.roa (raw, json)
Hash identifier: o+CfmYOAVCB+UwGQtIkp00rdvM3hwCFI89EpJyGs4gc=
Subject key identifier: 9F:1B:7C:8B:4C:26:FB:E3:27:31:D8:C3:D7:7D:7E:42:3C:08:E5:F0
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D8774532A0744202913F41AE0330AD9D5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nxt8i0wm--MnMdjD131-QjwI5fA.roa
Signing time: Mon 13 Apr 2026 15:27:20 +0000
ROA not before: Mon 13 Apr 2026 15:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 79.175.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:74:53:2a:07:44:20:29:13:f4:1a:e0:33:0a:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 13 15:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f1b7c8b4c26fbe32731d8c3d77d7e423c08e5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:7c:b1:32:55:88:60:e5:46:f8:bc:db:97:
b9:32:73:f8:03:69:7a:d8:46:96:6f:b4:63:94:27:
0f:8a:62:a0:6b:b5:8e:e3:3d:97:4e:34:d1:0d:7a:
ce:49:10:99:9e:1b:b7:ea:cc:ef:24:b9:25:fa:18:
50:00:e7:a1:37:57:3a:07:67:04:7d:1f:91:74:3e:
23:15:07:99:24:2e:0f:c3:ea:03:8a:9e:58:26:c4:
0f:79:9d:bc:61:48:cd:af:67:8e:e3:f1:bc:57:0b:
57:38:60:77:de:96:c3:c4:53:e9:6b:7e:4b:17:53:
94:bd:97:d4:18:d9:49:46:46:73:9d:3f:3d:0b:94:
79:cc:f4:98:67:14:f9:c7:6e:66:1b:0e:bd:1c:9f:
cc:5d:94:db:7d:fe:92:76:75:c3:20:88:3d:2e:b3:
b3:d3:b8:02:03:8b:cc:84:4e:cd:e2:8c:7d:f4:51:
be:c8:71:b2:cf:84:f5:ca:61:f4:d9:a5:11:f8:20:
b9:e6:3d:a4:b9:41:67:da:54:d3:58:2b:99:e6:95:
6f:a8:8a:8a:c2:3c:f8:04:98:77:4c:c3:7a:1c:89:
8e:3a:30:ce:3b:04:4a:a6:99:b5:a6:f7:46:3a:e6:
bf:88:d6:36:ad:32:cc:41:57:01:3f:af:d9:df:9e:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:7C:8B:4C:26:FB:E3:27:31:D8:C3:D7:7D:7E:42:3C:08:E5:F0
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nxt8i0wm--MnMdjD131-QjwI5fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:db:b1:45:2f:40:7f:8b:c8:6b:0d:5c:f9:93:3a:d8:c0:20:
8a:fb:7a:f2:67:38:d4:7e:71:6e:65:cc:3d:a5:70:fb:ee:46:
65:ed:74:ea:04:8a:52:6d:a9:c5:1f:09:99:7c:fd:ac:f4:0b:
0f:d6:b2:f4:ba:7f:4b:bf:d5:92:66:4e:38:b2:98:df:8e:08:
64:08:84:7b:b2:87:4f:5f:3f:54:4e:41:29:3b:07:8d:4d:bf:
9b:b3:40:66:04:de:c9:ac:9e:61:41:22:ba:81:c7:b1:a0:79:
ab:4a:84:5d:b5:0e:e1:c3:0f:67:9f:7e:b6:7c:d5:82:93:79:
1e:98:e4:ad:5a:50:b7:68:b4:0b:b3:b0:4b:5c:73:57:36:e7:
4b:64:d5:0d:27:f3:c7:c2:71:99:05:0c:79:33:35:a0:57:ab:
eb:d4:ad:bb:1c:26:65:40:1d:81:3c:a3:bb:0a:4d:a8:9a:89:
88:3d:05:59:ff:a4:2c:8c:93:e9:80:46:42:40:29:12:e9:58:
fe:29:d6:8e:42:dd:d1:ef:2e:9a:49:99:72:25:74:8c:38:b5:
46:e7:df:47:ca:a5:99:0b:ab:6f:40:6c:4a:98:09:6a:cf:ae:
f8:ea:f2:f0:76:04:15:51:95:cc:0e:7f:ed:56:07:d4:3d:7a:
06:5f:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:09:44 2026 by rpki-client