Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nQxBt3f4W-r1paalMa6N4pPP6ZU.roa
File: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (raw, json)
Hash identifier: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=
Subject key identifier: 9D:0C:41:B7:77:F8:5B:EA:F5:A5:A6:A5:31:AE:8D:E2:93:CF:E9:95
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FA3C4D7E9CE7CA2A8F6AAFB8585A7C581
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nQxBt3f4W-r1paalMa6N4pPP6ZU.roa
Signing time: Mon 27 Jul 2026 13:30:14 +0000
ROA not before: Mon 27 Jul 2026 13:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 185.85.238.0/24 maxlen: 24
185.87.25.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:c4:d7:e9:ce:7c:a2:a8:f6:aa:fb:85:85:a7:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 27 13:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d0c41b777f85beaf5a5a6a531ae8de293cfe995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:f0:a8:f0:f6:e1:59:04:ee:a3:72:fe:39:
0c:5e:11:05:5f:91:d5:3a:79:49:04:76:02:25:2b:
46:7b:27:19:8e:e7:7f:87:87:a0:ff:8e:54:31:29:
76:c8:bc:b7:aa:49:fa:70:ba:93:8a:e2:dc:d7:42:
27:34:6c:c3:4a:09:12:63:24:bd:2e:5b:6d:aa:3b:
2c:f7:e2:3e:21:c8:79:f7:73:7e:da:18:b6:0b:bd:
e3:df:f5:1e:cf:e1:2d:ed:8e:27:80:f7:52:07:31:
e0:13:42:93:47:4a:08:0f:f1:53:e6:6d:57:3b:61:
79:54:a5:03:e1:ed:2e:49:fe:ec:9d:aa:00:e4:e6:
89:76:2d:1b:5e:2b:ca:90:1b:fb:30:1d:3c:0a:49:
44:66:32:c4:bd:89:72:8e:e4:d3:cc:71:0d:b7:cb:
78:86:d8:c1:af:3a:13:b5:d6:bc:b8:56:b3:11:04:
7a:dd:29:e9:27:00:f1:d3:7d:51:b7:89:2c:92:e3:
dd:23:97:02:6c:9f:ba:c0:19:e2:63:da:91:88:60:
89:38:45:97:4c:e9:a4:63:87:bd:a1:c5:ad:e4:50:
b3:45:4c:35:50:df:7e:ca:d7:75:8c:20:ff:90:f8:
42:18:f8:2c:a1:47:67:9d:f8:b1:74:4a:92:f4:d7:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0C:41:B7:77:F8:5B:EA:F5:A5:A6:A5:31:AE:8D:E2:93:CF:E9:95
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nQxBt3f4W-r1paalMa6N4pPP6ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.238.0/24
185.87.25.0/24
185.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:20:de:ed:a4:e6:82:83:61:66:cc:1f:e2:ba:a9:47:09:fc:
5c:38:84:f6:0c:b1:ac:ae:d9:7f:5e:9e:c0:98:8c:9f:b2:a2:
8c:07:4f:16:21:b4:54:89:f3:69:ff:34:38:8a:84:8c:f4:56:
8f:cc:0c:ff:00:82:28:1d:e8:5b:93:58:98:f8:89:1e:6e:19:
48:24:df:f7:f8:a2:ba:13:7e:de:fa:41:6d:a0:33:2b:ef:ec:
b7:09:4e:01:ed:0a:bc:9b:49:bc:7a:32:f3:0b:97:fe:6b:f7:
cf:42:9f:0d:42:3d:b3:f8:9b:7e:ab:25:b4:f9:f2:c6:a2:58:
b0:2e:7a:2a:bd:00:a8:34:a4:6e:86:e4:d0:21:e8:0b:4e:81:
b8:80:2c:be:4d:87:9a:d1:80:7d:5b:0c:92:e3:25:73:cb:95:
c3:01:da:26:44:20:c1:d6:bd:94:c2:1e:b1:68:4f:9d:f9:d6:
18:7e:8c:e8:bc:22:5f:85:93:25:1b:31:f8:79:df:d9:f9:b6:
56:4a:fc:f7:68:1f:5a:27:07:d4:20:8c:8c:01:0b:a8:6c:3f:
90:99:ab:8f:36:d8:25:17:fc:cc:b2:62:d9:12:8c:07:64:76:
ad:46:a8:dd:8b:86:32:8d:15:80:94:59:cb:a5:b7:d1:76:28:
0e:2d:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:14 2026 by rpki-client