Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nKt66GRb-I00pWAEEGe90ygEmjk.roa
File: nKt66GRb-I00pWAEEGe90ygEmjk.roa (raw, json)
Hash identifier: IqAHndNCetlla6dOVxallhRtyBxZRafOjxD9FN6xPhc=
Subject key identifier: 9C:AB:7A:E8:64:5B:F8:8D:34:A5:60:04:10:67:BD:D3:28:04:9A:39
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01986197B5E1C2884E003C009608AAAFDDF9
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nKt66GRb-I00pWAEEGe90ygEmjk.roa
Signing time: Thu 31 Jul 2025 17:46:29 +0000
ROA not before: Thu 31 Jul 2025 17:46:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 84.46.203.0/24 maxlen: 24
84.46.208.0/24 maxlen: 24
84.46.211.0/24 maxlen: 24
84.46.212.0/24 maxlen: 24
84.46.214.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.129.0/24 maxlen: 24
86.38.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:97:b5:e1:c2:88:4e:00:3c:00:96:08:aa:af:dd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 31 17:46:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cab7ae8645bf88d34a560041067bdd328049a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:1d:42:52:4f:bd:f0:22:73:79:28:a1:0c:
10:4d:89:1b:f8:97:f7:aa:02:8b:35:7e:f1:b8:d9:
52:8b:f2:e6:56:56:83:fa:58:44:44:38:fe:c0:bd:
bc:8d:46:09:09:5c:68:85:8f:a3:b0:cf:3c:2c:ce:
93:50:6b:62:23:23:0f:63:a9:e3:04:9b:39:08:4f:
df:ff:c8:9a:e3:6a:36:be:a3:9d:2d:46:29:60:d5:
d5:99:86:85:e2:6d:75:6c:ce:a0:92:4d:70:c9:a1:
31:de:1d:02:e3:d9:4b:8e:1e:33:fa:a0:b5:50:48:
5c:56:9f:2d:9b:b5:8d:31:08:30:00:07:ae:44:04:
44:fd:87:39:ce:49:e1:77:76:18:9c:8c:fa:41:4a:
69:df:8e:23:79:1f:e8:2f:d4:07:9f:61:55:d0:d2:
d1:6d:41:fa:18:64:ec:c6:e3:d0:63:71:c8:aa:fc:
d2:bd:5f:4b:f2:f2:39:95:f4:75:cf:87:65:a8:a8:
53:de:b3:21:b9:bb:c9:4f:c5:0a:2e:27:b1:5e:d8:
9e:63:0a:2d:50:40:a8:60:bf:0c:62:3a:f6:91:da:
6a:66:c5:b3:2a:b4:5d:ec:70:3e:9d:f9:77:61:1e:
5d:f1:15:24:01:7f:34:0c:e0:9f:0a:76:ed:89:be:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:7A:E8:64:5B:F8:8D:34:A5:60:04:10:67:BD:D3:28:04:9A:39
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nKt66GRb-I00pWAEEGe90ygEmjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.203.0/24
84.46.208.0/24
84.46.211.0-84.46.212.255
84.46.214.0/24
86.38.128.0/23
86.38.158.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ca:f9:8f:77:3a:e9:96:7c:43:f3:e5:6b:08:44:a9:18:eb:
c5:6a:8b:51:41:55:ea:41:cd:b4:15:7c:cb:fb:95:4e:14:35:
3a:2d:5a:50:54:84:32:c8:bb:6f:44:4c:cd:65:3b:c8:25:bb:
9a:f8:8a:ae:e9:21:01:4b:47:ef:56:5d:f0:eb:e2:a8:91:d6:
71:40:54:9c:a9:0d:41:02:db:d5:eb:ce:d6:41:6b:12:a1:4e:
ef:2b:75:a4:3f:df:c2:5d:75:9e:04:4c:65:38:f6:e8:40:46:
37:5c:d2:a0:75:48:d4:d0:da:31:62:9c:e6:59:9e:5a:75:27:
ce:82:a5:bb:04:ad:6d:26:66:2b:db:bf:dc:08:e1:67:d6:a2:
04:29:bd:14:e8:0f:e1:b4:d4:88:7b:f5:08:1b:1d:5d:54:d3:
d7:26:87:c6:66:b3:d1:75:d9:5d:b0:71:3d:a6:6d:e0:7b:c9:
a9:e9:8a:c9:7c:e2:31:77:fa:f7:1e:b8:d8:ce:e3:7c:7d:29:
6d:ad:20:e1:16:01:d0:08:5e:0e:63:8f:e4:09:8d:0e:72:24:
6a:9d:5d:d5:5c:ac:7d:90:a4:a6:8b:95:4d:be:72:26:c0:81:
f2:00:b7:8f:a3:60:5e:08:69:f2:01:05:4c:f7:c5:bc:22:ca:
1b:db:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:13 2025 by rpki-client