Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Nhp6W7n2dMAbKSTdBk7Ov5vFZWo.roa
File: Nhp6W7n2dMAbKSTdBk7Ov5vFZWo.roa (raw, json)
Hash identifier: Y86Zcs9vMnUri8YEzepAmT9aBcjV3FOKaBD2S1TCZEs=
Subject key identifier: 36:1A:7A:5B:B9:F6:74:C0:1B:29:24:DD:06:4E:CE:BF:9B:C5:65:6A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA768DDCBB0E1CC8FF2BE9E8BA96B0CE9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Nhp6W7n2dMAbKSTdBk7Ov5vFZWo.roa
Signing time: Tue 28 Jul 2026 06:28:15 +0000
ROA not before: Tue 28 Jul 2026 06:28:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146892
IP address blocks: 82.108.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:68:dd:cb:b0:e1:cc:8f:f2:be:9e:8b:a9:6b:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 06:28:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=361a7a5bb9f674c01b2924dd064ecebf9bc5656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:86:8f:27:06:bf:0a:02:60:98:33:81:a8:
2c:ca:09:a1:41:b4:47:0d:15:d6:47:f6:81:11:68:
3e:3b:35:d8:fc:d2:1d:f9:38:ad:07:e7:8e:0d:8e:
48:d9:c8:75:e0:cb:d2:5d:b1:b8:56:dc:55:1a:ba:
ee:e6:75:fd:f2:b2:f4:3c:13:4b:a6:06:3a:be:e6:
22:e9:9e:7c:65:db:99:f1:91:be:e3:1b:02:52:04:
6e:17:1c:51:03:47:30:bc:91:a3:27:4e:7d:78:6c:
ee:7f:5a:88:26:a7:dc:c1:8b:6c:d2:c6:c2:3f:d4:
7c:3d:a9:df:b3:4f:c2:60:3f:8b:89:bb:d2:e8:c8:
12:eb:cd:b2:28:e7:65:7c:be:9a:4b:14:b2:fa:e9:
b8:25:6a:57:ff:c2:ed:ba:7e:f5:e8:08:b3:46:dd:
19:ef:67:71:71:e9:e5:1e:11:22:83:13:17:f8:b7:
0b:a8:e6:39:7c:03:0f:32:56:f0:b7:e4:51:f2:dd:
b2:21:a4:77:e9:39:7b:f5:b7:bc:3e:93:34:95:6c:
a0:94:9a:7b:dc:ce:46:28:84:df:1d:92:a7:52:35:
19:b5:f8:94:00:ad:0b:f2:f6:f2:53:78:a5:c9:a6:
da:25:1a:e7:00:b3:f6:fb:08:ce:d2:1d:4d:eb:40:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1A:7A:5B:B9:F6:74:C0:1B:29:24:DD:06:4E:CE:BF:9B:C5:65:6A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Nhp6W7n2dMAbKSTdBk7Ov5vFZWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:21:54:7d:93:48:57:67:8c:b6:94:83:d2:e5:e9:75:05:e4:
90:a0:fc:0e:21:f2:3e:44:a6:0d:d3:b1:df:84:69:e9:88:af:
a8:de:9f:12:7a:36:e5:bf:e9:b7:52:fe:1e:a5:47:c5:c0:fb:
b5:b7:52:e0:89:a9:da:e1:f3:f5:88:44:42:02:f8:8c:11:4c:
89:26:7e:fa:84:b8:81:da:bc:7f:ee:8d:63:49:83:78:d5:26:
08:cc:49:d9:14:97:60:e1:6e:81:69:14:a9:2f:7c:df:ac:18:
35:1d:26:1e:d5:06:5e:00:0f:8a:95:4d:ca:5d:3a:de:0b:27:
7b:0f:b2:81:e6:49:46:88:cc:79:34:e0:65:0a:c1:b1:38:73:
c2:e6:a4:fc:62:2a:3a:9f:9b:0f:a6:8c:64:84:85:ac:93:52:
d1:6d:7e:52:5f:08:f2:71:9b:ad:d3:0a:d1:79:ff:eb:7d:f5:
e5:3d:08:97:e0:88:8e:a6:c9:36:ec:3c:bc:f0:16:ac:ab:d9:
13:7f:65:f8:a4:d9:22:d7:87:65:3b:4a:9e:39:cd:3c:90:2a:
49:c7:80:d8:3a:f5:9d:a8:63:79:09:c1:c1:f5:73:02:e6:69:
fb:be:e0:10:ab:89:d3:ba:af:8d:e8:3d:a2:04:c2:f3:fc:ae:
69:c7:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:50 2026 by rpki-client