Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Nk2vATHYa-GQzazqd2eZJBVvGmI.roa
File: Nk2vATHYa-GQzazqd2eZJBVvGmI.roa (raw, json)
Hash identifier: mbxcGE+++C0jgCAZFN54YU/bKZh36SL68NmgG4J3ihI=
Subject key identifier: 36:4D:AF:01:31:D8:6B:E1:90:CD:AC:EA:77:67:99:24:15:6F:1A:62
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1007811F4059B74B49F450D65448E050A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Nk2vATHYa-GQzazqd2eZJBVvGmI.roa
Signing time: Sat 03 Oct 2026 06:33:51 +0000
ROA not before: Sat 03 Oct 2026 06:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218539
IP address blocks: 87.84.237.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:78:11:f4:05:9b:74:b4:9f:45:0d:65:44:8e:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 3 06:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=364daf0131d86be190cdacea77679924156f1a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:c0:9f:d3:e2:cc:d2:81:e3:b8:d0:26:b1:
1f:d3:64:3c:9e:e1:95:de:66:69:bf:45:0a:ab:d0:
1d:4b:da:bf:a7:71:8f:96:f9:b7:a9:6f:0d:db:22:
6b:ce:2f:77:90:60:a0:60:53:29:36:11:23:ed:7f:
b6:34:ad:8d:b5:6c:f4:ad:0b:38:da:f9:32:b4:27:
11:0f:1e:12:46:93:60:f1:f6:55:ff:62:53:8e:67:
69:f7:5c:5f:38:31:cc:b6:af:c2:5c:e2:82:12:32:
ff:d3:92:95:40:0a:e1:0d:0c:f0:16:a9:0e:cd:86:
87:4a:11:ec:51:9f:e8:45:0f:15:8c:a1:0c:ac:f1:
b6:11:80:2e:f0:63:bf:4a:24:b3:43:44:bb:a0:26:
1c:88:39:26:4a:ed:d4:1d:61:a1:03:26:24:38:ad:
14:a4:5d:38:77:77:f5:bb:a1:27:89:39:02:29:f3:
06:93:9b:e3:b5:b5:47:f1:a3:e7:5e:9f:7f:e9:51:
3e:39:23:81:88:b5:7c:fc:9e:d2:0e:2d:4c:95:fe:
93:8a:92:3c:09:84:6e:bd:eb:75:d8:fb:83:25:d8:
ad:28:e9:f8:a2:e8:fe:68:bf:6b:91:fe:91:be:22:
97:31:f6:6c:40:7c:7b:06:f6:24:64:e7:a2:fd:ab:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:AF:01:31:D8:6B:E1:90:CD:AC:EA:77:67:99:24:15:6F:1A:62
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Nk2vATHYa-GQzazqd2eZJBVvGmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.237.0/24
87.86.174.0/24
Signature Algorithm: sha256WithRSAEncryption
36:03:1d:d5:ac:4d:24:de:3e:e8:24:9d:44:3c:a8:45:66:f7:
e6:91:26:c3:1d:25:7c:cc:9b:fa:1e:37:c9:15:5b:3f:90:08:
6c:75:39:e1:9d:be:c3:a1:00:7b:e2:b0:68:3d:4b:93:e8:be:
a9:1b:f8:2d:ea:b9:69:af:c2:b9:c0:78:5f:48:3b:0e:73:24:
73:21:b7:2f:91:82:e4:98:53:6b:3d:23:d6:ba:08:8e:16:e1:
d7:73:a0:c9:5f:ce:58:32:e4:23:71:40:43:18:e1:9a:f5:5e:
f0:4e:91:66:f2:ab:ef:d1:b8:5b:9d:5b:b8:9d:51:8e:05:9e:
3c:2b:33:33:67:b5:d1:30:77:4e:57:ae:98:ee:c2:ec:22:99:
88:69:01:8c:2f:c9:f0:75:76:f7:eb:3d:42:f1:ee:df:1e:40:
4a:b0:df:0d:09:04:ef:a3:56:9a:78:72:fc:df:24:84:2a:a2:
aa:05:be:90:fe:29:93:0a:05:69:77:94:c0:c6:41:0b:ba:60:
a3:6e:78:e1:54:86:b2:ab:eb:7e:dc:45:74:45:97:9d:0a:f2:
f4:bd:6b:67:19:f0:f9:76:2c:8b:a2:77:f4:6d:16:7a:4b:de:
45:67:bd:91:68:55:3f:6a:c5:79:89:5b:9e:ca:61:17:0c:35:
53:76:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:44 2026 by rpki-client