Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/Nn0lRMC8hHbDaia8doeVigcC5RY.roa
File: Nn0lRMC8hHbDaia8doeVigcC5RY.roa (raw, json)
Hash identifier: Try+2Pq/DRb9rHWyi1wD3vDDzR3aElrB/VHvute4y+4=
Subject key identifier: 36:7D:25:44:C0:BC:84:76:C3:6A:26:BC:76:87:95:8A:07:02:E5:16
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 01A034B933752987F316DFCC68D69115C564
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/Nn0lRMC8hHbDaia8doeVigcC5RY.roa
Signing time: Mon 24 Aug 2026 17:02:27 +0000
ROA not before: Mon 24 Aug 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208940
IP address blocks: 85.8.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:b9:33:75:29:87:f3:16:df:cc:68:d6:91:15:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Aug 24 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=367d2544c0bc8476c36a26bc7687958a0702e516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:10:7f:7f:18:08:f8:16:60:96:3b:4e:a2:
9b:bc:64:a2:da:f9:c6:56:c9:70:9d:5c:a3:8b:a4:
c4:f7:fc:c3:ba:36:31:f8:83:73:a6:e6:40:45:76:
88:00:03:72:e8:49:4d:aa:b0:e7:ff:25:d3:2b:9b:
bc:a8:53:ab:92:88:66:c6:1a:0b:6a:4c:f5:64:0d:
0d:57:13:0d:fa:3b:44:c5:ba:9c:1c:98:45:70:de:
40:35:a1:ac:01:5f:7b:12:71:de:06:a1:66:20:38:
fa:28:7e:e2:75:d7:1f:1a:ec:5c:8e:4e:30:bb:d1:
ad:cd:bf:8b:7a:eb:70:46:89:2d:3d:fd:6e:36:1c:
0b:91:12:fc:b4:d8:e4:a5:be:ef:c7:66:5b:39:c3:
00:32:37:05:ab:d3:5c:f1:50:58:90:bf:98:82:1e:
7a:2d:ae:ee:aa:8e:2e:35:7d:2c:6b:58:45:ef:e2:
4d:31:a8:86:86:e7:a3:f1:c6:41:df:1d:43:ed:70:
94:b4:18:5c:8a:fe:8b:28:cb:24:0e:65:71:08:2f:
6b:dd:82:48:a7:0f:79:e2:86:a2:57:b2:bf:45:3c:
09:cf:ee:b1:bf:c2:3c:25:b7:3b:43:61:4a:bd:eb:
05:fa:39:50:a6:b5:a4:87:3a:9c:0b:5b:2b:dc:92:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:25:44:C0:BC:84:76:C3:6A:26:BC:76:87:95:8A:07:02:E5:16
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/Nn0lRMC8hHbDaia8doeVigcC5RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9b:8a:55:ad:b6:44:57:c4:cf:2d:8c:f7:0d:98:86:3c:ef:
c2:6f:53:6f:ed:d5:58:95:af:b3:8c:d0:9b:9d:88:be:c6:4e:
13:1a:35:06:b6:63:3b:34:d5:25:a4:aa:fb:6c:60:30:27:70:
9e:38:14:f0:ce:aa:d9:ee:55:56:a1:86:93:06:7e:c4:e4:91:
bd:2d:44:95:a9:a6:4d:d4:02:3e:63:9b:b8:52:0e:1e:21:15:
8a:87:61:d7:5c:90:f8:1d:e1:00:da:3c:2a:b5:ba:34:3e:6c:
fe:3c:7e:20:de:83:d9:8b:f7:ce:b8:00:34:32:45:99:f3:96:
21:e3:a4:38:b9:cc:84:bc:24:d5:b5:db:19:f6:72:e6:e5:42:
30:9c:f5:8c:3a:c0:46:92:7e:63:d5:6c:dc:4e:63:a0:e3:a6:
02:e6:64:48:81:e5:b9:b1:27:c7:30:0d:48:c9:bf:9b:15:0c:
e5:65:21:20:9f:8a:9a:9c:ba:d5:9e:ce:af:c6:6c:2c:a4:d7:
54:5a:64:13:a0:6f:57:5e:52:f8:52:76:db:4c:f9:f8:04:7a:
bf:81:a7:d3:61:23:3f:3f:6c:9e:f9:00:a6:aa:87:03:c1:05:
24:98:f6:cc:48:c0:a7:e0:c6:da:c6:4e:13:cf:71:12:64:ac:
3e:fd:b7:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA0uTN1KYfzFt/MaNaRFcVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDdlN2MzNzJhOWRiMDkzMzJjNDc5YzcyOTFiODYyOTcy
MWFmZTMwHhcNMjYwODI0MTcwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjdkMjU0NGMwYmM4NDc2YzM2YTI2YmM3Njg3OTU4YTA3MDJlNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IQQf38YCPgWYJY7TqKbvGSi2vnG
VslwnVyji6TE9/zDujYx+INzpuZARXaIAANy6ElNqrDn/yXTK5u8qFOrkohmxhoL
akz1ZA0NVxMN+jtExbqcHJhFcN5ANaGsAV97EnHeBqFmIDj6KH7iddcfGuxcjk4w
u9Gtzb+LeutwRoktPf1uNhwLkRL8tNjkpb7vx2ZbOcMAMjcFq9Nc8VBYkL+Ygh56
La7uqo4uNX0sa1hF7+JNMaiGhuej8cZB3x1D7XCUtBhciv6LKMskDmVxCC9r3YJI
pw954oaiV7K/RTwJz+6xv8I8Jbc7Q2FKvesF+jlQprWkhzqcC1sr3JKIoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZ9JUTAvIR2w2omvHaHlYoHAuUWMB8GA1UdIwQY
MBaAFJ4H58NyqdsJMyxHnHKRuGKXIa/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgt
NTdiNDBmY2VkODI5LzEvTm4wbFJNQzhoSGJEYWlhOGRvZVZpZ2NDNVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgtNTdiNDBmY2VkODI5
LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQjzMA0G
CSqGSIb3DQEBCwUAA4IBAQCbm4pVrbZEV8TPLYz3DZiGPO/Cb1Nv7dVYla+zjNCb
nYi+xk4TGjUGtmM7NNUlpKr7bGAwJ3CeOBTwzqrZ7lVWoYaTBn7E5JG9LUSVqaZN
1AI+Y5u4Ug4eIRWKh2HXXJD4HeEA2jwqtbo0Pmz+PH4g3oPZi/fOuAA0MkWZ85Yh
46Q4ucyEvCTVtdsZ9nLm5UIwnPWMOsBGkn5j1WzcTmOg46YC5mRIgeW5sSfHMA1I
yb+bFQzlZSEgn4qanLrVns6vxmwspNdUWmQToG9XXlL4UnbbTPn4BHq/gafTYSM/
P2ye+QCmqocDwQUkmPbMSMCn4Mbaxk4Tz3ESZKw+/be0
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:35 2026 by rpki-client