Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/nvBQcelYduDd4tm56B5pe90gDS8.roa
File: nvBQcelYduDd4tm56B5pe90gDS8.roa (raw, json)
Hash identifier: 9vccNXYdmTE6+uGQ5rqwpKVFpAfbWEPJIhtoTGi6STQ=
Subject key identifier: 9E:F0:50:71:E9:58:76:E0:DD:E2:D9:B9:E8:1E:69:7B:DD:20:0D:2F
Certificate issuer: /CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Certificate serial: 019B7C7FFDF41E3802A053C5D8F067C1E0AC
Authority key identifier: 9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/nvBQcelYduDd4tm56B5pe90gDS8.roa
Signing time: Fri 02 Jan 2026 02:18:41 +0000
ROA not before: Fri 02 Jan 2026 02:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199846
IP address blocks: 95.215.232.0/24 maxlen: 24
95.215.233.0/24 maxlen: 24
95.215.234.0/24 maxlen: 24
95.215.235.0/24 maxlen: 24
194.150.196.0/23 maxlen: 23
195.230.113.0/24 maxlen: 24
2001:67c:1844::/48 maxlen: 48
2a11:3600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:fd:f4:1e:38:02:a0:53:c5:d8:f0:67:c1:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Validity
Not Before: Jan 2 02:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ef05071e95876e0dde2d9b9e81e697bdd200d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:33:91:e3:32:a7:c3:86:bd:d7:b8:ac:6b:
8c:7e:03:79:9f:01:83:cb:38:8b:e2:37:0a:cd:97:
b7:d0:9c:c0:47:32:09:e1:0a:ea:fc:c3:79:85:1f:
ab:77:47:59:5e:06:cf:24:db:3b:68:eb:84:31:70:
48:6b:20:71:77:2e:f3:11:e0:5d:df:76:17:73:1c:
4e:8e:b9:2a:43:7b:7d:8d:66:e2:cc:3e:0d:ed:87:
a7:a1:31:81:d0:2e:83:d4:8a:84:4c:eb:c1:cd:77:
b3:ad:e6:83:25:16:9e:9d:5c:8f:20:29:90:55:22:
5b:90:70:f0:11:66:f7:a0:d9:5c:a5:c3:a0:3e:72:
76:20:27:7e:7c:6b:b7:51:59:06:f0:45:c5:e1:a1:
45:5b:84:73:cb:57:db:28:be:dc:90:ae:2d:fe:cf:
4b:e4:31:f0:ef:02:ea:88:dd:59:ec:93:05:0e:13:
e9:90:df:c5:75:d3:c2:49:4d:a3:99:32:26:4f:ab:
c6:9b:fa:88:07:7e:81:41:68:f6:f5:be:ee:02:54:
16:6e:d2:f9:99:2b:8b:70:d9:28:2f:21:b6:04:59:
23:0b:79:df:c1:82:70:46:c0:3b:6b:14:8e:c3:3c:
48:77:57:a4:2e:82:c9:c5:32:53:7f:70:6d:00:aa:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:50:71:E9:58:76:E0:DD:E2:D9:B9:E8:1E:69:7B:DD:20:0D:2F
X509v3 Authority Key Identifier:
keyid:9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/nvBQcelYduDd4tm56B5pe90gDS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.232.0/22
194.150.196.0/23
195.230.113.0/24
IPv6:
2001:67c:1844::/48
2a11:3600::/29
Signature Algorithm: sha256WithRSAEncryption
66:fe:2b:b0:d7:0a:12:d7:b4:63:93:8e:f8:9c:16:d9:b7:16:
73:c0:9a:44:a3:6f:58:da:be:c2:6f:a7:32:7c:df:cf:04:77:
23:db:25:c6:46:6b:33:26:38:9c:df:c0:57:e1:a1:50:a5:e8:
93:c7:5c:46:01:5e:60:8b:67:67:05:6c:b5:68:0c:e7:09:fb:
b6:87:8d:74:ed:c0:6d:cd:e1:03:b6:c0:94:cf:d3:22:af:78:
c9:1f:34:be:93:b9:c6:7c:e7:59:70:54:d2:8a:cc:7e:13:7f:
6f:68:8c:cf:c7:02:f6:48:05:e0:84:d1:dd:b5:8b:8d:9a:21:
0a:a2:7e:7c:5a:24:df:cc:bb:4b:6a:f2:68:b1:f4:50:20:1e:
4b:2d:ea:8d:ce:e3:44:a0:92:f3:bf:4d:23:86:9f:70:31:60:
c6:71:22:5e:7e:89:50:87:87:40:12:a0:75:3e:65:9e:ba:21:
a0:27:da:4c:e8:58:b6:24:89:30:c0:a2:65:f2:02:f3:7e:fc:
f8:2b:35:3e:96:10:75:29:b2:7f:06:8e:a5:6a:8f:d2:7e:28:
b6:9c:24:a1:0d:3e:ea:33:56:0b:24:b1:e5:78:16:83:16:62:
e6:f6:68:c1:99:2d:76:68:e3:9f:80:be:57:9a:6e:ae:e1:b2:
4b:02:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:51:01 2026 by rpki-client