Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/nAEf4zRlq8tZtnZELhf8izEKWUU.roa
File: nAEf4zRlq8tZtnZELhf8izEKWUU.roa (raw, json)
Hash identifier: dibUINqveWP6BfRYslZV3pavBASzfVywFFvm7OslOpg=
Subject key identifier: 9C:01:1F:E3:34:65:AB:CB:59:B6:76:44:2E:17:FC:8B:31:0A:59:45
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 01A0D72C874ED048B566C1882B8231382058
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/nAEf4zRlq8tZtnZELhf8izEKWUU.roa
Signing time: Fri 25 Sep 2026 06:06:54 +0000
ROA not before: Fri 25 Sep 2026 06:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60042
IP address blocks: 176.118.208.0/22 maxlen: 24
176.118.209.0/24 maxlen: 24
176.118.213.0/24 maxlen: 24
176.118.214.0/23 maxlen: 23
176.118.214.0/24 maxlen: 24
176.118.215.0/24 maxlen: 24
176.118.216.0/22 maxlen: 22
176.118.220.0/22 maxlen: 22
176.118.222.0/24 maxlen: 24
185.42.228.0/22 maxlen: 24
185.42.228.0/23 maxlen: 23
185.42.229.0/24 maxlen: 24
185.42.230.0/23 maxlen: 23
2a0f:c380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:2c:87:4e:d0:48:b5:66:c1:88:2b:82:31:38:20:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Sep 25 06:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c011fe33465abcb59b676442e17fc8b310a5945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:dd:3b:12:fc:4c:45:d4:a4:2d:6c:b2:9e:
e0:67:d2:19:fb:d7:86:f9:15:d5:37:44:f9:36:f0:
25:f0:68:12:a8:d8:3b:80:c9:8d:b1:dd:a5:e1:a1:
33:2a:12:63:95:ba:2d:44:bc:70:2c:67:fa:de:0e:
d4:27:a2:6f:56:de:e0:10:e7:55:b7:20:82:df:c2:
c0:1a:6a:30:2e:40:00:87:a3:83:e1:5a:39:05:0d:
00:b7:54:01:a9:b9:24:3f:b8:2f:2a:2c:b6:17:5a:
57:47:0e:a1:26:09:56:08:02:96:a1:1e:63:16:61:
59:09:e8:cf:41:ad:88:62:d4:4f:db:b4:44:72:b2:
87:f5:99:85:f8:60:67:22:79:c7:fb:f3:82:51:8b:
19:ac:6e:a4:5c:36:a6:60:a7:e6:89:47:85:48:f7:
63:7f:81:ac:5b:2b:1e:96:7e:12:2f:6a:8a:e3:74:
a9:49:98:ba:20:c7:9d:c1:62:bd:fc:7e:b1:d1:3a:
72:0e:7a:2b:6e:57:b5:66:23:9d:f6:ab:cd:cd:dc:
d5:3e:34:31:aa:aa:da:ec:73:f8:04:4d:f0:6e:77:
b3:d3:43:ed:7d:93:28:12:1f:36:9b:08:1b:07:93:
8e:59:e1:b5:8d:24:b8:6c:fd:fb:12:b4:14:e0:ab:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:1F:E3:34:65:AB:CB:59:B6:76:44:2E:17:FC:8B:31:0A:59:45
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/nAEf4zRlq8tZtnZELhf8izEKWUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.208.0/22
176.118.213.0-176.118.223.255
185.42.228.0/22
IPv6:
2a0f:c380::/48
Signature Algorithm: sha256WithRSAEncryption
57:e1:70:f7:95:c9:4b:ab:56:3d:eb:b4:31:74:8a:2e:a0:36:
91:1d:7b:2b:7b:1b:eb:da:41:4e:b9:3c:3c:f1:98:41:0f:9d:
72:1d:68:93:9d:af:be:87:ce:8e:64:3e:f3:58:6b:fd:be:7d:
8e:4f:12:54:c2:cb:d3:8a:04:11:9e:d9:7a:e3:9e:13:73:fd:
7a:c9:16:af:a9:b4:0e:1a:50:43:70:3b:f8:7a:05:7e:9c:81:
52:50:62:50:3f:a2:4e:52:06:3e:50:52:ae:7f:02:81:f1:db:
39:11:e9:2b:4f:9f:a5:7d:98:75:c5:58:0c:ba:c2:6b:0e:34:
31:8c:fe:18:0d:f5:35:af:a0:8e:f4:4b:c4:f2:4a:fa:77:a8:
75:02:5e:6c:da:62:cf:e7:53:44:e9:7f:72:ad:4a:96:47:0a:
b2:7f:89:6f:94:73:86:6e:21:f5:a0:9d:d7:92:d9:5c:fc:66:
bb:0b:5f:ef:8e:ac:71:b6:ff:4c:b7:e5:02:48:f5:96:fd:77:
9a:3b:63:77:35:e9:38:7e:61:6e:40:2f:20:69:79:f1:19:2a:
86:09:8d:3e:4a:54:f0:f7:6a:7b:35:b5:59:a4:08:94:de:fd:
75:55:50:af:95:50:c5:f9:0e:05:f3:c6:5c:66:c0:d5:18:bc:
f7:28:df:15
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAaDXLIdO0Ei1ZsGIK4IxOCBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux
Mjg5ZTcwHhcNMjYwOTI1MDYwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzAxMWZlMzM0NjVhYmNiNTliNjc2NDQyZTE3ZmM4YjMxMGE1OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7LdOxL8TEXUpC1ssp7gZ9IZ+9eG
+RXVN0T5NvAl8GgSqNg7gMmNsd2l4aEzKhJjlbotRLxwLGf63g7UJ6JvVt7gEOdV
tyCC38LAGmowLkAAh6OD4Vo5BQ0At1QBqbkkP7gvKiy2F1pXRw6hJglWCAKWoR5j
FmFZCejPQa2IYtRP27REcrKH9ZmF+GBnInnH+/OCUYsZrG6kXDamYKfmiUeFSPdj
f4GsWyseln4SL2qK43SpSZi6IMedwWK9/H6x0TpyDnorble1ZiOd9qvNzdzVPjQx
qqra7HP4BE3wbnez00PtfZMoEh82mwgbB5OOWeG1jSS4bP37ErQU4KuJFwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFJwBH+M0ZavLWbZ2RC4X/IsxCllFMB8GA1UdIwQY
MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt
ZTNmYzUzNzkxNDkwLzEvbkFFZjR6UmxxOHRadG5aRUxoZjhpekVLV1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw
LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQCsHbQMAwD
BACwdtUDBAWwdsADBAK5KuQwDwQCAAIwCQMHACoPw4AAADANBgkqhkiG9w0BAQsF
AAOCAQEAV+Fw95XJS6tWPeu0MXSKLqA2kR17K3sb69pBTrk8PPGYQQ+dch1ok52v
vofOjmQ+81hr/b59jk8SVMLL04oEEZ7ZeuOeE3P9eskWr6m0DhpQQ3A7+HoFfpyB
UlBiUD+iTlIGPlBSrn8CgfHbORHpK0+fpX2YdcVYDLrCaw40MYz+GA31Na+gjvRL
xPJK+neodQJebNpiz+dTROl/cq1KlkcKsn+Jb5Rzhm4h9aCd15LZXPxmuwtf746s
cbb/TLflAkj1lv13mjtjdzXpOH5hbkAvIGl58RkqhgmNPkpU8PdqezW1WaQIlN79
dVVQr5VQxfkOBfPGXGbA1Ri89yjfFQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:09 2026 by rpki-client