Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/NYtD8bVg4NQx8TAKP74T5urzm7E.roa
File: NYtD8bVg4NQx8TAKP74T5urzm7E.roa (raw, json)
Hash identifier: sxsaBiaFNQbBiCgqVAu/Abtwd8C0SzySQ3g1oDj/LxM=
Subject key identifier: 35:8B:43:F1:B5:60:E0:D4:31:F1:30:0A:3F:BE:13:E6:EA:F3:9B:B1
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A0B3F7875C4FBEC9EE943F39503B1D8A80
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/NYtD8bVg4NQx8TAKP74T5urzm7E.roa
Signing time: Fri 18 Sep 2026 10:02:18 +0000
ROA not before: Fri 18 Sep 2026 10:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136526
IP address blocks: 2.59.152.0/22 maxlen: 22
45.91.224.0/22 maxlen: 22
45.142.152.0/22 maxlen: 22
45.142.153.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
185.202.100.0/22 maxlen: 22
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f7:87:5c:4f:be:c9:ee:94:3f:39:50:3b:1d:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 18 10:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=358b43f1b560e0d431f1300a3fbe13e6eaf39bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:bd:ff:fc:89:87:69:97:98:3d:15:d2:e3:
4a:99:79:f2:0b:49:45:d2:8a:4c:1f:5e:1b:8f:ce:
f7:4a:a5:97:b6:fd:be:54:c7:c8:9a:c1:1e:c7:d7:
37:83:b4:bc:7e:8f:71:4d:bd:f0:31:2a:68:9e:45:
e1:40:17:d1:7e:21:90:74:cd:e8:b2:fc:05:92:79:
f7:48:ee:69:b3:da:46:b7:b6:c1:15:85:3a:61:fb:
bf:3a:e7:76:7b:d6:47:78:e2:ca:5f:83:27:62:f5:
9a:30:21:89:0a:95:13:72:0a:bc:6c:f3:10:30:a9:
e4:ab:7e:b4:0f:ed:ec:77:82:1d:b7:ed:3d:38:11:
b0:26:9b:5a:05:ba:bf:8e:90:79:8f:b5:dd:5c:4d:
11:c4:3d:9a:21:5b:68:06:7f:b8:c2:10:4d:ce:47:
fb:45:79:3a:c1:2a:3d:d3:c6:db:0f:35:34:fc:96:
e7:62:fe:e0:8e:5a:30:4f:ec:1c:db:3e:68:5e:43:
97:36:bc:1f:cc:a5:d5:f9:1e:46:43:66:68:dd:92:
5e:df:d9:6d:e8:0c:6d:5b:82:f7:af:b8:b4:4f:6d:
03:af:60:6b:68:db:20:62:65:f4:6e:5c:63:2a:91:
e7:6c:e9:7c:f8:a8:e1:8a:b8:fc:4d:cc:da:b0:de:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:43:F1:B5:60:E0:D4:31:F1:30:0A:3F:BE:13:E6:EA:F3:9B:B1
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/NYtD8bVg4NQx8TAKP74T5urzm7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8d:bb:4d:5e:84:ca:d5:60:21:90:a2:19:2a:a5:9b:d0:0d:
0e:7b:5b:0d:9b:9d:a4:bc:2f:ff:5c:a8:16:aa:c7:db:c9:86:
56:6d:47:d5:90:8e:15:fe:1e:9a:ee:a4:67:c1:ea:90:53:3c:
58:ad:70:09:54:36:48:b0:60:c2:9e:90:ce:f2:c4:3c:84:16:
21:52:94:d1:c3:5f:bc:87:12:ac:f1:ad:a0:2d:c3:7f:d0:fb:
50:09:37:75:4a:6a:1f:c3:45:f4:38:2c:fa:7a:3c:bc:30:25:
90:b7:db:cc:31:f0:54:f2:4c:7a:1b:70:ab:f9:2c:1f:1c:93:
52:e5:f4:94:b9:ab:5f:eb:09:b8:1c:b7:0f:ef:75:a1:21:05:
08:e2:63:d5:39:5a:1c:26:d8:4d:fc:3d:2f:43:7a:21:e9:1f:
8d:32:52:3f:3b:bd:88:24:dc:0d:16:ee:37:b6:af:1b:92:e2:
95:46:01:75:7d:83:da:9e:c0:29:36:04:b9:34:9c:e1:ff:2e:
47:9e:54:79:3c:8a:4b:8d:e7:8f:5b:b3:60:00:eb:f1:82:8f:
a3:76:f5:4d:9f:5a:29:fd:2f:13:dd:4a:1b:eb:cb:7e:b7:c2:
58:a2:d3:c1:09:0c:a4:27:d2:39:c5:07:90:c5:40:ad:6e:fa:
4e:4b:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:05 2026 by rpki-client