Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/RNEy2dNMXx3XlEamTmUhqi44jO8.roa
File: RNEy2dNMXx3XlEamTmUhqi44jO8.roa (raw, json)
Hash identifier: P+axBDbVK5KvN+RHt0OXNG1w00kEnz/ND4dT/9fk2eY=
Subject key identifier: 44:D1:32:D9:D3:4C:5F:1D:D7:94:46:A6:4E:65:21:AA:2E:38:8C:EF
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019DD440F13A35AA5DA8838A949B4EF6468C
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/RNEy2dNMXx3XlEamTmUhqi44jO8.roa
Signing time: Tue 28 Apr 2026 13:21:58 +0000
ROA not before: Tue 28 Apr 2026 13:21:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56694
IP address blocks: 31.177.108.0/22 maxlen: 24
45.154.184.0/22 maxlen: 24
91.219.148.0/22 maxlen: 24
93.184.168.0/21 maxlen: 24
94.198.50.0/23 maxlen: 24
94.198.52.0/22 maxlen: 24
109.238.92.0/23 maxlen: 24
152.89.216.0/22 maxlen: 24
178.255.126.0/23 maxlen: 24
185.9.144.0/22 maxlen: 24
185.130.248.0/22 maxlen: 24
188.127.224.0/20 maxlen: 24
188.127.240.0/22 maxlen: 24
188.127.244.0/23 maxlen: 24
188.127.248.0/22 maxlen: 24
188.127.253.0/24 maxlen: 24
188.127.254.0/23 maxlen: 24
213.171.16.0/21 maxlen: 24
2a06:dd00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:40:f1:3a:35:aa:5d:a8:83:8a:94:9b:4e:f6:46:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Apr 28 13:21:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44d132d9d34c5f1dd79446a64e6521aa2e388cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:c9:a9:09:7b:62:34:cd:81:b7:f7:f7:92:
58:e4:e8:66:91:0f:22:d7:65:9c:d7:61:07:df:35:
2c:97:b2:57:8b:8e:1d:88:01:f3:9a:1a:ab:b7:cd:
b1:c3:f1:75:51:cb:06:f9:81:2d:76:40:b8:ce:9b:
e3:a6:dc:65:92:7e:c5:3e:8b:7d:52:74:a6:12:45:
40:58:68:a2:df:33:63:18:ad:82:13:1a:4f:7e:45:
80:9e:52:0a:ef:69:8e:38:b1:4f:85:f3:47:ed:34:
a3:c8:f1:a5:88:12:8f:eb:20:52:cb:4e:0d:a9:a7:
9f:57:b0:ad:b6:60:0e:91:aa:5a:ed:2e:92:75:b8:
80:9c:6d:7b:98:79:09:c7:04:8c:93:40:7f:d9:27:
c7:16:f2:89:70:e4:d0:6e:29:0f:12:46:47:01:b4:
2b:11:0f:dd:92:c1:ab:ec:d9:5a:45:6d:01:5a:be:
09:f1:1d:d3:85:ba:de:8f:49:5e:70:be:35:73:22:
ef:53:92:b4:4d:66:74:ce:b6:a0:95:77:6b:3c:38:
99:2f:7f:57:01:0f:e7:7b:a3:17:a3:51:20:7f:7b:
be:87:6f:a6:45:b5:9a:fb:4c:00:c2:06:4b:ef:ac:
d3:45:c9:29:ad:72:15:d7:c2:9f:ef:7c:ef:6c:d5:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:32:D9:D3:4C:5F:1D:D7:94:46:A6:4E:65:21:AA:2E:38:8C:EF
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/RNEy2dNMXx3XlEamTmUhqi44jO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.108.0/22
45.154.184.0/22
91.219.148.0/22
93.184.168.0/21
94.198.50.0-94.198.55.255
109.238.92.0/23
152.89.216.0/22
178.255.126.0/23
185.9.144.0/22
185.130.248.0/22
188.127.224.0-188.127.245.255
188.127.248.0/22
188.127.253.0-188.127.255.255
213.171.16.0/21
IPv6:
2a06:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
03:6d:10:b0:06:c4:d7:c3:99:f9:4d:a7:f1:41:0d:70:2b:28:
c9:b9:0d:fe:05:09:87:d3:ee:44:7b:ad:9e:33:2e:75:00:f8:
6c:47:e7:d8:0e:ad:48:e4:b7:17:eb:14:26:1a:04:36:c5:b4:
7f:c7:23:de:59:78:35:7c:0f:4d:2b:54:c3:06:08:0f:d6:d8:
96:68:39:82:18:a1:43:6f:ea:05:89:b0:29:68:38:25:64:d6:
67:0c:25:57:43:e0:d1:f8:9f:08:5f:51:95:ff:68:fd:01:03:
4f:0d:3f:33:a7:21:6a:ce:67:19:a0:ea:79:af:65:4f:a8:e1:
37:23:0a:1b:95:75:55:9b:6f:19:7a:63:43:bf:a3:e7:2d:e3:
0f:01:25:47:d0:64:bc:73:54:a7:3c:ef:35:fd:8c:9c:91:5b:
70:84:87:1a:6c:c6:91:5b:d3:e7:31:05:57:62:ff:17:7d:d3:
3b:ac:6a:4c:fb:14:af:98:32:f8:01:1c:8e:37:57:f5:55:ab:
2b:2d:21:12:45:d6:a4:d5:85:b0:1d:7f:de:0c:63:38:ca:d3:
88:48:5b:11:46:02:0d:32:60:43:c9:7c:3c:fd:8a:28:f3:b8:
e0:f5:98:c1:53:17:f7:40:79:93:40:9d:5d:43:8d:36:cf:a2:
df:c6:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:44 2026 by rpki-client