Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/1-NHEE18msw7q_8UgXeghsH6Ald4.roa
File: 1-NHEE18msw7q_8UgXeghsH6Ald4.roa (raw, json)
Hash identifier: FF/Xn9sNxWe9/r1ReZ8kDWO+yRUG5kzbjIqNIkiEZMA=
Subject key identifier: F8:D1:C4:13:5F:26:B3:0E:EA:FF:C5:20:5D:E8:21:B0:7E:80:95:DE
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01A0C8A7AD0266E050E9C659FE4ED23C193E
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/1-NHEE18msw7q_8UgXeghsH6Ald4.roa
Signing time: Tue 22 Sep 2026 10:27:07 +0000
ROA not before: Tue 22 Sep 2026 10:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24958
IP address blocks: 37.200.112.0/21 maxlen: 22
93.91.16.0/20 maxlen: 21
109.73.112.0/20 maxlen: 21
109.73.112.0/24 maxlen: 24
109.73.124.0/23 maxlen: 23
176.65.64.0/21 maxlen: 22
185.10.12.0/22 maxlen: 23
213.129.64.0/19 maxlen: 20
213.129.84.0/24 maxlen: 24
2a00:1430::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:a7:ad:02:66:e0:50:e9:c6:59:fe:4e:d2:3c:19:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Sep 22 10:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8d1c4135f26b30eeaffc5205de821b07e8095de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:f0:19:20:6d:0b:23:50:b5:20:cb:df:4f:
45:08:8b:d0:86:a7:35:3f:64:ec:28:14:35:5f:f2:
d5:32:1a:db:6e:1f:a6:d9:ec:aa:ad:43:d9:68:16:
e0:66:9c:e1:56:06:32:8b:e4:04:a0:17:a4:16:c2:
fc:ae:59:ea:86:2f:9b:ad:ca:fe:64:56:57:34:fa:
cd:4f:1e:5f:be:ce:8f:86:35:05:8c:1b:2b:49:9b:
bf:62:64:5b:aa:e6:2b:3f:f0:b2:a7:23:d2:6c:4d:
e8:8a:e5:96:9e:67:db:56:43:eb:57:d6:36:17:ae:
77:9d:c2:0b:7d:28:5c:05:6b:7d:9f:cf:9b:0e:f4:
1a:9a:76:0b:1d:fc:59:26:4e:a7:ec:46:43:dc:ab:
99:e6:48:83:37:d3:44:20:cc:c5:77:78:af:22:35:
f5:b7:68:20:81:10:2e:cb:18:a3:c0:af:24:c5:bc:
b5:51:d4:c0:fa:c9:6d:9b:cb:2a:b6:82:62:0a:28:
56:71:41:d8:c3:a0:82:08:eb:52:db:7a:56:42:dc:
ec:ba:48:fe:66:0a:31:a9:32:12:4b:64:11:d2:c8:
8a:24:e9:c6:4a:fd:12:05:96:e9:16:62:ed:c9:d9:
d9:b5:4f:a7:ba:e0:12:f8:5e:61:33:27:47:c2:e8:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:C4:13:5F:26:B3:0E:EA:FF:C5:20:5D:E8:21:B0:7E:80:95:DE
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/1-NHEE18msw7q_8UgXeghsH6Ald4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.112.0/21
93.91.16.0/20
109.73.112.0/20
176.65.64.0/21
185.10.12.0/22
213.129.64.0/19
IPv6:
2a00:1430::/32
Signature Algorithm: sha256WithRSAEncryption
dd:aa:24:84:48:26:fb:33:84:93:c9:fe:a9:75:10:50:40:c8:
7e:20:fc:ae:6a:95:c3:cf:27:d1:9e:93:b0:b5:8d:d4:6a:32:
0d:fd:87:e3:3b:66:a8:9e:ea:47:4b:f1:ed:d4:0b:79:76:4e:
aa:6c:a7:36:13:29:dc:61:f5:dc:2d:83:c6:ab:ac:7a:38:d8:
a8:54:b2:d7:be:e2:c6:6a:49:5a:0c:bb:cd:ce:df:c1:b3:c6:
34:b2:ab:c7:62:54:09:9e:fd:f8:97:5e:68:68:f9:df:37:df:
8f:f9:e2:1b:19:da:f0:05:b6:37:f8:38:62:c5:3e:cb:3c:22:
a9:77:7f:ca:37:82:13:93:e2:ae:56:e6:31:5a:11:29:d7:ec:
e7:8f:3a:c4:b7:24:96:9c:e5:59:20:e0:e6:60:7f:5d:ec:4a:
18:94:d9:a4:66:48:7a:d8:a5:77:d8:24:3a:fc:b5:58:76:a4:
9f:47:62:a7:d2:c3:75:d8:93:ef:0b:51:5b:e3:ca:7a:1c:f9:
b1:e7:1d:e5:84:61:89:0a:5e:eb:a4:61:35:83:5d:7f:bf:df:
b0:50:27:74:1f:86:c1:74:54:95:0a:7c:4e:54:54:8b:f7:2f:
1d:cf:43:31:e0:98:97:19:24:2d:fd:8b:49:0e:0a:93:b2:6a:
b2:74:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:37:46 2026 by rpki-client