Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p36NDCGEfnEdiTOT-Cn5fUONXJ8.roa
File: p36NDCGEfnEdiTOT-Cn5fUONXJ8.roa (raw, json)
Hash identifier: zie1WP2+Z0cLlEj/4Cm9sERujicn8iznEdEy4E93xuo=
Subject key identifier: A7:7E:8D:0C:21:84:7E:71:1D:89:33:93:F8:29:F9:7D:43:8D:5C:9F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F5C394465E13727CC9B6B6D2BE6DF5507
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p36NDCGEfnEdiTOT-Cn5fUONXJ8.roa
Signing time: Mon 13 Jul 2026 16:04:44 +0000
ROA not before: Mon 13 Jul 2026 16:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210415
IP address blocks: 2.59.192.0/24 maxlen: 24
45.130.163.0/24 maxlen: 24
45.137.139.0/24 maxlen: 24
91.132.30.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
201.49.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:39:44:65:e1:37:27:cc:9b:6b:6d:2b:e6:df:55:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 13 16:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a77e8d0c21847e711d893393f829f97d438d5c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:eb:ad:8f:fb:2f:c3:15:9a:3c:67:c7:ea:
76:5d:6e:a4:89:f3:9f:88:f7:ef:4b:5c:0d:7d:27:
b9:05:38:d8:bb:e9:ce:4b:95:04:1e:81:5c:64:92:
7f:9d:fa:10:5c:9f:62:42:75:db:40:1b:91:93:cc:
e1:3a:8f:e1:b4:ad:36:d4:a2:1e:f6:c0:4a:ef:a2:
3b:94:9f:6f:01:2d:de:75:c2:7a:c2:17:03:ea:1d:
86:61:65:b3:09:af:a7:db:02:60:80:c4:e1:f6:b2:
46:c0:ff:ee:fe:d0:ae:07:b3:7e:b6:4c:55:10:15:
a1:a4:70:16:a9:76:ae:26:1e:f9:aa:16:51:bd:0c:
86:8c:ea:68:78:e7:e8:46:c2:6a:5e:10:7f:28:4d:
e8:7b:78:f8:04:11:6a:88:0f:3a:d1:d2:53:41:cb:
f6:60:2a:8a:69:f2:25:77:b8:a2:56:b2:af:06:1f:
b3:c6:21:0a:19:6d:b8:01:6e:a6:03:a4:4d:06:d2:
b6:0f:0b:d9:b3:a4:96:fe:6f:20:65:e0:3d:c6:12:
24:2c:04:36:f0:18:e6:4a:e8:db:73:b0:0a:ed:c6:
bf:65:9f:44:71:97:e1:63:55:d7:b2:f0:6f:b4:7d:
0d:15:7b:14:e4:3d:e1:0c:1d:2f:18:64:6e:0a:cb:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:8D:0C:21:84:7E:71:1D:89:33:93:F8:29:F9:7D:43:8D:5C:9F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p36NDCGEfnEdiTOT-Cn5fUONXJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/24
45.130.163.0/24
45.137.139.0/24
91.132.30.0/24
185.246.15.0/24
201.49.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9a:17:8b:f4:46:e6:2a:97:6b:ce:b7:36:be:76:d5:06:b3:
4b:d5:0f:1f:f3:a2:a8:c1:9d:fd:de:38:28:00:7c:3c:93:95:
c7:d9:ac:b7:1b:1a:85:ad:a5:5c:6a:1e:a1:76:d8:17:45:8c:
bc:4d:dd:a9:85:ce:4d:85:0f:4c:15:07:71:2e:55:64:56:f4:
78:75:67:30:49:7b:12:91:57:84:c6:1d:9c:4e:89:54:15:51:
5b:79:eb:6d:3f:7a:92:f4:ee:0a:9b:a0:d3:25:49:82:3a:72:
75:b4:2f:66:56:aa:b2:f8:22:e4:b8:78:6d:66:93:b7:17:53:
52:2a:16:c2:cc:5c:f2:52:01:ed:8a:92:c2:23:f8:11:a2:6d:
e7:5c:e5:f6:77:70:e2:cc:df:5d:14:4a:b4:5e:69:11:3e:93:
84:4b:6d:ca:bb:5b:1a:b1:e7:17:c5:2d:06:0f:3e:f1:af:28:
b8:ff:e6:52:ba:46:92:41:4a:90:e4:5d:25:62:1d:d4:8e:ca:
1a:e2:ce:f2:6f:99:bd:84:ce:d0:ef:08:63:48:35:ac:21:9c:
10:f1:08:99:23:65:8a:87:8f:3f:f5:65:14:35:3d:32:14:b9:
6f:fc:22:6c:32:f1:94:83:67:67:40:2c:d5:43:d3:e1:36:80:
bb:84:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:36 2026 by rpki-client