Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/rNpV2NAxJGTfyqIp99f3JpRlSOc.roa
File: rNpV2NAxJGTfyqIp99f3JpRlSOc.roa (raw, json)
Hash identifier: eUZrZrbKbWLWi5DObK4ndFnE2RLvQXE9bQ1Dpvymgcc=
Subject key identifier: AC:DA:55:D8:D0:31:24:64:DF:CA:A2:29:F7:D7:F7:26:94:65:48:E7
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 01A014B826B3BAEDB63FF380B64179BBC2EE
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/rNpV2NAxJGTfyqIp99f3JpRlSOc.roa
Signing time: Tue 18 Aug 2026 11:53:27 +0000
ROA not before: Tue 18 Aug 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208537
IP address blocks: 91.230.237.0/24 maxlen: 24
94.101.104.0/24 maxlen: 24
192.83.120.0/24 maxlen: 24
194.102.239.0/24 maxlen: 24
195.114.238.0/23 maxlen: 24
195.138.39.0/24 maxlen: 24
213.159.24.0/23 maxlen: 23
2a11:800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:b8:26:b3:ba:ed:b6:3f:f3:80:b6:41:79:bb:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Aug 18 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acda55d8d0312464dfcaa229f7d7f726946548e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:47:ff:5d:5c:17:c3:39:1b:04:5d:42:a2:
a0:d2:85:0c:f1:5b:4d:12:c8:d1:65:cf:9a:c4:1e:
20:55:3e:9a:61:93:64:79:60:b6:9a:2d:0c:3e:1d:
5e:81:a0:d5:8a:1b:19:ed:81:1a:94:fb:cc:6e:47:
0e:d0:9f:1c:c7:71:43:d3:41:16:51:be:53:1b:7a:
3e:8a:1c:bd:3f:4f:ca:df:de:50:8e:6d:ca:38:31:
90:68:14:54:82:84:91:9d:95:fa:62:9d:b6:e1:95:
4b:30:e9:be:59:cc:16:ca:7f:00:31:e5:f2:15:9e:
7d:36:6a:24:d8:7a:7d:b5:e5:45:47:3f:12:e3:7c:
11:17:9e:da:e1:59:2c:ab:01:6c:4f:36:5c:e6:69:
c4:42:a1:6f:d9:8b:6e:91:2a:e4:9d:9e:53:49:9d:
40:fc:75:e9:1b:72:30:e3:5a:e5:a1:37:8d:1a:d8:
87:3e:04:a9:5a:fb:08:88:5b:58:8f:54:95:c7:f8:
e6:5f:5c:8f:66:7c:ef:73:61:e7:c8:55:96:66:71:
a5:e8:57:12:bf:36:62:2a:87:a5:6a:01:3a:99:26:
47:6a:23:da:c1:35:7d:dc:33:09:70:f9:5e:90:c8:
9f:07:72:84:17:cf:3f:5c:8b:96:3b:9c:80:3e:ac:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:55:D8:D0:31:24:64:DF:CA:A2:29:F7:D7:F7:26:94:65:48:E7
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/rNpV2NAxJGTfyqIp99f3JpRlSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.237.0/24
94.101.104.0/24
192.83.120.0/24
194.102.239.0/24
195.114.238.0/23
195.138.39.0/24
213.159.24.0/23
IPv6:
2a11:800::/29
Signature Algorithm: sha256WithRSAEncryption
c8:42:a5:5a:72:56:a7:a3:50:39:51:84:88:60:61:7d:4a:84:
8b:01:73:a4:21:0b:58:5a:b2:10:3b:55:4b:51:4d:cd:1b:24:
be:a4:d4:10:cb:18:52:e6:72:2f:aa:88:c1:d8:4b:e6:15:2b:
9c:0d:25:c4:f5:6e:bc:94:ea:bd:03:d6:35:c9:81:18:35:b8:
74:69:b7:ae:7c:d4:49:90:4a:a5:ef:1b:a4:ba:26:e9:55:70:
4b:98:e6:70:d3:7f:fb:03:91:73:85:29:4a:52:a4:9c:34:1b:
3a:08:e2:c3:e8:33:d6:68:c6:6f:25:96:f4:65:08:df:1e:b6:
5b:07:14:64:b7:cf:f5:48:85:fd:1f:b4:a0:35:44:26:f6:b4:
62:e0:42:a9:1f:59:e2:6f:d6:3d:6c:35:40:83:7e:bb:d5:03:
77:df:87:65:86:ab:cd:58:2d:95:e0:a3:f9:a4:50:89:96:33:
11:4c:a6:78:6e:58:4e:07:87:6b:d6:b2:ca:6e:df:e8:53:69:
43:05:df:2c:95:c0:00:88:a6:40:a7:2c:13:d8:af:0b:27:a1:
4a:1b:b0:54:8b:77:09:b0:83:49:c2:24:21:01:f2:2d:20:e5:
bf:19:41:82:b0:e2:d8:e2:30:8e:6b:2c:b7:c9:82:03:49:28:
97:f1:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:13:54 2026 by rpki-client