Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/n9K3STKP4f8c4ARAZitWz9huIsg.roa
File: n9K3STKP4f8c4ARAZitWz9huIsg.roa (raw, json)
Hash identifier: WzEo7pLvtUAIbTPZnzjZ4SmkBgOGdA5Kafu6H4ByG0w=
Subject key identifier: 9F:D2:B7:49:32:8F:E1:FF:1C:E0:04:40:66:2B:56:CF:D8:6E:22:C8
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01A0D793FA140027060D443C53AABFD49CAA
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/n9K3STKP4f8c4ARAZitWz9huIsg.roa
Signing time: Fri 25 Sep 2026 07:59:54 +0000
ROA not before: Fri 25 Sep 2026 07:59:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.248.0/24 maxlen: 24
45.66.249.0/24 maxlen: 24
45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
45.150.108.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
62.106.66.0/24 maxlen: 24
62.204.35.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
83.97.79.0/24 maxlen: 24
91.211.27.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.242.228.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
130.49.155.0/24 maxlen: 24
146.19.49.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
155.212.242.0/24 maxlen: 24
155.212.243.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.104.75.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.59.183.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.20.17.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
2a10:1fc0:13::/48 maxlen: 48
2a10:1fc0:14::/48 maxlen: 48
2a10:1fc0:15::/48 maxlen: 48
2a10:1fc0:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:93:fa:14:00:27:06:0d:44:3c:53:aa:bf:d4:9c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Sep 25 07:59:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd2b749328fe1ff1ce00440662b56cfd86e22c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:65:fc:db:1c:c6:d2:f0:69:dd:31:12:8d:
5d:2c:cc:d5:d5:74:13:cb:ed:84:9d:8c:86:4a:3e:
19:e0:16:e3:26:3b:90:62:a6:3c:58:9a:3d:8f:b7:
88:65:65:b9:96:76:9a:0d:88:3e:5b:da:92:ad:2f:
ee:c3:8a:68:b4:0a:86:37:df:4e:8c:81:ce:ca:3a:
8c:42:64:30:80:47:e6:7f:b8:24:ff:71:ab:1b:78:
d5:7f:0f:dd:82:1d:59:ea:ae:fd:3a:a1:ab:59:3e:
66:a5:b3:4d:70:7c:c5:22:5e:91:5f:82:e6:76:20:
33:ee:37:86:3f:a2:74:fc:b9:e1:4c:d3:6c:1b:6d:
21:cb:3c:79:2c:aa:47:ed:7a:5e:36:24:2f:a7:67:
58:a7:14:14:27:cf:df:bb:8a:e1:b7:cd:70:c2:fd:
08:4b:1e:e5:54:8d:88:76:9b:28:cd:6a:b1:dc:59:
65:43:9e:fd:e5:62:79:6b:1a:b1:31:57:be:1e:2b:
9d:fc:db:f1:63:79:2d:de:f5:98:61:9f:3f:73:f4:
d6:71:04:47:f5:d4:0a:45:ec:08:98:f6:94:65:70:
99:ff:90:16:f0:23:a9:b2:f3:88:a0:a5:06:d6:3d:
29:f3:29:37:96:88:47:03:1b:b3:dd:f9:d4:32:b0:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:B7:49:32:8F:E1:FF:1C:E0:04:40:66:2B:56:CF:D8:6E:22:C8
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/n9K3STKP4f8c4ARAZitWz9huIsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
45.150.108.0/23
62.106.66.0/24
62.204.35.0/24
77.72.85.0/24
83.97.79.0/24
91.211.27.0/24
91.235.234.0/24
91.242.228.0/24
91.242.241.0/24
130.49.155.0/24
146.19.49.0/24
146.19.143.0/24
146.19.185.0/24
146.19.254.0/24
155.212.242.0/23
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.104.75.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.59.183.0/24
194.61.120.0/23
195.20.17.0/24
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:16:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:99:d2:d6:3b:68:4f:3c:ba:db:8a:89:8e:20:27:f5:08:7b:
65:4b:e3:b2:8a:39:22:77:12:ed:4f:e3:c1:9a:d5:c6:72:26:
91:e2:6d:99:2d:c9:06:3e:5d:bb:6c:a6:25:c0:4f:5a:4b:53:
d4:11:bf:99:be:81:01:10:6f:e3:49:cb:ba:82:89:ba:a6:98:
c7:8b:5f:02:9a:dc:e7:43:7d:c2:43:65:b8:fa:27:be:a2:03:
13:a2:d2:30:ca:aa:e0:ef:38:6a:a9:65:f5:9c:19:60:b1:2e:
59:4a:00:2d:5c:ee:00:8c:7e:0a:79:fd:5d:d7:d5:fb:4b:a9:
1c:7b:eb:b6:8b:99:83:53:2f:73:c4:56:82:86:83:b3:51:5d:
18:7f:26:35:f0:8a:64:ef:74:d3:02:b4:ca:16:bb:a0:9d:12:
86:75:9d:aa:af:7b:17:ae:1f:37:ad:d7:a9:6b:19:69:f6:e9:
f5:c1:33:00:be:94:6e:04:f8:fb:7e:05:0f:53:45:1d:44:9f:
d8:3a:a4:6e:b7:1e:1f:f3:89:fb:ff:af:28:e7:59:cf:f9:a1:
df:44:81:e4:53:79:b7:15:bd:19:a4:11:f6:17:d2:23:07:99:
1f:85:7a:9b:52:4a:03:be:5d:4e:ba:5b:8e:d9:87:24:8f:40:
53:84:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:14:55 2026 by rpki-client