Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/Niis1CvHmgu0murfxragV9VItkc.roa
File: Niis1CvHmgu0murfxragV9VItkc.roa (raw, json)
Hash identifier: E9NbgdUKgVnnBg4sHFYFf1Tcl3McpQql43eZKvfPeVo=
Subject key identifier: 36:28:AC:D4:2B:C7:9A:0B:B4:9A:EA:DF:C6:B6:A0:57:D5:48:B6:47
Certificate issuer: /CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Certificate serial: 019CF79B34B8C0534ECF168DC9661E7E84FB
Authority key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/Niis1CvHmgu0murfxragV9VItkc.roa
Signing time: Mon 16 Mar 2026 17:04:29 +0000
ROA not before: Mon 16 Mar 2026 17:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213098
IP address blocks: 85.209.42.0/24 maxlen: 24
185.222.20.0/24 maxlen: 24
188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
194.34.11.0/24 maxlen: 24
195.62.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:9b:34:b8:c0:53:4e:cf:16:8d:c9:66:1e:7e:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Validity
Not Before: Mar 16 17:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3628acd42bc79a0bb49aeadfc6b6a057d548b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:f9:06:e1:85:f0:f5:82:4c:f6:85:05:45:
e8:64:eb:81:43:bb:94:09:9d:37:0d:62:e2:e0:19:
78:40:bf:35:55:db:5f:fe:7f:86:6b:63:c2:46:7b:
22:29:04:2a:c9:29:4c:26:ca:69:54:e3:6a:4e:64:
1e:15:21:9e:96:2e:91:91:c4:3c:73:b5:af:2d:f1:
ee:c4:5b:e1:81:2e:4f:1a:15:a0:12:9a:9c:1a:ec:
b1:c7:79:63:40:57:ed:95:8b:04:1e:ca:98:82:c6:
c4:07:c4:85:e6:e5:2b:f2:e5:f6:af:95:5e:37:06:
c5:2b:47:e1:ed:39:90:a0:9a:e9:b4:36:d7:e7:a5:
e3:11:31:91:93:80:79:d2:4d:15:65:0f:52:ad:5c:
79:15:73:5e:4e:1d:e0:9d:a7:64:ca:e2:f1:1c:06:
5c:d5:f2:d3:51:73:be:36:23:93:f7:3c:7f:4b:76:
9e:1d:cf:62:c9:df:1c:90:d9:ee:ed:5d:f5:0c:c0:
13:19:cf:b7:68:6a:df:89:dd:09:b0:55:70:a1:24:
0f:f9:e3:b5:20:a4:75:ca:67:9f:be:b2:e5:41:e6:
d3:1b:56:aa:f0:1e:5a:df:06:4a:9a:9c:ed:1f:18:
6c:b6:e2:90:b4:cf:4e:85:a4:2f:d9:87:4c:b2:ef:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:AC:D4:2B:C7:9A:0B:B4:9A:EA:DF:C6:B6:A0:57:D5:48:B6:47
X509v3 Authority Key Identifier:
keyid:11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/Niis1CvHmgu0murfxragV9VItkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.42.0/24
185.222.20.0/24
188.72.42.0/23
194.34.11.0/24
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2e:57:0e:a5:82:fc:48:ad:79:da:ba:aa:21:9f:49:1a:2a:
46:65:d4:a4:00:ef:d3:88:7e:c0:68:a3:a7:39:84:2e:0d:47:
ab:b6:3a:e6:3f:5b:8b:ab:e7:14:7c:a1:44:8c:bf:a2:ba:b2:
4a:25:a1:b3:ff:3d:67:6a:71:72:0a:40:c6:ee:56:91:8f:41:
a8:39:15:32:e6:65:02:d5:00:14:fa:b8:c4:45:5c:b5:a6:45:
7e:f5:3f:4a:29:31:f5:a5:88:53:d3:a8:6f:f4:d9:27:66:19:
de:91:3d:11:04:e2:90:d9:79:3e:74:fe:e6:de:a5:a1:cb:c9:
a0:6d:46:58:71:ca:be:c3:e2:6b:36:c0:d5:4b:89:cf:57:91:
ac:eb:df:b7:23:a0:b4:94:c9:de:c6:c0:fb:c5:61:d8:8f:58:
25:3b:42:ac:35:18:c2:db:f4:b5:e5:27:bd:70:d4:99:18:12:
f0:a1:ba:93:16:68:af:34:59:83:54:14:f6:59:5a:54:31:3c:
a2:3b:72:f6:89:24:6b:e0:1b:07:70:9a:01:90:a5:51:a1:31:
81:52:09:45:c0:34:a6:dd:1e:4e:62:85:65:8f:e5:7e:69:9a:
8a:8a:15:08:1a:87:1e:86:a9:56:d8:b5:c5:68:22:d2:c0:a1:
14:e8:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:38:54 2026 by rpki-client