Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ec3N0N7J7h-evlevna7p8S1LR68.roa
File: Ec3N0N7J7h-evlevna7p8S1LR68.roa (raw, json)
Hash identifier: luMhm/0pMi9/E4AeORHcU800LRaGTWywVzsYM5m+Yhc=
Subject key identifier: 11:CD:CD:D0:DE:C9:EE:1F:9E:BE:57:AF:9D:AE:E9:F1:2D:4B:47:AF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019DC3CD077BA2483D374A0E1838B15371DF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ec3N0N7J7h-evlevna7p8S1LR68.roa
Signing time: Sat 25 Apr 2026 08:41:26 +0000
ROA not before: Sat 25 Apr 2026 08:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13213
IP address blocks: 89.36.23.0/24 maxlen: 24
220.158.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:cd:07:7b:a2:48:3d:37:4a:0e:18:38:b1:53:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 25 08:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11cdcdd0dec9ee1f9ebe57af9daee9f12d4b47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:e1:c0:b3:41:b9:5e:5a:2c:7f:0f:22:4e:
5e:ac:c1:54:48:93:55:5e:0c:cc:0c:ea:ca:90:d2:
ff:65:30:29:c9:c0:86:17:24:1f:b2:3c:81:fc:2c:
f3:42:63:66:b2:b1:5b:9d:c5:3c:24:1b:c3:e0:73:
fb:be:a4:24:3c:11:1d:f8:ce:e5:71:93:8e:08:74:
3d:43:3d:98:be:84:56:0e:32:c4:f3:80:7e:7b:a3:
02:d6:4f:2b:0d:75:2d:f2:ae:70:fc:98:69:be:ad:
e8:21:24:6e:64:e8:47:54:43:0e:ae:56:39:0c:d1:
59:85:0e:59:d0:07:71:36:ea:be:9d:fb:c5:53:84:
b7:16:ca:89:5e:53:32:17:07:c8:63:4a:2f:00:61:
ce:de:eb:83:a7:27:ce:c7:fd:49:ce:19:3a:3b:f0:
17:e3:23:7f:47:eb:64:06:41:5e:ea:cf:a7:97:61:
50:c2:19:f6:67:1b:c8:61:ea:c4:23:ca:1a:9f:39:
ce:ce:94:1f:55:9b:21:dd:03:cc:3c:e4:da:06:40:
81:5e:3c:55:f2:b7:c8:42:29:02:ce:5a:67:c0:b9:
d6:1e:cc:59:b2:20:ce:d3:20:0d:61:6e:23:22:35:
1b:41:48:35:6c:df:97:c7:ce:9a:f3:a0:a7:9c:77:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:CD:D0:DE:C9:EE:1F:9E:BE:57:AF:9D:AE:E9:F1:2D:4B:47:AF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Ec3N0N7J7h-evlevna7p8S1LR68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.23.0/24
220.158.198.0/24
Signature Algorithm: sha256WithRSAEncryption
48:05:7b:74:56:71:88:b7:56:ec:32:0b:c0:57:c3:31:27:a4:
06:5b:3c:e0:83:d7:23:04:f2:d8:c5:9c:24:1e:a8:19:18:f8:
9f:94:f2:34:4a:40:d3:aa:e9:fb:ac:b8:74:41:1e:a6:16:f9:
d5:1f:35:d7:92:44:71:11:76:72:9c:5b:2d:b1:a1:d7:f2:92:
76:38:98:1b:b4:52:49:f5:b4:6c:be:31:e0:79:57:9d:46:7d:
b2:a8:f4:eb:8e:42:d6:87:33:88:aa:50:1e:cc:46:2c:53:ac:
e2:f9:27:eb:b6:da:bf:1a:44:cf:53:03:0f:45:b1:23:c6:aa:
02:48:4c:bf:33:43:70:9f:ab:fe:3f:ab:f5:e1:a3:57:24:f6:
c8:8f:7b:c6:2d:60:d2:2a:9b:4e:d0:dc:1a:e7:71:e4:29:21:
25:7e:87:e4:08:9d:36:3e:df:82:1b:9f:be:ed:b6:8a:1c:47:
87:13:63:ce:94:42:5f:75:b8:3b:29:d0:fc:96:d8:eb:40:55:
e1:6a:81:6b:24:dd:9a:65:1c:d7:09:fa:c3:8e:3f:b1:fa:c3:
3f:e8:37:f6:7a:d1:a0:2a:90:d3:b9:04:63:c7:05:06:00:72:
d0:22:9f:e3:fb:e4:08:85:45:9d:2e:eb:6e:4a:ea:de:2c:ae:
52:61:64:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3DzQd7okg9N0oOGDixU3HfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwNDI1MDg0MTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWNkY2RkMGRlYzllZTFmOWViZTU3YWY5ZGFlZTlmMTJkNGI0N2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1DhwLNBuV5aLH8PIk5erMFUSJNV
XgzMDOrKkNL/ZTApycCGFyQfsjyB/CzzQmNmsrFbncU8JBvD4HP7vqQkPBEd+M7l
cZOOCHQ9Qz2YvoRWDjLE84B+e6MC1k8rDXUt8q5w/Jhpvq3oISRuZOhHVEMOrlY5
DNFZhQ5Z0AdxNuq+nfvFU4S3FsqJXlMyFwfIY0ovAGHO3uuDpyfOx/1Jzhk6O/AX
4yN/R+tkBkFe6s+nl2FQwhn2ZxvIYerEI8oanznOzpQfVZsh3QPMPOTaBkCBXjxV
8rfIQikCzlpnwLnWHsxZsiDO0yANYW4jIjUbQUg1bN+Xx86a86CnnHesvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBHNzdDeye4fnr5Xr52u6fEtS0evMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvRWMzTjBON0o3aC1ldmxldm5hN3A4UzFMUjY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSQXAwQA
3J7GMA0GCSqGSIb3DQEBCwUAA4IBAQBIBXt0VnGIt1bsMgvAV8MxJ6QGWzzgg9cj
BPLYxZwkHqgZGPiflPI0SkDTqun7rLh0QR6mFvnVHzXXkkRxEXZynFstsaHX8pJ2
OJgbtFJJ9bRsvjHgeVedRn2yqPTrjkLWhzOIqlAezEYsU6zi+Sfrttq/GkTPUwMP
RbEjxqoCSEy/M0Nwn6v+P6v14aNXJPbIj3vGLWDSKptO0Nwa53HkKSElfofkCJ02
Pt+CG5++7baKHEeHE2POlEJfdbg7KdD8ltjrQFXhaoFrJN2aZRzXCfrDjj+x+sM/
6Df2etGgKpDTuQRjxwUGAHLQIp/j++QIhUWdLutuSureLK5SYWS2
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:36 2026 by rpki-client