Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/NS8B9quAxg9DaONCvo-F09E4aHg.roa
File: NS8B9quAxg9DaONCvo-F09E4aHg.roa (raw, json)
Hash identifier: 611N6cJ08ljysAfZN/DDvW2PaFTUCRX+l4eXQLoeFWE=
Subject key identifier: 35:2F:01:F6:AB:80:C6:0F:43:68:E3:42:BE:8F:85:D3:D1:38:68:78
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019F752432AAB15B07E076C5DC0F3E1F06F6
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/NS8B9quAxg9DaONCvo-F09E4aHg.roa
Signing time: Sat 18 Jul 2026 12:12:14 +0000
ROA not before: Sat 18 Jul 2026 12:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.56.48.0/22 maxlen: 24
5.253.116.0/22 maxlen: 24
45.66.236.0/22 maxlen: 24
45.137.0.0/22 maxlen: 24
46.175.152.0/22 maxlen: 24
77.83.168.0/22 maxlen: 24
81.16.128.0/22 maxlen: 24
85.208.120.0/22 maxlen: 24
86.62.56.0/22 maxlen: 24
91.197.244.0/24 maxlen: 24
91.197.245.0/24 maxlen: 24
91.197.246.0/24 maxlen: 24
91.206.42.0/23 maxlen: 24
92.118.40.0/22 maxlen: 24
152.89.128.0/22 maxlen: 24
193.26.136.0/21 maxlen: 24
193.47.236.0/22 maxlen: 24
194.59.200.0/22 maxlen: 24
195.24.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:24:32:aa:b1:5b:07:e0:76:c5:dc:0f:3e:1f:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jul 18 12:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=352f01f6ab80c60f4368e342be8f85d3d1386878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:97:ed:a7:5b:30:e0:8e:34:25:7b:9c:34:87:
c6:11:40:27:82:29:ae:e2:7e:5d:d0:4c:54:20:9a:
11:db:d1:0d:61:e8:d7:2e:8d:cc:5a:66:5d:ad:21:
aa:ae:ea:5a:49:6d:89:a9:6e:be:9c:4d:74:5b:e7:
8f:07:86:c0:e8:0c:c4:cf:15:eb:f3:11:3a:ad:55:
c3:2f:8a:2b:46:d1:9a:55:33:55:ac:36:5e:2a:5b:
e7:35:d0:41:f8:53:98:41:a2:8d:99:e5:33:b4:59:
8d:dd:bb:9d:39:9e:c2:65:0e:35:d6:e3:f2:a3:92:
9f:97:6a:8e:41:fb:13:c4:b1:30:b4:de:98:1a:74:
f8:ce:0d:c6:ca:ec:7c:27:c7:56:07:d5:7f:c2:fe:
04:1f:b6:6f:17:cc:a9:77:02:2a:97:28:b4:7f:1f:
59:11:1b:8f:f4:21:d3:5a:01:2a:25:d7:a0:b2:e7:
bd:cc:c7:07:83:f5:ed:38:7e:e5:4b:55:96:a9:1c:
72:46:96:43:64:ab:19:3b:dd:85:44:ca:ce:29:e0:
37:8c:ea:96:ac:3b:32:e7:e0:60:3a:39:fa:98:2b:
bf:5a:e1:6e:51:55:b4:92:0f:27:d3:74:16:de:32:
92:a3:47:fd:68:e9:d8:a7:e5:fe:dd:21:e0:74:e9:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:01:F6:AB:80:C6:0F:43:68:E3:42:BE:8F:85:D3:D1:38:68:78
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/NS8B9quAxg9DaONCvo-F09E4aHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.48.0/22
5.253.116.0/22
45.66.236.0/22
45.137.0.0/22
46.175.152.0/22
77.83.168.0/22
81.16.128.0/22
85.208.120.0/22
86.62.56.0/22
91.197.244.0-91.197.246.255
91.206.42.0/23
92.118.40.0/22
152.89.128.0/22
193.26.136.0/21
193.47.236.0/22
194.59.200.0/22
195.24.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:de:29:69:49:85:4e:bf:ab:b0:30:33:a4:73:b9:38:be:09:
84:47:f6:9a:2f:02:ec:3d:40:c8:fe:a6:8d:60:e8:e5:84:d7:
ef:d9:e3:27:6a:d3:7a:50:cb:f8:77:d2:e8:d0:99:11:31:30:
65:f3:96:33:00:bc:9f:21:b5:4f:0c:c8:d7:f2:29:16:7b:72:
5e:a6:4a:82:bb:24:b4:5c:e7:17:73:54:c3:5d:1b:0e:91:b1:
96:e9:68:6f:78:53:fb:da:6d:14:58:91:c0:09:ed:8e:c4:3b:
b2:c0:8a:2a:94:39:70:53:29:59:c3:13:99:6b:de:8c:a4:68:
29:73:46:82:2b:23:56:52:03:d4:86:55:f5:36:c7:34:2c:95:
a2:ed:d1:41:cc:83:54:bb:b7:50:34:06:f4:ba:3e:31:0e:c2:
2a:18:3e:a3:53:d3:eb:d2:b8:3b:91:98:99:17:a5:ee:47:9e:
d6:8a:59:06:48:6d:3d:e8:cc:f1:2c:77:10:06:96:43:b0:b4:
f2:cc:5f:ed:15:61:d7:3a:79:43:1e:31:99:e7:ec:15:57:a1:
b3:51:02:c1:47:aa:e9:df:76:50:53:2a:15:77:2e:ef:e9:45:
2a:1a:36:4b:e1:83:70:a2:49:09:37:2e:a9:be:4a:13:d0:aa:
bb:5d:ed:3d
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZ91JDKqsVsH4HbF3A8+Hwb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4
MTNjNWYwHhcNMjYwNzE4MTIxMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTJmMDFmNmFiODBjNjBmNDM2OGUzNDJiZThmODVkM2QxMzg2ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Jftp1sw4I40JXucNIfGEUAngimu
4n5d0ExUIJoR29ENYejXLo3MWmZdrSGqrupaSW2JqW6+nE10W+ePB4bA6AzEzxXr
8xE6rVXDL4orRtGaVTNVrDZeKlvnNdBB+FOYQaKNmeUztFmN3budOZ7CZQ411uPy
o5Kfl2qOQfsTxLEwtN6YGnT4zg3Gyux8J8dWB9V/wv4EH7ZvF8ypdwIqlyi0fx9Z
ERuP9CHTWgEqJdegsue9zMcHg/XtOH7lS1WWqRxyRpZDZKsZO92FRMrOKeA3jOqW
rDsy5+BgOjn6mCu/WuFuUVW0kg8n03QW3jKSo0f9aOnYp+X+3SHgdOma8wIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFDUvAfargMYPQ2jjQr6PhdPROGh4MB8GA1UdIwQY
MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt
ZDQ4YjQyZWYxNTliLzEvTlM4QjlxdUF4ZzlEYU9OQ3ZvLUYwOUU0YUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli
LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAgI4MAME
AgX9dAMEAi1C7AMEAi2JAAMEAi6vmAMEAk1TqAMEAlEQgAMEAlXQeAMEAlY+ODAM
AwQCW8X0AwQAW8X2AwQBW84qAwQCXHYoAwQCmFmAAwQDwRqIAwQCwS/sAwQCwjvI
AwQBwxjuMA0GCSqGSIb3DQEBCwUAA4IBAQCl3ilpSYVOv6uwMDOkc7k4vgmER/aa
LwLsPUDI/qaNYOjlhNfv2eMnatN6UMv4d9Lo0JkRMTBl85YzALyfIbVPDMjX8ikW
e3JepkqCuyS0XOcXc1TDXRsOkbGW6WhveFP72m0UWJHACe2OxDuywIoqlDlwUylZ
wxOZa96MpGgpc0aCKyNWUgPUhlX1Nsc0LJWi7dFBzINUu7dQNAb0uj4xDsIqGD6j
U9Pr0rg7kZiZF6XuR57WilkGSG096MzxLHcQBpZDsLTyzF/tFWHXOnlDHjGZ5+wV
V6GzUQLBR6rp33ZQUyoVdy7v6UUqGjZL4YNwokkJNy6pvkoT0Kq7Xe09
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:29 2026 by rpki-client