Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/NEEbN8JynyHhxumwB0vTIHcw5XY.roa
File: NEEbN8JynyHhxumwB0vTIHcw5XY.roa (raw, json)
Hash identifier: qAw0kKhjXj/KB3/1ygdKpx2cD51ri9hvDX+NCaJivps=
Subject key identifier: 34:41:1B:37:C2:72:9F:21:E1:C6:E9:B0:07:4B:D3:20:77:30:E5:76
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F23683390B2E5A58BFAD40FD50C9846C6
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/NEEbN8JynyHhxumwB0vTIHcw5XY.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51369
IP address blocks: 46.44.0.0/18 maxlen: 20
62.140.224.0/19 maxlen: 24
62.140.250.0/24 maxlen: 24
80.77.161.0/24 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.170.0/23 maxlen: 23
80.77.172.0/22 maxlen: 22
93.191.8.0/21 maxlen: 24
93.191.11.0/24 maxlen: 24
93.191.12.0/23 maxlen: 23
185.221.44.0/22 maxlen: 22
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:90:b2:e5:a5:8b:fa:d4:0f:d5:0c:98:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34411b37c2729f21e1c6e9b0074bd3207730e576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:91:4f:49:50:0d:af:9e:fa:c4:4b:12:b0:
d4:04:a8:6f:8a:05:8f:05:48:3e:83:d1:07:ed:1c:
e3:e7:12:f5:93:7a:5b:d2:d5:1d:4c:88:a3:cd:27:
71:fa:06:bb:b4:04:88:55:27:20:cf:79:d6:2d:5c:
c1:e5:78:c1:6d:c6:db:6f:74:a7:2e:ed:d5:3a:e4:
c9:c8:ea:6f:45:bb:1b:f7:3f:fa:80:ad:2f:62:68:
14:67:64:f5:9e:08:75:56:5a:a5:02:84:b5:48:b9:
dd:04:2e:2d:a8:53:e5:68:40:97:80:70:97:3d:e2:
12:9d:31:55:3c:e4:1b:15:91:bf:a6:39:9b:65:f1:
0d:f7:74:a0:30:7b:67:6a:bb:a0:44:7c:02:bc:9b:
f5:0c:d5:1d:10:00:f9:f0:e7:85:9f:05:28:8d:b8:
39:a0:1c:25:b3:9d:14:bc:03:25:9f:b5:36:2c:c7:
d7:d5:04:0a:e8:f7:fe:48:e0:1d:2e:b6:b7:68:e0:
d5:73:56:01:a2:b2:58:1e:2c:9b:6d:e2:7b:7c:f4:
ba:0c:3a:5d:23:9e:48:c2:0b:a7:78:c8:59:cb:be:
5a:3c:25:aa:cd:73:35:92:5f:cf:31:9b:d0:48:ea:
e9:0b:67:33:2f:98:4f:9f:16:56:07:a0:36:fb:9e:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:1B:37:C2:72:9F:21:E1:C6:E9:B0:07:4B:D3:20:77:30:E5:76
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/NEEbN8JynyHhxumwB0vTIHcw5XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.161.0-80.77.163.255
80.77.169.0-80.77.175.255
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
b9:1b:d3:9e:78:b9:41:ff:4f:40:bd:8f:31:5e:7b:78:39:8f:
fe:b6:41:ad:b6:33:6d:00:07:86:e0:8e:e9:d0:5e:14:af:74:
a2:02:2a:06:a2:bc:0d:36:03:6f:f1:2b:89:93:ba:bb:00:89:
34:66:7c:49:22:c9:32:9e:85:6e:ca:bc:16:ea:99:0c:82:3b:
db:ce:50:9d:6c:7d:ec:83:80:d1:af:ef:88:b8:90:ac:40:5c:
f1:93:04:db:fe:30:25:c6:bf:70:8f:e5:08:b3:0e:3b:7a:fe:
39:6c:40:f1:92:2e:f1:7e:5a:92:c9:54:26:2d:c4:43:06:5f:
7e:ea:e8:5c:83:94:22:12:df:9d:c0:14:01:bc:20:d8:76:fe:
bf:54:6a:0d:2e:20:49:e4:76:14:ca:54:cd:22:0e:f7:e6:ae:
78:87:76:2d:e6:36:96:9c:b5:d7:ef:cb:0e:5f:5b:8e:7c:5c:
8d:38:e4:33:b3:94:79:2d:c5:1f:fb:42:eb:0b:e3:1b:ec:81:
d4:af:53:a9:4b:cf:68:9d:fb:24:3b:87:90:60:81:4d:4a:37:
31:15:25:50:bd:06:6e:2a:e5:ef:c7:86:d3:d7:d3:bf:74:fc:
8c:ab:c5:48:d5:ba:cb:96:22:5f:e1:85:e8:34:fd:67:d6:7d:
46:08:00:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:12 2026 by rpki-client