Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/n0ltjUW2u4L-AevEK7WCfM6T9LA.roa
File: n0ltjUW2u4L-AevEK7WCfM6T9LA.roa (raw, json)
Hash identifier: N1gRe4gHex5uwrjtGQXXfVTkeefAztrf56Bgo5TeW0I=
Subject key identifier: 9F:49:6D:8D:45:B6:BB:82:FE:01:EB:C4:2B:B5:82:7C:CE:93:F4:B0
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 019DA943A196DEE8A550AD211159FF7EC9AF
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/n0ltjUW2u4L-AevEK7WCfM6T9LA.roa
Signing time: Mon 20 Apr 2026 05:01:14 +0000
ROA not before: Mon 20 Apr 2026 05:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197579
IP address blocks: 85.155.172.0/22 maxlen: 22
91.223.113.0/24 maxlen: 24
185.92.232.0/22 maxlen: 22
2a13:6b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:a1:96:de:e8:a5:50:ad:21:11:59:ff:7e:c9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Apr 20 05:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f496d8d45b6bb82fe01ebc42bb5827cce93f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:76:2d:cb:91:70:fc:ef:64:12:31:dd:f7:
2a:02:34:a6:b4:0b:21:99:bd:09:62:e2:94:47:86:
b7:8d:15:5d:e6:bb:2b:65:6f:63:d1:1d:fb:12:ef:
f5:c2:89:d1:42:5a:0f:2c:b3:46:98:06:4b:e0:e9:
51:43:11:a4:74:da:cb:ed:94:2e:b1:6f:21:85:8d:
b4:7a:d2:22:9a:13:53:fe:57:54:13:46:5e:cf:b9:
01:bc:b7:45:0d:8d:37:b1:21:43:38:9d:42:10:31:
de:98:a2:fa:95:84:01:ab:ee:f1:17:d3:24:e3:d4:
e9:4c:68:f0:4b:20:d4:1b:7e:9d:27:e3:ee:cc:b6:
10:70:66:50:92:72:b7:d1:ee:2c:39:33:19:9a:0a:
67:0d:ea:6a:e4:94:db:d4:d7:85:b9:ce:9c:ed:38:
05:6f:2e:d1:83:c2:18:f7:bf:45:41:d0:f5:ed:a0:
ee:26:a4:fc:68:dd:5f:af:b6:33:62:bf:9b:70:cc:
da:6e:b0:43:ca:61:1f:f5:af:8e:93:da:74:34:c4:
65:84:97:09:8f:fc:80:ca:dc:6a:76:05:0e:af:ea:
95:6f:2e:1a:3e:b3:5b:7b:f2:a0:3f:e4:f8:c3:4f:
32:7f:15:dd:8d:b3:62:82:c1:68:87:51:fa:ed:05:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:6D:8D:45:B6:BB:82:FE:01:EB:C4:2B:B5:82:7C:CE:93:F4:B0
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/n0ltjUW2u4L-AevEK7WCfM6T9LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.172.0/22
91.223.113.0/24
185.92.232.0/22
IPv6:
2a13:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
89:78:8e:bf:db:e7:e1:04:f7:8d:3c:ba:28:67:ac:e4:d1:dc:
98:ba:70:dc:60:e4:97:fc:ac:6b:f5:89:23:4f:ba:bd:83:1b:
37:da:9c:aa:d6:b9:ec:21:33:27:7c:66:67:56:25:70:c0:85:
82:cd:09:22:ec:b2:da:09:34:52:d0:40:b4:8b:86:95:4a:97:
42:34:f7:d2:bf:5b:eb:96:e4:ed:5b:f1:78:7c:ea:2a:d7:97:
93:94:b2:d0:7e:8f:a4:b7:dd:72:39:7e:55:b8:1b:89:02:95:
d0:cf:87:05:6a:12:ab:86:8d:8f:11:b2:47:0b:2b:c2:b0:00:
6f:74:05:63:00:09:db:40:7c:e2:0c:6f:ac:ea:4d:3a:0b:4e:
da:9e:dc:76:e9:29:5e:d8:44:be:40:f0:cd:36:84:b7:82:7d:
0d:a3:37:69:e2:86:a6:c0:83:54:66:63:f0:85:70:20:da:e4:
4a:9a:bf:72:3b:79:69:5e:1e:d4:21:2e:ad:68:1c:93:9f:79:
a9:a0:27:04:44:66:18:8b:cd:1b:18:50:07:49:6f:4f:ab:16:
2d:7b:83:2f:47:32:bb:44:6b:46:ed:e3:fd:7c:34:f0:29:b5:
b0:dc:98:53:c0:70:e9:bd:18:69:ac:d9:3e:0e:4d:88:c7:9e:
5b:5d:f7:e3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ2pQ6GW3uilUK0hEVn/fsmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh
NTQ4NWMwHhcNMjYwNDIwMDUwMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQ5NmQ4ZDQ1YjZiYjgyZmUwMWViYzQyYmI1ODI3Y2NlOTNmNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdx2LcuRcPzvZBIx3fcqAjSmtAsh
mb0JYuKUR4a3jRVd5rsrZW9j0R37Eu/1wonRQloPLLNGmAZL4OlRQxGkdNrL7ZQu
sW8hhY20etIimhNT/ldUE0Zez7kBvLdFDY03sSFDOJ1CEDHemKL6lYQBq+7xF9Mk
49TpTGjwSyDUG36dJ+PuzLYQcGZQknK30e4sOTMZmgpnDepq5JTb1NeFuc6c7TgF
by7Rg8IY979FQdD17aDuJqT8aN1fr7YzYr+bcMzabrBDymEf9a+Ok9p0NMRlhJcJ
j/yAytxqdgUOr+qVby4aPrNbe/KgP+T4w08yfxXdjbNigsFoh1H67QUQqwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJ9JbY1FtruC/gHrxCu1gnzOk/SwMB8GA1UdIwQY
MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt
YzdlYjM0ZTJkY2E2LzEvbjBsdGpVVzJ1NEwtQWV2RUs3V0NmTTZUOUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2
LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCVZusAwQA
W99xAwQCuVzoMA0EAgACMAcDBQMqE2tAMA0GCSqGSIb3DQEBCwUAA4IBAQCJeI6/
2+fhBPeNPLooZ6zk0dyYunDcYOSX/Kxr9YkjT7q9gxs32pyq1rnsITMnfGZnViVw
wIWCzQki7LLaCTRS0EC0i4aVSpdCNPfSv1vrluTtW/F4fOoq15eTlLLQfo+kt91y
OX5VuBuJApXQz4cFahKrho2PEbJHCyvCsABvdAVjAAnbQHziDG+s6k06C07antx2
6Sle2ES+QPDNNoS3gn0Nozdp4oamwINUZmPwhXAg2uRKmr9yO3lpXh7UIS6taByT
n3mpoCcERGYYi80bGFAHSW9PqxYte4MvRzK7RGtG7eP9fDTwKbWw3JhTwHDpvRhp
rNk+Dk2Ix55bXffj
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:30 2026 by rpki-client