Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/niopwJZMn8lwde1NS8wt0Uc3Yoc.roa
File: niopwJZMn8lwde1NS8wt0Uc3Yoc.roa (raw, json)
Hash identifier: 2/gUiZX6EHQGEQMzfipjY0mkbjq0PaON38uwwnLdqZ0=
Subject key identifier: 9E:2A:29:C0:96:4C:9F:C9:70:75:ED:4D:4B:CC:2D:D1:47:37:62:87
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019DFCF00584BB82678A8D2ED183A30B08FF
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/niopwJZMn8lwde1NS8wt0Uc3Yoc.roa
Signing time: Wed 06 May 2026 10:58:01 +0000
ROA not before: Wed 06 May 2026 10:58:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57468
IP address blocks: 45.15.220.0/22 maxlen: 22
185.6.208.0/22 maxlen: 22
185.6.208.0/24 maxlen: 24
185.6.209.0/24 maxlen: 24
185.6.210.0/24 maxlen: 24
185.6.211.0/24 maxlen: 24
185.144.32.0/22 maxlen: 22
194.60.240.0/23 maxlen: 23
194.60.240.0/24 maxlen: 24
194.60.241.0/24 maxlen: 24
2a03:1040::/32 maxlen: 32
2a07:3a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:f0:05:84:bb:82:67:8a:8d:2e:d1:83:a3:0b:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: May 6 10:58:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e2a29c0964c9fc97075ed4d4bcc2dd147376287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:15:47:28:1a:3d:f0:f7:03:bc:dd:5a:33:
82:62:99:1a:df:7b:a6:48:e5:0f:99:cb:4c:ca:3d:
ea:1d:ec:e4:08:2b:9e:4e:83:a1:19:b9:32:e8:a3:
8c:86:22:66:6d:7b:80:75:88:b5:8e:04:eb:b0:c2:
44:26:25:7f:c6:ea:9c:fc:0a:08:4d:0a:5a:ba:bb:
a3:8d:1a:e5:66:a6:d3:b1:de:b4:fa:4c:7c:9e:fb:
3b:d7:ef:c7:97:d8:d4:a4:6c:70:1d:37:8c:0d:14:
3b:99:f1:a3:03:f1:86:10:08:4d:85:70:d6:a2:2b:
9e:bb:52:a3:a0:41:2a:86:2c:b0:10:32:cc:b2:16:
29:01:2c:cb:fb:a3:e1:6a:a1:3c:54:2b:bd:4a:a4:
ac:f0:f4:e7:59:fb:63:29:2f:41:1a:e4:29:d1:65:
4b:bb:f3:95:0e:51:66:1d:db:33:df:ab:bb:dc:06:
1b:bd:dd:37:ea:58:0a:33:70:eb:7f:36:1d:d3:47:
12:2f:8e:7c:ba:da:f8:c5:e8:ed:d3:18:a2:20:fe:
04:05:fe:46:d6:32:82:d0:a4:ba:6c:17:f9:20:3a:
62:35:09:6f:cb:99:a3:f7:46:11:f9:d1:fe:96:e9:
4d:52:2b:ce:f5:15:4b:77:4e:ff:d8:12:a4:93:64:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2A:29:C0:96:4C:9F:C9:70:75:ED:4D:4B:CC:2D:D1:47:37:62:87
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/niopwJZMn8lwde1NS8wt0Uc3Yoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.220.0/22
185.6.208.0/22
185.144.32.0/22
194.60.240.0/23
IPv6:
2a03:1040::/32
2a07:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
21:33:74:98:ce:ec:2c:cb:1f:ab:be:6d:24:53:b1:09:c4:5e:
ac:41:f8:ab:96:13:bb:0a:9d:7d:80:bb:37:30:ce:1d:63:41:
31:1f:31:19:55:6b:5f:39:e5:80:f5:e0:5f:7d:e8:50:d5:5e:
e7:0f:b4:a4:e0:91:03:c8:eb:d0:c0:fb:66:98:29:a8:57:c9:
92:8b:ea:66:e9:b5:20:8f:25:41:9b:12:a2:fd:c3:1a:e4:e7:
a4:30:62:7e:ac:94:e3:36:b2:33:2f:70:e8:42:12:8f:07:98:
2b:e2:f7:6c:23:62:b6:76:f1:9c:a3:b7:30:b0:9d:df:0d:93:
8d:1e:94:1d:64:12:07:b1:18:16:5e:47:99:2b:03:4c:c8:74:
61:d3:37:4b:df:f0:81:31:77:20:f6:9b:74:89:7f:eb:04:e4:
24:8a:17:59:60:c7:e7:83:8f:3a:a6:71:60:ca:9d:f3:db:e8:
55:b4:42:04:a9:9b:77:b1:8f:b8:e7:f5:1c:8d:62:bb:90:1d:
3d:b5:11:23:1d:d0:ba:b4:cb:62:40:9c:17:d1:ce:7e:ff:55:
1f:2c:94:8e:77:5c:22:2f:1e:f4:f1:f8:fa:59:ef:a9:67:54:
91:27:b5:2a:95:19:e8:32:a6:6a:b6:39:d2:a2:82:cd:0e:44:
61:cc:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:46 2026 by rpki-client