Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/C3nc48r2b2USpSkgOVzgsEQF2h0.roa
File: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (raw, json)
Hash identifier: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=
Subject key identifier: 0B:79:DC:E3:CA:F6:6F:65:12:A5:29:20:39:5C:E0:B0:44:05:DA:1D
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019CE70C501AE5FA31E2CC2FB9E0AD588A03
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/C3nc48r2b2USpSkgOVzgsEQF2h0.roa
Signing time: Fri 13 Mar 2026 11:54:29 +0000
ROA not before: Fri 13 Mar 2026 11:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.171.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.76.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.94.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.113.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
2a02:aec0:b::/48 maxlen: 48
2a02:aec0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:0c:50:1a:e5:fa:31:e2:cc:2f:b9:e0:ad:58:8a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Mar 13 11:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b79dce3caf66f6512a52920395ce0b04405da1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:64:95:0f:2d:95:ae:50:40:be:ce:d9:a3:
a5:d5:cc:3c:8c:ae:09:5f:53:98:c6:17:44:f0:06:
43:03:73:db:a7:a0:a6:08:da:1e:36:91:5b:d6:b6:
b6:38:34:e7:74:cf:c2:5d:74:8b:4b:1e:8b:df:b9:
f4:91:52:99:69:b1:b3:25:5e:d9:f3:6e:36:f5:d0:
36:a8:7a:a5:da:b3:47:20:77:ff:30:a2:04:a1:11:
cd:a0:90:d7:ea:c7:2e:15:df:2e:94:cb:7e:41:19:
ea:ed:79:e4:b9:8f:03:d4:db:a4:0c:77:8a:18:0f:
07:1b:11:3c:6d:8b:4f:c4:d7:17:b4:4e:c5:f7:3b:
46:5c:63:f2:20:47:51:c6:3c:9e:11:62:fd:38:2c:
97:a1:a7:7d:1e:6a:b4:80:0d:6c:77:9a:13:98:38:
43:15:d7:ff:e6:6d:26:a7:d6:e1:36:b8:82:36:52:
89:04:cb:0a:78:85:0c:31:6e:b6:4a:e0:c1:78:b0:
42:93:d6:d3:eb:05:05:dd:74:9f:a4:9e:08:26:84:
2d:56:30:12:ac:f2:f1:d9:d8:2a:eb:0b:f8:31:3d:
15:a6:83:66:f4:0f:a2:b9:6c:01:51:1f:96:09:37:
33:b3:44:d3:98:4d:75:1c:88:e1:11:8d:89:81:16:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:79:DC:E3:CA:F6:6F:65:12:A5:29:20:39:5C:E0:B0:44:05:DA:1D
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/C3nc48r2b2USpSkgOVzgsEQF2h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0/22
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.94.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
151.236.127.0/24
185.31.112.0/22
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
2a02:aec0:b::-2a02:aec0:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:18:df:ee:74:d4:16:36:d6:90:78:68:d3:2a:7c:90:4c:9d:
bb:58:69:0b:19:80:ce:8f:74:6a:a5:9c:06:03:ea:9e:f1:93:
02:ca:24:b0:51:bc:04:8b:f4:7a:0a:0b:81:14:4d:08:d6:fa:
c2:b9:94:1f:96:be:3c:7b:fe:82:c0:c2:20:41:5a:a8:14:9f:
57:64:6a:0c:eb:17:92:42:23:e7:9b:2d:21:af:e2:c9:6f:d2:
d3:47:0f:8f:27:73:6c:a6:90:df:bf:c0:49:0b:5c:ae:5e:06:
ee:c2:bf:01:f1:b8:2f:c2:6b:7b:db:60:59:04:a9:29:47:40:
54:4b:76:2e:36:dc:27:2e:27:f2:df:ca:96:e5:61:4f:de:2b:
b9:e1:65:20:af:f0:29:6b:6a:20:67:a5:85:01:a0:f9:33:ca:
b5:7a:2b:2b:e5:f4:1a:8e:74:67:1c:cc:91:ff:c4:e9:ef:07:
e5:42:29:02:6a:95:09:4b:e8:b2:1f:54:0e:91:2f:32:f2:e9:
76:e7:5a:04:9c:f6:03:f8:e5:f6:76:80:f4:a3:61:0c:c5:ca:
78:88:f2:a7:93:0a:f1:86:c2:d0:1f:c2:44:89:3c:2b:81:ff:
02:4f:6d:b1:ca:9b:e3:7f:72:30:7b:ce:ca:6b:fa:7e:5f:e3:
ab:ce:28:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:22 2026 by rpki-client