Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nM_lAxFoR90GHzDm3k-Xe4dLJMM.roa
File: nM_lAxFoR90GHzDm3k-Xe4dLJMM.roa (raw, json)
Hash identifier: QGtQ/k+x9xZlRdE8IXNS7Iy65YO7T/MroiRK01JihRA=
Subject key identifier: 9C:CF:E5:03:11:68:47:DD:06:1F:30:E6:DE:4F:97:7B:87:4B:24:C3
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019E11740589C58B46668C0A63E99FDF47FB
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nM_lAxFoR90GHzDm3k-Xe4dLJMM.roa
Signing time: Sun 10 May 2026 10:34:36 +0000
ROA not before: Sun 10 May 2026 10:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/24 maxlen: 24
93.88.157.0/24 maxlen: 24
93.88.158.0/24 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.132.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.150.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.176.0/21 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:74:05:89:c5:8b:46:66:8c:0a:63:e9:9f:df:47:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 10 10:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ccfe503116847dd061f30e6de4f977b874b24c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:06:98:b3:1d:c9:ab:0f:8f:89:1a:4d:d8:
65:82:6f:f9:89:88:ab:e2:e3:ee:31:da:d3:fe:a1:
4f:66:59:c6:35:34:e2:37:33:58:d8:b3:81:dd:e8:
4b:6a:9e:34:97:21:44:84:7c:2d:d3:80:14:3c:bf:
f7:fa:a1:08:dc:98:b7:1d:76:9d:62:f5:7c:a8:bd:
b3:af:12:fe:0a:76:39:04:d7:00:8d:d0:43:1a:5d:
f9:03:20:24:7f:e0:ef:36:10:6f:e9:ff:59:44:65:
21:33:a9:e3:ef:0c:54:ca:8f:fe:cf:b7:ad:7d:8b:
e5:58:f9:08:7d:44:44:55:c5:6d:01:9a:10:21:25:
bc:a2:6a:83:b9:5c:8b:eb:a1:d3:24:a5:f3:5d:8f:
e8:73:93:0b:e8:55:05:c0:48:1d:34:aa:51:d7:af:
f0:11:b2:33:bb:a1:a9:54:92:3f:af:c8:31:df:04:
33:9c:53:1d:4f:6a:93:c3:e2:6b:4b:ee:92:27:91:
ca:25:97:3b:19:e1:39:6a:f9:8e:cf:a6:4b:f8:da:
35:7c:1c:bd:2c:49:6f:12:8e:34:35:80:1f:6e:0e:
c5:c2:85:a0:90:e0:fe:af:e8:96:f9:d3:fa:4d:26:
53:d4:28:27:23:db:9f:a6:ca:80:8a:75:1b:64:d1:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CF:E5:03:11:68:47:DD:06:1F:30:E6:DE:4F:97:7B:87:4B:24:C3
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nM_lAxFoR90GHzDm3k-Xe4dLJMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
93.88.153.0-93.88.154.255
93.88.157.0-93.88.158.255
95.155.128.0/23
95.155.131.0-95.155.133.255
95.155.136.0/23
95.155.144.0-95.155.150.255
95.155.152.0/22
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c1:3f:89:a2:33:30:1a:b9:e0:2e:7c:42:27:73:5b:bc:67:
6a:01:d0:45:55:36:88:c5:97:5b:a6:2a:8c:5e:e1:c5:96:53:
6c:7a:b9:4b:7e:e3:b1:29:3c:e7:20:dd:4c:7a:cd:0a:e5:a0:
ae:b0:23:0e:83:fd:71:fc:19:3a:90:40:f8:64:45:29:87:ba:
e3:25:e7:e9:ec:4b:c5:68:02:3f:8f:93:eb:ff:da:ad:56:2a:
a3:be:03:84:0d:15:5a:55:2c:e6:e3:4b:a6:af:ad:7e:3b:90:
5a:53:99:0f:91:a8:fb:ac:59:cb:af:c6:94:7b:08:66:c7:7d:
b1:95:22:4a:71:5c:c2:db:b4:e6:d9:c7:65:96:e4:74:e8:de:
64:47:29:71:d5:90:e9:1d:d5:fa:fd:ed:40:44:28:8f:04:41:
80:08:73:13:bb:56:e9:25:f1:7d:95:43:81:e5:16:36:3b:9d:
48:58:f9:bb:dc:8f:fa:84:44:52:1f:33:e2:17:61:d8:d5:5e:
07:ef:8c:ab:a3:bc:b2:34:62:f5:16:49:30:4d:22:97:37:cc:
8d:df:11:36:6b:97:8c:41:7e:92:46:54:b4:60:26:11:c1:ba:
38:bb:4e:86:ca:6f:40:35:a6:06:02:0c:2d:3e:25:5b:a8:6e:
7c:39:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:20 2026 by rpki-client