Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/nWgcaCGHD4XLgJn8cNsTomvBn3c.roa
File: nWgcaCGHD4XLgJn8cNsTomvBn3c.roa (raw, json)
Hash identifier: 8nej7U1vnnmR/xVjVC+2uJAGyhhhDto8PTwFu5L8GtU=
Subject key identifier: 9D:68:1C:68:21:87:0F:85:CB:80:99:FC:70:DB:13:A2:6B:C1:9F:77
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019F8F3838B45F082260ACB7E99D32E2B072
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/nWgcaCGHD4XLgJn8cNsTomvBn3c.roa
Signing time: Thu 23 Jul 2026 13:44:14 +0000
ROA not before: Thu 23 Jul 2026 13:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16633
IP address blocks: 45.91.121.0/24 maxlen: 24
45.147.95.0/24 maxlen: 24
46.229.240.0/24 maxlen: 24
80.91.219.0/24 maxlen: 24
87.236.163.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.17.0/24 maxlen: 24
185.201.18.0/24 maxlen: 24
185.225.27.0/24 maxlen: 24
188.190.112.0/24 maxlen: 24
188.190.113.0/24 maxlen: 24
193.41.32.0/24 maxlen: 24
193.200.214.0/24 maxlen: 24
2a01:ebc0::/32 maxlen: 48
2a01:ebc0:17::/48 maxlen: 48
2a01:ebc0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:38:38:b4:5f:08:22:60:ac:b7:e9:9d:32:e2:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Jul 23 13:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d681c6821870f85cb8099fc70db13a26bc19f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:76:ce:39:5d:75:05:0c:88:fe:61:4a:b3:
41:6f:38:37:37:34:f9:97:f9:fe:44:4f:f3:c4:c5:
7f:43:cf:89:e8:9d:3c:f9:12:ae:ee:1b:a8:17:7c:
dc:c2:2d:9e:a5:1d:9e:ed:c3:04:5a:12:ec:b6:49:
11:1d:90:36:0c:5c:df:d3:c6:75:83:36:37:8c:7c:
61:e1:6e:24:f7:ef:39:6a:ab:29:8e:74:08:46:95:
d5:21:5e:29:7a:c2:bd:73:6b:bf:bf:29:fa:c5:c4:
1b:06:1e:18:7a:a5:06:60:3d:f9:41:d0:65:91:47:
22:db:49:d2:f4:c3:37:ca:ce:18:86:67:86:7c:ed:
5f:3f:f7:50:6c:dc:1b:ee:d5:f8:c5:84:42:90:c6:
59:5d:5a:e3:41:46:14:74:05:d7:e0:c5:7c:71:2d:
cd:45:7f:73:6e:57:23:45:04:34:b6:ff:b5:58:fe:
89:de:94:42:8e:95:8c:99:d8:d7:5f:c8:86:42:a1:
62:1e:59:15:a2:c8:45:05:19:ea:03:35:4e:2d:8f:
b1:89:8d:37:87:ee:d2:48:ea:dc:99:df:b2:01:3c:
11:df:31:e4:cf:9c:91:a2:8c:69:b6:a6:f6:39:28:
16:21:73:9a:78:ea:8e:85:bc:88:48:a6:39:54:4c:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:1C:68:21:87:0F:85:CB:80:99:FC:70:DB:13:A2:6B:C1:9F:77
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/nWgcaCGHD4XLgJn8cNsTomvBn3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.147.95.0/24
46.229.240.0/24
80.91.219.0/24
87.236.163.0/24
185.201.16.0-185.201.18.255
185.225.27.0/24
188.190.112.0/23
193.41.32.0/24
193.200.214.0/24
IPv6:
2a01:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:51:53:71:09:ec:6b:c7:42:3e:49:72:64:df:4c:33:2d:a0:
99:15:a3:74:ba:f2:23:3f:15:c5:74:4e:d5:d1:95:3a:ce:1e:
c1:a3:6b:83:92:1e:fb:ab:14:ca:63:33:dd:5b:f9:80:da:b3:
29:a6:04:fb:98:7f:b7:1a:e6:08:92:6f:7a:2f:7e:3f:65:32:
77:55:1a:5b:d4:33:71:d3:84:65:88:83:a5:1a:85:ef:86:a2:
2f:9c:c6:d8:c4:ac:55:3e:07:b6:69:56:f8:e8:ce:7f:1b:8d:
35:f4:39:4d:b3:49:a8:de:a1:97:46:e8:c5:f5:9d:f3:2b:f1:
ab:06:8e:34:1c:0b:f8:2f:81:07:d4:66:74:72:56:64:20:1e:
00:05:c7:8e:16:86:4b:84:3b:3e:b0:d1:6b:d6:31:0b:6a:fe:
70:30:5f:33:fa:c6:f4:26:dc:a0:98:56:0b:3b:e9:a1:b8:af:
f7:25:85:a5:c3:18:0f:a3:36:5e:2b:e5:38:e7:65:34:47:f2:
ae:ca:90:30:1b:33:48:21:b6:98:df:22:59:b3:d2:54:9f:48:
17:22:d0:b5:14:54:7a:ca:4f:02:1c:1b:6f:79:c8:32:bd:83:
43:4e:9c:aa:c2:48:fb:0b:08:d5:5f:3c:31:bc:ee:fd:b4:aa:
5a:3c:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:42 2026 by rpki-client