Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NgGke4JENbp4RSQxEZ09IUK9K6k.roa
File: NgGke4JENbp4RSQxEZ09IUK9K6k.roa (raw, json)
Hash identifier: CTIviv8IW+PAMaolN90AO1lz6fC/c/i4c/PxX2/tMK4=
Subject key identifier: 36:01:A4:7B:82:44:35:BA:78:45:24:31:11:9D:3D:21:42:BD:2B:A9
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019EEFA03A52744A81486D323780723DAB5E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NgGke4JENbp4RSQxEZ09IUK9K6k.roa
Signing time: Mon 22 Jun 2026 13:58:35 +0000
ROA not before: Mon 22 Jun 2026 13:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200563
IP address blocks: 138.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:a0:3a:52:74:4a:81:48:6d:32:37:80:72:3d:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jun 22 13:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3601a47b824435ba78452431119d3d2142bd2ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:b9:a8:4b:5d:64:58:ca:78:a9:3b:00:65:
18:e4:64:17:4b:3b:1a:b7:8b:06:60:94:27:05:12:
7c:6d:03:f8:38:a7:53:9d:6e:f0:85:7b:91:48:91:
15:41:3e:5d:5b:3d:df:34:ef:b4:1b:42:5f:fa:b9:
68:d4:6f:5f:41:97:23:ec:ea:d4:7d:20:fa:fe:67:
51:d2:4c:9c:47:cd:8e:73:01:47:04:97:70:9d:97:
72:49:93:5f:ed:8e:ec:2d:8c:c3:33:7f:59:6d:20:
0f:e0:59:85:2b:68:49:76:ed:eb:4a:0b:1f:6f:d7:
1c:85:e5:11:49:2b:9c:4e:3f:36:03:79:e3:00:52:
a2:20:31:2b:bf:da:11:9f:91:da:32:ee:c1:06:c5:
83:0b:ae:f0:b6:60:0d:e6:a7:8e:be:8c:91:cb:03:
eb:be:9d:c6:58:f5:f5:a7:7a:7d:fc:33:82:43:ac:
0c:3a:0e:e6:29:f1:c2:a0:f1:12:11:3e:3c:ae:ab:
fa:b9:d5:bf:03:50:27:cb:c3:99:61:ab:5a:33:6f:
4e:4d:df:85:f1:3a:f3:f3:00:00:ba:b4:0c:47:33:
2d:4c:db:74:0b:00:c9:12:d9:83:fd:38:72:ab:4b:
4a:54:2e:f4:5a:42:25:aa:91:95:b7:a4:44:ab:0f:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:A4:7B:82:44:35:BA:78:45:24:31:11:9D:3D:21:42:BD:2B:A9
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NgGke4JENbp4RSQxEZ09IUK9K6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:27:10:f3:d1:58:8f:88:e7:d2:d0:f1:5f:58:88:b3:1c:a8:
e4:52:91:9c:a4:64:66:a0:23:a6:97:ed:cf:12:af:a8:b1:e5:
7b:1d:69:6f:09:74:d1:ef:8a:a6:c2:72:ca:d9:e3:f7:e2:e5:
dc:ff:9f:c8:05:6f:26:1f:4f:0a:67:41:eb:d4:a2:98:73:6b:
7a:fd:b7:b3:25:98:00:18:51:d7:56:4c:2d:6c:b1:05:51:88:
d9:06:99:40:9c:62:bb:4a:b2:bb:75:73:0c:23:10:bd:53:72:
8c:27:7b:dd:2c:5e:16:88:6f:fc:92:f4:f5:c4:3a:4c:94:14:
7a:a2:71:ac:6c:74:00:ed:4b:89:00:08:9b:f7:39:da:e7:6b:
b7:0e:cd:60:27:79:65:25:b7:f5:b4:0a:7b:ba:82:cb:cd:bd:
7d:9f:c9:db:8a:74:25:c7:42:73:2c:ac:ea:d0:00:54:2f:85:
eb:3d:41:35:85:e1:c8:ea:9b:ea:d1:17:ba:d7:77:42:8d:88:
c3:29:fa:50:d9:f2:4c:10:f5:a8:ad:dd:24:76:e6:09:3a:eb:
d2:42:4e:78:0f:e8:41:d7:e9:fc:59:99:d0:b7:07:99:e5:94:
53:78:ec:46:b6:1b:6f:f0:e5:c6:f8:8a:3e:77:72:ce:c5:80:
54:68:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:30 2026 by rpki-client