Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nvyC5wTZ-FVCcYbi_1l_y4dWnb4.roa
File: nvyC5wTZ-FVCcYbi_1l_y4dWnb4.roa (raw, json)
Hash identifier: 9kLdJJeTVbxypvyDj6EdwHMRh3w+uMwGA1SgDyY44So=
Subject key identifier: 9E:FC:82:E7:04:D9:F8:55:42:71:86:E2:FF:59:7F:CB:87:56:9D:BE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019D62A138318F86512D62F88F8537ED4986
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nvyC5wTZ-FVCcYbi_1l_y4dWnb4.roa
Signing time: Mon 06 Apr 2026 11:50:26 +0000
ROA not before: Mon 06 Apr 2026 11:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 10:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:a1:38:31:8f:86:51:2d:62:f8:8f:85:37:ed:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 6 11:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9efc82e704d9f855427186e2ff597fcb87569dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:3e:0d:78:d5:8e:03:84:ee:94:2d:e3:02:
eb:b5:d3:78:c1:3f:58:63:d2:ef:ec:f7:93:18:3e:
55:12:a8:ac:24:77:bc:86:2b:aa:65:79:c5:a9:07:
d4:d1:bd:c9:3a:69:9e:77:c9:54:f5:cc:09:c3:83:
99:8e:1e:3b:d1:c5:7b:37:b3:bb:fd:5d:13:4d:df:
94:2c:3b:80:64:a5:29:7f:ae:c8:b0:02:ae:b3:eb:
0a:16:3a:94:e2:fd:93:5f:ef:71:04:9b:66:56:75:
e0:3c:46:cc:ec:7c:8b:50:3b:b6:78:d3:77:89:04:
26:ca:bd:3b:e1:e1:1d:fb:71:67:5a:cc:26:a7:37:
2b:2e:7d:00:0b:8c:86:d9:81:c1:4f:0f:96:14:63:
c9:17:ae:6e:3e:be:3d:33:30:40:3a:14:ec:26:54:
2d:94:49:bf:e5:6a:fa:e4:70:19:58:b1:65:1e:cd:
df:79:ca:65:73:e7:e0:e9:71:01:26:93:db:8f:53:
b4:3f:8e:b1:95:04:31:5d:fb:ac:28:3f:89:e5:4a:
41:1f:2f:05:6e:80:a1:58:70:47:06:7a:33:66:c8:
09:f2:6b:67:04:45:91:07:05:74:42:8e:b0:6b:86:
d3:00:38:f7:39:a7:56:90:d1:ed:86:ae:e9:f2:5d:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:82:E7:04:D9:F8:55:42:71:86:E2:FF:59:7F:CB:87:56:9D:BE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nvyC5wTZ-FVCcYbi_1l_y4dWnb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.110.0/24
82.115.9.0/24
89.251.10.0/24
159.255.32.0/21
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2c:da:be:29:ad:c3:a6:68:ac:19:ed:c6:28:99:43:06:35:
44:91:fa:d8:9d:7d:9f:50:0a:cc:a4:91:af:aa:8e:db:5f:3a:
9d:cc:71:56:2f:ad:02:61:3c:c7:bd:ea:d4:6f:43:39:2d:50:
43:4a:08:ee:07:83:68:8b:ef:a9:d0:a4:37:a0:d8:39:ea:2e:
4f:40:3d:8c:35:d8:d8:61:ab:e3:4e:5d:44:12:7b:5d:03:a4:
be:39:c5:54:7e:68:df:db:8a:c5:3d:28:21:a0:38:43:8b:63:
ef:55:4e:d2:ed:86:74:6a:e2:29:f9:19:72:d7:d4:20:07:89:
f8:5e:ec:a8:f5:b6:7d:e2:64:9d:a7:f8:0e:41:7e:7d:17:ae:
76:c1:f6:15:0c:e2:66:4a:07:07:ce:13:10:7a:85:4e:8f:a7:
b9:b0:d1:fb:a4:56:d3:e3:64:e8:58:80:f0:c7:ee:be:a2:de:
98:db:7a:61:d1:84:e0:c2:41:c1:85:64:e3:fc:35:81:81:1d:
78:d8:23:25:ad:05:17:d0:ed:5d:5d:dd:99:60:40:80:90:51:
14:49:4b:d7:8b:1f:a3:cb:2f:e0:31:f6:0a:7d:a3:f0:c6:de:
0b:a4:c6:14:b7:94:2d:ca:4f:d7:cb:74:e0:28:41:d7:4b:63:
a9:72:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client