Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nEGC44dtvJ_29ZAmfcr48r27j64.roa
File: nEGC44dtvJ_29ZAmfcr48r27j64.roa (raw, json)
Hash identifier: 99b8fdFKYuICqEQyTcW6N6eRAXLIbKtIPndlpteHLjo=
Subject key identifier: 9C:41:82:E3:87:6D:BC:9F:F6:F5:90:26:7D:CA:F8:F2:BD:BB:8F:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FF08763A7C1A29E729F044CA4C9FAE8A1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nEGC44dtvJ_29ZAmfcr48r27j64.roa
Signing time: Tue 11 Aug 2026 11:13:52 +0000
ROA not before: Tue 11 Aug 2026 11:13:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44828
IP address blocks: 31.13.224.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
87.121.133.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:87:63:a7:c1:a2:9e:72:9f:04:4c:a4:c9:fa:e8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 11 11:13:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c4182e3876dbc9ff6f590267dcaf8f2bdbb8fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:de:57:94:a6:7e:c9:61:b1:7e:c4:92:d0:
9a:66:61:e6:65:9d:73:99:3f:d8:33:75:74:4d:fa:
5b:71:27:f5:d6:73:97:69:6b:67:e8:d8:f6:30:f6:
eb:f5:1c:7d:c7:73:50:06:d0:ac:e0:73:8e:06:e8:
4e:33:38:78:9e:84:eb:2c:af:2f:c2:3d:54:2a:db:
78:ae:f3:0d:89:c5:33:54:bd:46:19:3b:13:dc:b3:
87:54:b2:f4:a0:58:0f:87:8d:0d:23:41:6d:8b:12:
ff:c7:b9:4c:1f:55:3c:f8:79:f4:52:78:e2:b2:80:
6d:da:26:0d:bb:f6:1e:ca:f8:ad:82:0f:e4:c7:70:
6b:32:5f:fb:2d:00:62:12:ce:cf:5a:55:d6:8c:09:
01:82:0d:30:d5:9b:21:58:f0:02:7e:80:c7:d0:26:
f5:1b:52:0e:b2:86:33:de:ce:cf:74:3d:05:f6:86:
ab:d5:77:27:69:88:25:2b:36:47:ed:05:ba:0a:95:
ad:d4:80:05:c7:4a:4c:6a:aa:3e:b3:fc:29:8a:b3:
c4:ce:9d:47:68:21:7d:72:21:7f:80:4a:4f:f3:64:
79:67:8b:c5:5d:16:51:2e:c6:7a:a8:de:3b:a4:e5:
d1:07:be:b3:7a:15:00:6b:61:d3:56:2f:13:3a:74:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:82:E3:87:6D:BC:9F:F6:F5:90:26:7D:CA:F8:F2:BD:BB:8F:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nEGC44dtvJ_29ZAmfcr48r27j64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.139.123.0/24
87.120.33.0/24
87.120.191.0/24
87.121.133.0/24
87.121.220.0/24
94.154.161.0/24
Signature Algorithm: sha256WithRSAEncryption
22:07:0b:cf:66:d8:9c:9d:67:2d:d8:6c:4c:92:dc:2a:84:e5:
d5:90:69:bd:ab:0e:38:40:36:f1:7e:ac:96:c1:42:79:9f:64:
97:54:94:f3:76:63:2d:c3:8e:cd:b3:9d:42:c1:c1:f1:c4:41:
fd:98:e8:4c:3e:a6:b0:54:50:35:9b:09:7c:ab:83:1e:50:c7:
c6:23:1c:f0:32:92:86:39:66:87:a1:1e:fd:34:13:c4:eb:2b:
cf:22:61:67:f6:71:ad:87:51:b4:2c:bc:9f:1e:22:60:73:aa:
04:b8:95:c7:02:f2:17:2a:6b:e3:83:5b:70:91:e2:2a:bd:ac:
03:01:45:3c:98:20:f5:eb:f9:a7:c4:bd:6d:1f:bd:b5:74:fc:
0f:f0:a6:8c:bf:c3:52:74:e6:f8:8f:52:65:1e:6b:0f:5f:c0:
ed:69:57:0c:b6:a4:1b:47:5a:ea:41:13:07:43:03:ab:b0:e0:
57:41:cf:3d:97:a9:fb:68:58:f5:e2:e1:3c:4c:30:9a:ff:29:
48:02:d5:7b:ee:d2:18:62:b2:26:dd:1e:06:95:24:b1:35:07:
2b:59:be:5d:dc:91:51:a9:cb:43:df:d1:ca:2d:8a:59:aa:42:
34:02:44:62:df:a6:51:d4:dc:50:3e:ec:0d:eb:a7:e5:56:b5:
3d:61:77:57
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ/wh2OnwaKecp8ETKTJ+uihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODExMTExMzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQxODJlMzg3NmRiYzlmZjZmNTkwMjY3ZGNhZjhmMmJkYmI4ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvfeV5SmfslhsX7EktCaZmHmZZ1z
mT/YM3V0TfpbcSf11nOXaWtn6Nj2MPbr9Rx9x3NQBtCs4HOOBuhOMzh4noTrLK8v
wj1UKtt4rvMNicUzVL1GGTsT3LOHVLL0oFgPh40NI0FtixL/x7lMH1U8+Hn0Unji
soBt2iYNu/Yeyvitgg/kx3BrMl/7LQBiEs7PWlXWjAkBgg0w1ZshWPACfoDH0Cb1
G1IOsoYz3s7PdD0F9oar1XcnaYglKzZH7QW6CpWt1IAFx0pMaqo+s/wpirPEzp1H
aCF9ciF/gEpP82R5Z4vFXRZRLsZ6qN47pOXRB76zehUAa2HTVi8TOnQB0QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJxBguOHbbyf9vWQJn3K+PK9u4+uMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbkVHQzQ0ZHR2Sl8yOVpBbWZjcjQ4cjI3ajY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHw3gAwQA
LYt7AwQAV3ghAwQAV3i/AwQAV3mFAwQAV3ncAwQAXpqhMA0GCSqGSIb3DQEBCwUA
A4IBAQAiBwvPZticnWct2GxMktwqhOXVkGm9qw44QDbxfqyWwUJ5n2SXVJTzdmMt
w47Ns51CwcHxxEH9mOhMPqawVFA1mwl8q4MeUMfGIxzwMpKGOWaHoR79NBPE6yvP
ImFn9nGth1G0LLyfHiJgc6oEuJXHAvIXKmvjg1twkeIqvawDAUU8mCD16/mnxL1t
H721dPwP8KaMv8NSdOb4j1JlHmsPX8DtaVcMtqQbR1rqQRMHQwOrsOBXQc89l6n7
aFj14uE8TDCa/ylIAtV77tIYYrIm3R4GlSSxNQcrWb5d3JFRqctD39HKLYpZqkI0
AkRi36ZR1NxQPuwN66flVrU9YXdX
-----END CERTIFICATE-----
Generated at Tue Aug 11 14:35:16 2026 by rpki-client