Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NA6UMk4P1h1HaIpyfUuocAjxtfI.roa
File: NA6UMk4P1h1HaIpyfUuocAjxtfI.roa (raw, json)
Hash identifier: ANo0PQehNYiCpwGo1nL5roBB2SxzylHa4z7F0gd0kqc=
Subject key identifier: 34:0E:94:32:4E:0F:D6:1D:47:68:8A:72:7D:4B:A8:70:08:F1:B5:F2
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0F0DF966DE4CE91F77872B82F78F6D3D5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NA6UMk4P1h1HaIpyfUuocAjxtfI.roa
Signing time: Wed 30 Sep 2026 05:52:59 +0000
ROA not before: Wed 30 Sep 2026 05:52:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 80.96.38.0/24 maxlen: 24
80.96.39.0/24 maxlen: 24
80.96.44.0/23 maxlen: 24
80.96.89.0/24 maxlen: 24
80.96.90.0/23 maxlen: 23
80.96.156.0/22 maxlen: 24
80.96.236.0/23 maxlen: 23
80.97.40.0/21 maxlen: 24
80.97.96.0/23 maxlen: 24
81.180.36.0/24 maxlen: 24
81.180.94.0/23 maxlen: 23
81.180.98.0/23 maxlen: 24
81.180.139.0/24 maxlen: 24
81.180.172.0/24 maxlen: 24
81.180.174.0/23 maxlen: 24
81.180.204.0/24 maxlen: 24
81.180.228.0/23 maxlen: 24
81.180.254.0/23 maxlen: 24
81.181.14.0/23 maxlen: 24
81.181.26.0/23 maxlen: 24
81.181.68.0/23 maxlen: 24
81.181.72.0/23 maxlen: 24
81.181.104.0/21 maxlen: 24
85.120.44.0/24 maxlen: 24
85.120.84.0/23 maxlen: 24
85.120.184.0/24 maxlen: 24
85.120.226.0/24 maxlen: 24
85.120.227.0/24 maxlen: 24
85.120.228.0/24 maxlen: 24
85.120.229.0/24 maxlen: 24
85.121.48.0/21 maxlen: 24
85.121.120.0/21 maxlen: 24
85.121.168.0/22 maxlen: 24
85.121.208.0/21 maxlen: 24
85.121.232.0/21 maxlen: 24
85.121.244.0/24 maxlen: 24
85.122.84.0/24 maxlen: 24
85.122.85.0/24 maxlen: 24
85.122.124.0/22 maxlen: 24
85.122.231.0/24 maxlen: 24
193.226.76.0/22 maxlen: 24
194.102.36.0/22 maxlen: 24
194.102.148.0/23 maxlen: 24
194.102.160.0/23 maxlen: 24
194.102.174.0/23 maxlen: 24
194.102.180.0/22 maxlen: 24
194.102.224.0/22 maxlen: 24
194.105.12.0/22 maxlen: 24
194.153.225.0/24 maxlen: 24
194.153.230.0/23 maxlen: 24
194.153.244.0/23 maxlen: 24
217.156.16.0/23 maxlen: 24
217.156.48.0/22 maxlen: 24
217.156.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:df:96:6d:e4:ce:91:f7:78:72:b8:2f:78:f6:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 30 05:52:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340e94324e0fd61d47688a727d4ba87008f1b5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:24:55:42:1b:50:d3:3c:df:15:4a:d6:f9:
4f:8f:ee:d1:ca:20:5e:b5:be:d0:25:c3:03:5c:1e:
60:0e:1e:a9:fe:42:2f:4f:78:7c:fe:50:2f:35:4b:
73:13:09:c4:ff:51:18:04:8c:db:6f:9f:bb:9e:9c:
b7:30:bc:63:a2:6c:bd:0d:78:94:39:9c:3e:04:19:
c8:a6:92:03:5d:86:33:0f:d5:c8:be:2d:3e:a0:97:
f4:f1:e4:6c:00:15:2b:6f:d8:2a:00:41:ec:88:b2:
da:93:46:55:19:a7:1c:7a:58:d8:2c:29:d1:4b:7a:
ef:b3:89:35:5e:57:67:3e:6a:89:de:66:f7:9a:29:
09:25:cc:01:4b:54:d6:0e:40:47:98:30:5b:bc:8b:
a1:c8:08:e2:da:b1:b5:1a:20:60:7e:93:af:07:69:
3d:7d:9b:b2:23:3d:d5:75:f0:79:53:79:44:f1:f1:
0e:84:52:3a:28:12:fd:5e:c7:5d:07:1f:af:47:ed:
bd:73:2b:f0:ef:42:28:a7:8c:4f:38:18:0f:37:1e:
6f:27:4b:ac:35:fb:09:94:5b:ec:b2:6a:87:d1:7a:
5b:01:ff:53:73:ad:42:4d:52:46:80:8a:5a:a0:89:
42:4f:2d:3d:91:07:83:58:cd:70:61:24:c4:fc:04:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:94:32:4E:0F:D6:1D:47:68:8A:72:7D:4B:A8:70:08:F1:B5:F2
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NA6UMk4P1h1HaIpyfUuocAjxtfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.38.0/23
80.96.44.0/23
80.96.89.0-80.96.91.255
80.96.156.0/22
80.96.236.0/23
80.97.40.0/21
80.97.96.0/23
81.180.36.0/24
81.180.94.0/23
81.180.98.0/23
81.180.139.0/24
81.180.172.0/24
81.180.174.0/23
81.180.204.0/24
81.180.228.0/23
81.180.254.0/23
81.181.14.0/23
81.181.26.0/23
81.181.68.0/23
81.181.72.0/23
81.181.104.0/21
85.120.44.0/24
85.120.84.0/23
85.120.184.0/24
85.120.226.0-85.120.229.255
85.121.48.0/21
85.121.120.0/21
85.121.168.0/22
85.121.208.0/21
85.121.232.0/21
85.121.244.0/24
85.122.84.0/23
85.122.124.0/22
85.122.231.0/24
193.226.76.0/22
194.102.36.0/22
194.102.148.0/23
194.102.160.0/23
194.102.174.0/23
194.102.180.0/22
194.102.224.0/22
194.105.12.0/22
194.153.225.0/24
194.153.230.0/23
194.153.244.0/23
217.156.16.0/23
217.156.48.0/22
217.156.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:62:0f:b1:03:c3:d7:cc:ee:c2:57:79:e8:4f:5a:3f:82:1b:
27:04:dc:d3:a9:56:4a:8e:a6:28:8b:f0:d4:bf:d8:d3:bd:52:
c8:bc:2c:08:75:c5:64:09:a1:17:1b:aa:5c:bf:83:32:9e:36:
c3:bc:52:31:2e:39:a8:a2:70:e0:ff:b6:84:30:2a:d8:d3:ef:
ca:ea:7b:09:7e:60:74:35:ba:88:47:6d:7d:79:e9:1c:0c:8c:
f2:f1:8c:f6:34:df:54:69:59:54:a7:15:7d:89:62:bf:53:a0:
32:f9:d9:dd:d5:df:5d:80:92:31:ec:93:74:7c:9b:b9:30:9a:
19:64:4c:81:ca:16:2f:de:c2:15:31:4a:f0:a1:92:b5:85:90:
d2:8a:d7:81:ce:74:36:10:c7:68:51:df:de:1e:1d:5f:d0:69:
c4:06:fe:da:37:34:a4:a4:85:9b:b2:ba:5c:4a:ed:6f:1a:33:
5f:86:e2:cb:b0:23:19:0b:20:59:74:2c:10:59:68:38:70:35:
5f:7e:dc:4a:8a:a1:32:fc:77:1b:50:c7:fe:c5:47:e2:87:a4:
b0:5a:e9:7d:ba:bd:62:82:04:57:cf:4b:ed:a6:63:d3:ce:3d:
8d:58:c8:1e:8a:8c:24:5d:9c:d3:33:ae:8e:6d:12:e1:9a:87:
54:32:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:57:23 2026 by rpki-client