Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/n4pIrv8hXrl2igzmsfX2kOK4uZ0.roa
File: n4pIrv8hXrl2igzmsfX2kOK4uZ0.roa (raw, json)
Hash identifier: q4jHPeE3Kdua9jPOkMCGpsvp16pWH8i8zO5s70YxIGQ=
Subject key identifier: 9F:8A:48:AE:FF:21:5E:B9:76:8A:0C:E6:B1:F5:F6:90:E2:B8:B9:9D
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0FCFF15980F85CAFD1E7671B69EDB65F3
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/n4pIrv8hXrl2igzmsfX2kOK4uZ0.roa
Signing time: Fri 02 Oct 2026 14:22:50 +0000
ROA not before: Fri 02 Oct 2026 14:22:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204957
IP address blocks: 5.34.176.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
46.28.67.0/24 maxlen: 24
46.28.70.0/24 maxlen: 24
62.233.57.0/24 maxlen: 24
82.117.255.0/24 maxlen: 24
82.118.20.0/22 maxlen: 22
85.90.196.0/24 maxlen: 24
85.90.199.0/24 maxlen: 24
193.238.153.0/24 maxlen: 24
193.238.155.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
195.211.96.0/23 maxlen: 23
195.211.98.0/23 maxlen: 23
217.12.199.0/24 maxlen: 24
217.12.206.0/23 maxlen: 23
2a05:9400::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a12:6fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:ff:15:98:0f:85:ca:fd:1e:76:71:b6:9e:db:65:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Oct 2 14:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f8a48aeff215eb9768a0ce6b1f5f690e2b8b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:2b:16:a9:ec:d8:42:8a:ca:8e:81:13:76:
4d:25:91:9a:c5:b5:81:32:04:6f:8e:cf:60:4d:f3:
cf:0d:a6:94:2f:f9:92:dc:e5:e0:a3:1d:9f:67:cc:
b7:33:f2:44:a0:17:26:3d:1e:62:e4:6e:b7:2d:8e:
6f:be:11:70:18:fb:ce:b2:20:43:97:66:26:0d:51:
41:f4:ad:f5:0d:c4:c6:18:64:c9:64:68:bb:50:bd:
31:5f:8f:d2:55:93:ef:32:63:05:90:e0:9b:67:c8:
28:fc:5b:ae:11:a7:63:24:98:76:12:5e:0b:b9:ad:
4d:fe:5b:4b:f2:ab:9b:d7:ce:ee:a3:24:e6:2f:ee:
8c:3d:96:e6:34:02:f0:88:72:49:ac:eb:a2:02:71:
92:e2:2c:f2:12:98:41:8c:e5:75:1a:64:71:bc:3e:
b5:e7:4c:79:1c:0c:d2:d6:f6:41:08:ed:df:e7:4e:
ef:2b:b0:59:12:e9:25:2d:2c:b3:06:cf:42:af:4e:
4f:54:06:0a:6f:5b:0b:b1:66:e2:10:3d:d6:f0:25:
c9:01:a1:47:38:07:c3:9a:88:41:fd:7c:d4:6d:84:
e5:f5:11:50:eb:0e:a1:52:5b:39:f1:f0:0d:9a:71:
6f:db:af:e6:a4:02:65:c5:46:33:53:a1:c7:17:05:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:48:AE:FF:21:5E:B9:76:8A:0C:E6:B1:F5:F6:90:E2:B8:B9:9D
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/n4pIrv8hXrl2igzmsfX2kOK4uZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.176.0/23
45.90.56.0/22
46.28.67.0/24
46.28.70.0/24
62.233.57.0/24
82.117.255.0/24
82.118.20.0/22
85.90.196.0/24
85.90.199.0/24
193.238.153.0/24
193.238.155.0/24
195.123.232.0/22
195.123.240.0/21
195.211.96.0/22
217.12.199.0/24
217.12.206.0/23
IPv6:
2a05:9400::-2a05:9404:ffff:ffff:ffff:ffff:ffff:ffff
2a05:9406::/32
2a12:6fc0::-2a12:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:2b:b1:9a:63:43:b6:5c:f6:c1:48:0b:eb:2b:ad:f0:23:52:
35:38:22:4a:c5:b0:3b:39:f9:03:9d:9c:63:06:f0:4e:2c:f6:
44:a8:25:05:04:4e:50:09:d4:98:aa:03:39:a1:76:46:4e:36:
7c:06:ed:5f:ed:af:90:c8:e6:84:12:df:88:fd:60:8c:30:9f:
cd:cc:87:66:63:df:c9:c6:6c:1d:69:24:17:bf:43:0e:47:2c:
57:f6:57:8f:de:8b:f2:0c:ae:0b:0c:4b:e3:68:12:ed:2e:08:
86:5a:c5:be:a4:60:33:d0:9c:2e:af:7d:de:ed:d2:70:f3:a3:
4a:d4:f1:5c:93:a7:9e:1e:01:fb:b4:85:f3:c6:3a:a7:6a:be:
90:33:9e:62:af:4d:df:56:7c:a5:b2:94:4b:36:3c:97:6e:8f:
6d:b9:85:03:78:4f:a9:a2:63:f7:32:16:3f:f4:bc:6d:74:64:
aa:ae:02:40:09:3d:f2:50:67:cb:f2:1d:78:31:a8:0d:e1:0c:
25:dc:6c:29:13:c2:36:2e:15:ec:f9:d9:7e:d3:eb:2f:77:97:
1f:a0:d7:b9:05:81:0f:d5:38:ed:ff:4f:8b:74:71:dc:87:78:
6d:ed:90:f7:f1:8b:18:e2:9c:0d:a3:41:ea:7a:9c:32:ec:0c:
ab:1d:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:05:58 2026 by rpki-client