Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/NBKbd3vkBnmlzbsINmd4OjNSdzM.roa
File: NBKbd3vkBnmlzbsINmd4OjNSdzM.roa (raw, json)
Hash identifier: QKEEOY1x3cIPXfJpZFjalUuhplHy3cDYf2kIW6a170E=
Subject key identifier: 34:12:9B:77:7B:E4:06:79:A5:CD:BB:08:36:67:78:3A:33:52:77:33
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A0E2F35B0993B7FC74A93662C3C7939FBA
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/NBKbd3vkBnmlzbsINmd4OjNSdzM.roa
Signing time: Sun 27 Sep 2026 12:59:54 +0000
ROA not before: Sun 27 Sep 2026 12:59:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 378
IP address blocks: 128.139.0.0/16 maxlen: 24
128.139.0.0/17 maxlen: 17
128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
128.139.34.0/23 maxlen: 23
128.139.128.0/17 maxlen: 17
128.139.171.0/24 maxlen: 24
128.139.199.0/24 maxlen: 24
128.139.200.0/24 maxlen: 24
132.78.0.0/16 maxlen: 16
185.115.212.0/22 maxlen: 22
192.114.0.0/21 maxlen: 21
192.114.0.0/24 maxlen: 24
192.114.1.0/24 maxlen: 24
192.114.2.0/24 maxlen: 24
192.114.16.0/21 maxlen: 21
192.114.48.0/21 maxlen: 21
192.114.49.0/24 maxlen: 24
192.114.50.0/24 maxlen: 24
192.114.56.0/22 maxlen: 22
192.114.60.0/23 maxlen: 23
192.114.92.0/22 maxlen: 22
192.114.96.0/20 maxlen: 20
192.114.100.0/24 maxlen: 24
192.114.101.0/24 maxlen: 24
192.114.102.0/24 maxlen: 24
192.114.124.0/22 maxlen: 22
192.114.128.0/20 maxlen: 20
192.114.192.0/18 maxlen: 18
192.115.32.0/20 maxlen: 20
192.115.40.0/24 maxlen: 24
192.115.46.0/24 maxlen: 24
192.115.64.0/22 maxlen: 22
192.115.164.0/22 maxlen: 22
192.115.168.0/21 maxlen: 21
192.115.192.0/21 maxlen: 21
192.117.80.0/20 maxlen: 20
2001:bf8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f3:5b:09:93:b7:fc:74:a9:36:62:c3:c7:93:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Sep 27 12:59:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34129b777be40679a5cdbb083667783a33527733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:2b:f9:3e:15:7b:f5:f0:e7:7b:3a:54:4d:
3b:d5:b0:f2:03:1e:fe:31:aa:b3:b3:27:89:1a:41:
02:02:9b:4d:2d:a0:7f:a1:84:ef:d4:6f:0a:db:0b:
8f:98:eb:a8:83:8c:14:1d:cb:9b:8d:35:3c:15:7e:
71:0a:ca:7b:95:98:81:70:62:8d:65:33:a1:44:8d:
25:b2:e4:ad:57:4c:43:82:9a:bf:a0:73:db:85:53:
f5:17:e5:0d:52:45:84:53:61:36:88:72:8c:02:24:
1a:0d:a2:4b:6f:5d:33:a4:79:73:2c:20:8c:e5:19:
47:d1:8e:98:94:c4:6d:7f:df:20:64:7d:07:4b:08:
52:41:4b:ab:2a:d5:11:8c:90:a8:cb:35:81:ae:25:
a3:e4:5f:e1:47:df:50:34:52:b2:0d:72:b9:97:ad:
4d:63:b2:3b:4f:51:2b:9b:03:79:f4:bd:db:42:98:
c2:ff:88:ca:a9:9f:3a:c1:7d:a7:c4:e8:be:83:1a:
54:1c:0a:a6:63:12:72:8a:37:20:3b:97:30:7b:23:
83:c5:d0:d7:55:8d:c2:e0:cf:3e:bf:1d:a0:8f:41:
52:09:e6:0c:bf:c7:64:f2:dd:66:ff:cf:a7:35:17:
af:30:55:1a:9c:54:0d:2f:a4:b6:ed:96:05:c4:74:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:9B:77:7B:E4:06:79:A5:CD:BB:08:36:67:78:3A:33:52:77:33
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/NBKbd3vkBnmlzbsINmd4OjNSdzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
132.78.0.0/16
185.115.212.0/22
192.114.0.0/21
192.114.16.0/21
192.114.48.0-192.114.61.255
192.114.92.0-192.114.111.255
192.114.124.0-192.114.143.255
192.114.192.0/18
192.115.32.0/20
192.115.64.0/22
192.115.164.0-192.115.175.255
192.115.192.0/21
192.117.80.0/20
IPv6:
2001:bf8::/32
Signature Algorithm: sha256WithRSAEncryption
22:74:5c:69:9e:7b:7d:20:83:fa:5f:4d:a0:08:86:fe:c3:57:
51:af:2a:bc:75:50:84:35:cd:4b:65:e0:00:a3:f9:a6:51:2b:
3d:bb:e4:c8:d1:34:04:1e:6f:aa:41:69:ea:1b:25:65:b6:31:
5f:32:ee:9f:cb:ab:bc:e6:a8:32:4c:31:0d:50:7a:2e:0c:c9:
ca:06:62:1f:28:33:b3:10:4a:ea:77:96:ae:7c:4a:1f:fb:c5:
f9:a1:5e:65:7e:1a:c7:8b:c5:f6:6a:71:66:0e:0a:7d:d3:7c:
46:4f:10:29:57:8c:f5:6d:ee:34:08:f2:0a:81:44:fc:89:14:
56:02:43:56:38:ec:40:a2:1c:79:c7:0f:b5:89:b6:e7:88:3b:
0b:b6:36:a7:30:34:91:61:fd:78:41:fb:57:47:db:17:51:15:
c7:ae:e7:31:fa:4d:b5:88:cb:98:82:84:41:2a:98:19:0e:03:
a4:25:89:00:43:30:65:6e:ba:d3:8f:b1:ae:d3:d0:b0:9c:e8:
8e:17:07:72:7b:1d:1e:49:ad:86:05:51:ec:92:cf:4d:4f:6b:
af:47:fd:ac:92:6d:68:3c:b6:2a:ff:67:43:c8:63:68:d2:31:
09:a5:16:c7:81:3f:51:6d:b7:bb:56:6a:99:d3:c3:4c:5d:e4:
70:a1:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:17 2026 by rpki-client