Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4ncq3oc350CxC3404utwsD-B6jE.roa
File: 4ncq3oc350CxC3404utwsD-B6jE.roa (raw, json)
Hash identifier: 65rJSP5K3fzvYkKLKxCQ+z893XfzLpIotwJFG+mJB34=
Subject key identifier: E2:77:2A:DE:87:37:E7:40:B1:0B:7E:34:E2:EB:70:B0:3F:81:EA:31
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019E5074DF4F720B979B5856A75CA0726A01
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4ncq3oc350CxC3404utwsD-B6jE.roa
Signing time: Fri 22 May 2026 16:11:37 +0000
ROA not before: Fri 22 May 2026 16:11:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 77.246.242.0/24 maxlen: 24
91.242.68.0/24 maxlen: 24
91.242.69.0/24 maxlen: 24
92.249.25.0/24 maxlen: 24
95.141.251.0/24 maxlen: 24
147.78.21.0/24 maxlen: 24
193.221.211.0/24 maxlen: 24
195.88.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:74:df:4f:72:0b:97:9b:58:56:a7:5c:a0:72:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 22 16:11:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2772ade8737e740b10b7e34e2eb70b03f81ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:51:b2:dd:91:d6:d7:54:de:08:e7:7f:e6:
ff:ea:f7:fd:71:0f:1e:0d:aa:21:89:39:14:dc:4a:
18:1b:a1:00:6e:8e:27:52:1f:23:f1:a5:76:eb:9b:
5f:92:05:5a:bf:32:b3:ad:e5:15:77:da:a1:f6:cf:
1b:06:d2:55:a9:ea:f9:2e:16:09:b0:48:8d:12:4b:
8c:f5:35:d1:d9:18:a6:ae:b4:c1:35:6c:5f:10:d1:
f1:56:4c:07:81:39:5c:5d:71:e6:83:d3:32:81:78:
4d:80:2a:9b:69:3e:d8:2d:57:05:3a:17:bf:2e:73:
65:20:5c:d8:93:a0:58:90:b4:cd:43:2f:e9:44:c1:
c1:a6:38:e7:8f:c6:42:df:7f:3a:39:62:e1:f7:17:
b4:5a:2a:fc:1d:59:ad:79:0e:e3:29:40:be:1b:a9:
06:e2:a7:00:d9:56:8a:4f:63:cc:cf:25:ee:03:9f:
18:15:6e:af:37:fb:d7:c4:d5:c6:a0:4e:fb:b1:d3:
42:0b:1c:3e:34:e1:28:36:93:ac:cf:f2:d3:18:5e:
1d:60:de:d4:b5:d3:94:1e:08:83:4f:c6:80:0e:11:
37:9a:98:3a:4d:38:c8:55:46:36:8b:be:33:f1:5e:
23:43:01:96:62:f4:b0:e9:11:06:20:2f:45:52:b0:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:2A:DE:87:37:E7:40:B1:0B:7E:34:E2:EB:70:B0:3F:81:EA:31
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4ncq3oc350CxC3404utwsD-B6jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.242.0/24
91.242.68.0/23
92.249.25.0/24
95.141.251.0/24
147.78.21.0/24
193.221.211.0/24
195.88.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:80:72:69:a2:88:a3:14:ea:66:b8:24:22:cf:29:aa:a7:d3:
ec:71:75:4a:c6:01:62:20:74:67:2c:47:4f:75:e3:16:f5:ba:
f1:5a:e9:ca:11:3e:14:1e:19:c9:1f:57:7f:72:38:c6:72:31:
56:42:19:0e:e0:e6:2f:17:4c:8d:05:40:55:26:42:35:a6:d5:
b3:20:37:0b:3a:e2:3b:31:95:1c:61:f9:51:14:4a:93:81:67:
16:41:d6:b1:68:75:5b:b6:10:36:9e:ce:25:fd:cb:15:14:ea:
ae:98:14:a6:cb:18:08:ae:65:24:72:24:00:55:22:6e:5b:80:
3e:fb:dc:2c:5e:ad:e9:9e:14:3d:b1:7b:22:56:02:08:cc:e0:
11:71:09:b2:93:24:e1:e1:ee:ea:f7:f7:e5:0d:d2:e8:04:da:
df:a2:bc:7c:20:cd:46:c4:68:b9:c2:6f:3f:4d:cc:92:ca:cf:
09:30:65:6f:5e:4b:38:b7:3a:cc:d7:e0:98:7b:84:81:f1:df:
2a:1d:2e:a3:1d:06:ed:04:64:24:a4:24:64:f4:26:56:3d:7c:
a5:64:29:ec:a8:1e:0d:5d:5e:14:b5:58:5a:dc:1e:7a:ee:77:
5c:c0:8c:4d:77:4a:d0:cb:75:e4:b2:05:f0:e6:2f:48:d2:29:
7e:5b:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:22:43 2026 by rpki-client