Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NgOmwWid782b89IxM8Rnl54OqS8.roa
File: NgOmwWid782b89IxM8Rnl54OqS8.roa (raw, json)
Hash identifier: IBd+FJgwgFO8SsX70IyagVyn+5vt+l5F1HA3+aLcNfo=
Subject key identifier: 36:03:A6:C1:68:9D:EF:CD:9B:F3:D2:31:33:C4:67:97:9E:0E:A9:2F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A0F1CBCB83F59AD6E70D5F222CDD123D8E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NgOmwWid782b89IxM8Rnl54OqS8.roa
Signing time: Wed 30 Sep 2026 10:10:59 +0000
ROA not before: Wed 30 Sep 2026 10:10:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.145.176.0/22 maxlen: 22
89.40.161.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
146.19.228.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
193.84.26.0/24 maxlen: 24
193.109.82.0/24 maxlen: 24
194.50.200.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.88.147.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.211.48.0/24 maxlen: 24
195.216.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:cb:cb:83:f5:9a:d6:e7:0d:5f:22:2c:dd:12:3d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 30 10:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3603a6c1689defcd9bf3d23133c467979e0ea92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:23:41:d7:65:62:00:5b:5c:ff:08:0b:8c:
d1:91:0d:3a:e5:8b:34:6c:4f:e3:e1:34:b0:33:bc:
02:ac:4e:f9:c7:be:c6:ef:1a:5b:04:0e:42:a7:40:
51:aa:12:16:a9:b4:a5:fe:a7:56:ee:e9:9c:fb:05:
e2:8b:e8:b2:c2:4c:fc:74:e0:5d:01:6d:bf:eb:89:
be:e0:2c:0d:72:32:e1:fe:24:29:7c:f0:62:d9:61:
9f:e5:8e:16:f7:fa:24:19:9c:bd:f8:10:90:f0:81:
9d:f3:85:30:30:03:30:58:4e:12:46:37:ad:9b:53:
c7:60:98:5b:19:de:b1:25:91:29:9b:e9:ce:37:5d:
03:90:eb:1b:2a:57:8d:e4:1a:d8:87:66:e7:33:2d:
70:ff:23:92:a8:9a:ae:f3:8f:cf:47:3e:c3:e6:9d:
48:d6:77:39:1e:ab:59:c6:31:d4:34:2a:d3:5b:44:
53:72:16:18:86:cf:cb:91:6f:32:6a:2d:20:42:69:
3b:28:96:90:51:d4:64:b6:49:46:51:e9:38:aa:67:
3b:5e:94:e7:7c:6b:90:79:bf:79:6a:da:fc:7e:55:
da:d5:9b:f5:0e:78:b5:03:ec:18:99:b9:db:34:08:
b7:65:a5:5d:34:00:2e:3e:e6:c5:29:f0:cc:77:f8:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:A6:C1:68:9D:EF:CD:9B:F3:D2:31:33:C4:67:97:9E:0E:A9:2F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NgOmwWid782b89IxM8Rnl54OqS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.67.117.0/24
45.145.176.0/22
89.40.161.0/24
91.242.70.0/24
91.242.74.0/24
91.242.105.0/24
146.19.228.0/24
185.180.145.0/24
185.218.184.0/24
193.84.26.0/24
193.109.82.0/24
194.50.200.0/24
194.50.206.0/23
195.88.147.0/24
195.138.103.0-195.138.107.255
195.138.111.0/24
195.138.120.0/24
195.211.48.0/24
195.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:76:d0:ee:22:b9:13:68:71:5b:67:f9:34:c5:86:f7:22:8d:
29:8b:9f:0e:2f:56:07:93:0d:f5:91:ed:81:85:33:a2:a6:2e:
ad:e8:dc:7e:d5:29:61:30:17:39:84:78:b9:93:0b:e0:8a:8f:
23:dd:6c:b4:20:b8:a3:60:5c:29:0a:1c:b9:a6:02:7c:dc:81:
12:79:80:b8:0a:54:e9:79:38:97:2b:66:ac:7e:77:da:82:53:
9e:a2:17:33:ae:e5:7b:8d:ef:48:af:34:26:8a:8c:9b:1b:44:
ee:fb:2d:51:63:f7:84:5e:42:d9:4b:bf:93:14:db:61:4e:ab:
61:60:77:d9:f9:8c:d3:28:9b:01:93:2a:ab:8c:b7:fe:54:64:
6a:01:9d:f9:1a:a4:04:3c:50:c9:f9:a5:91:00:4d:2c:c3:ff:
0f:4d:bb:93:33:23:e9:70:4f:bc:43:e7:2d:9c:a9:c7:a5:69:
1d:0c:b7:3b:e2:63:2e:6c:7c:d1:69:37:be:63:6f:bf:73:18:
8c:55:6c:30:9c:06:01:26:d4:4e:2b:e6:1a:28:29:0e:69:23:
93:19:91:81:7b:2e:0d:b2:4a:df:5d:2f:0b:ba:5f:5b:d8:9e:
1b:3a:4c:39:d6:c1:52:2e:d7:4c:66:97:bd:68:3d:c8:3b:c2:
0e:be:bf:8c
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAaDxy8uD9ZrW5w1fIizdEj2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwOTMwMTAxMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjAzYTZjMTY4OWRlZmNkOWJmM2QyMzEzM2M0Njc5NzllMGVhOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7kjQddlYgBbXP8IC4zRkQ065Ys0
bE/j4TSwM7wCrE75x77G7xpbBA5Cp0BRqhIWqbSl/qdW7umc+wXii+iywkz8dOBd
AW2/64m+4CwNcjLh/iQpfPBi2WGf5Y4W9/okGZy9+BCQ8IGd84UwMAMwWE4SRjet
m1PHYJhbGd6xJZEpm+nON10DkOsbKleN5BrYh2bnMy1w/yOSqJqu84/PRz7D5p1I
1nc5HqtZxjHUNCrTW0RTchYYhs/LkW8yai0gQmk7KJaQUdRktklGUek4qmc7XpTn
fGuQeb95atr8flXa1Zv1Dni1A+wYmbnbNAi3ZaVdNAAuPubFKfDMd/g/QQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFDYDpsFone/Nm/PSMTPEZ5eeDqkvMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvTmdPbXdXaWQ3ODJiODlJeE04Um5sNTRPcVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAIF
thwDBAAtQ3UDBAItkbADBABZKKEDBABb8kYDBABb8koDBABb8mkDBACSE+QDBAC5
tJEDBAC52rgDBADBVBoDBADBbVIDBADCMsgDBAHCMs4DBADDWJMwDAMEAMOKZwME
AsOKaAMEAMOKbwMEAMOKeAMEAMPTMAMEAMPY+DANBgkqhkiG9w0BAQsFAAOCAQEA
P3bQ7iK5E2hxW2f5NMWG9yKNKYufDi9WB5MN9ZHtgYUzoqYurejcftUpYTAXOYR4
uZML4IqPI91stCC4o2BcKQocuaYCfNyBEnmAuApU6Xk4lytmrH532oJTnqIXM67l
e43vSK80JoqMmxtE7vstUWP3hF5C2Uu/kxTbYU6rYWB32fmM0yibAZMqq4y3/lRk
agGd+RqkBDxQyfmlkQBNLMP/D027kzMj6XBPvEPnLZypx6VpHQy3O+JjLmx80Wk3
vmNvv3MYjFVsMJwGASbUTivmGigpDmkjkxmRgXsuDbJK310vC7pfW9ieGzpMOdbB
Ui7XTGaXvWg9yDvCDr6/jA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:44 2026 by rpki-client