Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/N96fZ8kYmESFAmDbI_nmwQgIcE4.roa
File: N96fZ8kYmESFAmDbI_nmwQgIcE4.roa (raw, json)
Hash identifier: 9soLhc76FwgCSlyH28rOhwoEqKJVAuiKV3neVkl8aOA=
Subject key identifier: 37:DE:9F:67:C9:18:98:44:85:02:60:DB:23:F9:E6:C1:08:08:70:4E
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019EE0193457446A70BDC89D34C04DB0EA7B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/N96fZ8kYmESFAmDbI_nmwQgIcE4.roa
Signing time: Fri 19 Jun 2026 13:36:48 +0000
ROA not before: Fri 19 Jun 2026 13:36:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207023
IP address blocks: 37.97.116.0/22 maxlen: 24
46.173.246.0/23 maxlen: 23
46.173.248.0/22 maxlen: 22
46.173.254.0/23 maxlen: 23
91.229.147.0/24 maxlen: 24
91.232.18.0/24 maxlen: 24
91.234.122.0/23 maxlen: 24
91.246.180.0/22 maxlen: 22
94.232.96.0/22 maxlen: 22
176.116.238.0/23 maxlen: 24
176.118.200.0/22 maxlen: 22
176.118.204.0/22 maxlen: 22
194.33.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:19:34:57:44:6a:70:bd:c8:9d:34:c0:4d:b0:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 19 13:36:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37de9f67c9189844850260db23f9e6c10808704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:85:85:3e:29:94:19:c8:28:88:b8:8a:c8:
31:60:d4:28:7d:78:f3:43:88:3a:6e:3b:9f:2b:14:
c8:81:58:86:77:a5:9a:19:a5:c9:75:73:49:13:e7:
d6:fc:a5:e7:97:85:93:bf:a9:1a:5a:57:58:38:05:
1d:6e:21:c6:86:1e:45:16:d3:11:68:32:10:f6:24:
e3:d4:54:9c:1b:20:a2:f6:69:0e:aa:8e:34:45:31:
d7:40:46:eb:b1:70:61:41:01:f6:e5:e3:91:6f:0b:
73:a7:cd:79:e7:db:05:89:6a:96:54:57:1d:56:73:
38:39:8b:8e:5b:34:b6:a7:56:f0:49:7b:05:22:fc:
43:3f:46:0e:4b:5a:fb:e2:4a:b8:b1:f6:a3:f9:3e:
6b:65:d6:ee:8c:ce:e9:c5:27:4c:bc:d2:56:ac:cc:
4f:00:a9:18:d5:c2:6e:94:8f:19:92:ed:52:05:4a:
d4:b2:65:4d:9a:be:86:e8:0c:62:ab:f9:67:d4:5c:
e5:09:15:38:43:a6:19:52:ec:b7:6d:8f:e9:d4:e5:
65:2a:1e:90:83:52:39:86:82:28:2f:f4:20:34:14:
72:94:60:ec:c0:97:ee:7e:02:6f:b7:cf:22:54:ad:
e3:e2:35:ef:16:8b:3a:13:1a:91:24:ce:d7:05:28:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:9F:67:C9:18:98:44:85:02:60:DB:23:F9:E6:C1:08:08:70:4E
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/N96fZ8kYmESFAmDbI_nmwQgIcE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.116.0/22
46.173.246.0-46.173.251.255
46.173.254.0/23
91.229.147.0/24
91.232.18.0/24
91.234.122.0/23
91.246.180.0/22
94.232.96.0/22
176.116.238.0/23
176.118.200.0/21
194.33.64.0/23
Signature Algorithm: sha256WithRSAEncryption
89:80:e2:14:bc:73:0a:77:22:63:b7:d3:5c:95:d7:cf:72:4d:
9c:8d:7e:a4:ed:41:67:09:40:0a:21:20:b5:47:af:f5:75:54:
58:68:ea:5d:d3:ca:75:4d:88:58:d3:72:eb:22:9c:f0:52:3c:
b9:91:38:bf:32:e3:69:11:87:33:7b:90:b4:86:37:03:c5:27:
6e:e4:fb:7e:bd:d3:cb:c6:7a:46:ed:d0:71:7c:b3:fa:ae:09:
66:9e:9f:6e:e1:1b:fa:ec:00:2d:82:ec:2f:da:1f:fe:60:50:
e6:04:3e:f1:42:c0:08:6d:19:33:0f:52:50:4a:43:97:99:d8:
ac:b4:a5:e9:a3:fd:09:4e:b1:67:14:62:39:b0:d0:0e:e5:66:
b6:c2:dd:74:3b:bf:80:42:68:86:ee:96:2c:09:21:c0:4c:ef:
1b:3d:49:9a:9f:95:f1:42:6c:1b:9e:c3:16:df:28:eb:bc:f3:
de:97:74:63:5d:9e:ee:23:41:57:3e:4d:05:75:a5:4a:2c:01:
e8:14:2f:ae:23:70:d3:5e:40:9d:04:92:90:9c:90:10:c7:2c:
c4:c3:13:28:d3:be:a9:82:10:e6:72:71:05:0c:27:f2:df:77:
60:4b:6d:bb:77:3a:83:03:cf:52:01:f2:d6:0a:4d:44:30:e9:
be:43:e0:3e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZ7gGTRXRGpwvcidNMBNsOp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjYwNjE5MTMzNjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2RlOWY2N2M5MTg5ODQ0ODUwMjYwZGIyM2Y5ZTZjMTA4MDg3MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXiFhT4plBnIKIi4isgxYNQofXjz
Q4g6bjufKxTIgViGd6WaGaXJdXNJE+fW/KXnl4WTv6kaWldYOAUdbiHGhh5FFtMR
aDIQ9iTj1FScGyCi9mkOqo40RTHXQEbrsXBhQQH25eORbwtzp81559sFiWqWVFcd
VnM4OYuOWzS2p1bwSXsFIvxDP0YOS1r74kq4sfaj+T5rZdbujM7pxSdMvNJWrMxP
AKkY1cJulI8Zku1SBUrUsmVNmr6G6Axiq/ln1FzlCRU4Q6YZUuy3bY/p1OVlKh6Q
g1I5hoIoL/QgNBRylGDswJfufgJvt88iVK3j4jXvFos6ExqRJM7XBSjlUQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFDfen2fJGJhEhQJg2yP55sEICHBOMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTjk2Zlo4a1ltRVNGQW1EYklfbm13UWdJY0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCJWF0MAwD
BAEurfYDBAIurfgDBAEurf4DBABb5ZMDBABb6BIDBAFb6noDBAJb9rQDBAJe6GAD
BAGwdO4DBAOwdsgDBAHCIUAwDQYJKoZIhvcNAQELBQADggEBAImA4hS8cwp3ImO3
01yV189yTZyNfqTtQWcJQAohILVHr/V1VFho6l3TynVNiFjTcusinPBSPLmROL8y
42kRhzN7kLSGNwPFJ27k+36908vGekbt0HF8s/quCWaen27hG/rsAC2C7C/aH/5g
UOYEPvFCwAhtGTMPUlBKQ5eZ2Ky0pemj/QlOsWcUYjmw0A7lZrbC3XQ7v4BCaIbu
liwJIcBM7xs9SZqflfFCbBuewxbfKOu8896XdGNdnu4jQVc+TQV1pUosAegUL64j
cNNeQJ0EkpCckBDHLMTDEyjTvqmCEOZycQUMJ/Lfd2BLbbt3OoMDz1IB8tYKTUQw
6b5D4D4=
-----END CERTIFICATE-----
Generated at Mon Jun 29 08:06:36 2026 by rpki-client