Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/njecB7ROSC8KNq9-w50eN012Ng0.roa
File: njecB7ROSC8KNq9-w50eN012Ng0.roa (raw, json)
Hash identifier: 7y52KJ3aQ1aGwJ/iq1XD/RbQSLlFpqV55Tx9bDnCLCw=
Subject key identifier: 9E:37:9C:07:B4:4E:48:2F:0A:36:AF:7E:C3:9D:1E:37:4D:76:36:0D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A14E5338DDB99CDB01FCDF512F7BCB4224
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/njecB7ROSC8KNq9-w50eN012Ng0.roa
Signing time: Sun 18 Oct 2026 09:23:59 +0000
ROA not before: Sun 18 Oct 2026 09:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 31.40.192.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.152.138.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.20.0/24 maxlen: 24
77.83.21.0/24 maxlen: 24
77.83.22.0/24 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
77.83.50.0/23 maxlen: 24
80.243.230.0/23 maxlen: 24
84.252.64.0/24 maxlen: 24
84.252.65.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
86.62.55.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.94.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.113.40.0/23 maxlen: 24
176.113.42.0/24 maxlen: 24
176.113.43.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.190.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
193.9.56.0/24 maxlen: 24
193.9.57.0/24 maxlen: 24
193.9.58.0/24 maxlen: 24
193.9.59.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.47.36.0/22 maxlen: 24
193.160.69.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
193.228.48.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
193.228.50.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.7.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:53:38:dd:b9:9c:db:01:fc:df:51:2f:7b:cb:42:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 18 09:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e379c07b44e482f0a36af7ec39d1e374d76360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:68:03:07:31:cd:0b:2f:73:fa:22:07:8e:
4c:09:c3:4c:6a:ad:be:1b:ca:ce:05:8d:2e:fe:ca:
31:be:5d:17:ee:9b:39:d3:1e:f2:85:5e:4a:46:5c:
18:a2:66:de:d2:b3:21:e3:fd:14:dc:74:3b:bf:58:
1b:ac:0b:62:5a:9f:24:88:87:dd:f3:cc:c8:b1:35:
a3:45:e9:ca:29:b3:f6:ac:eb:13:73:6c:fe:f0:c3:
d9:84:02:8f:0c:3c:1f:79:ad:2e:de:de:e0:6f:46:
2a:b1:9a:d7:24:35:a9:7e:68:0a:9c:0b:00:b4:91:
33:d3:63:3c:60:8e:a6:6f:7b:e8:c5:82:28:ad:d5:
7c:f1:e3:9b:8b:9b:03:76:20:f0:5b:f1:58:93:87:
a5:54:a3:e6:aa:ba:c9:bc:48:56:d8:dd:1a:f1:3f:
65:39:35:9c:98:31:5d:c2:29:5c:f5:7f:d8:2b:75:
0f:3c:d2:4d:7a:3b:ed:de:da:fc:be:7b:e8:91:50:
23:41:dd:d7:d8:c8:49:fc:33:d2:9c:a8:3b:44:c7:
15:8e:8e:8e:3b:19:ba:48:ad:96:14:ba:7d:89:44:
4e:88:1b:d6:5d:bb:55:fc:c6:39:b0:86:d7:9e:e5:
fb:59:f0:d3:06:1c:a2:f5:22:4a:3f:d8:c1:84:42:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:9C:07:B4:4E:48:2F:0A:36:AF:7E:C3:9D:1E:37:4D:76:36:0D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/njecB7ROSC8KNq9-w50eN012Ng0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.192.0/24
31.40.194.0/24
45.130.184.0/23
45.140.7.0/24
45.152.138.0/24
45.154.120.0/22
77.83.20.0-77.83.22.255
77.83.48.0/22
80.243.230.0/23
84.252.64.0/23
86.62.53.0-86.62.55.255
88.218.81.0-88.218.83.255
91.132.126.0/23
91.245.238.0/23
95.214.93.0-95.214.95.255
95.214.244.0/22
176.113.40.0/22
176.118.188.0/24
176.118.190.0/23
185.155.100.0/24
185.177.77.0-185.177.79.255
193.9.56.0/22
193.31.124.0/23
193.47.36.0/22
193.160.69.0/24
193.160.74.0/23
193.228.48.0/22
194.53.188.0/22
194.104.4.0/24
194.104.7.0/24
194.124.41.0/24
212.69.133.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
99:52:44:53:dc:82:06:db:24:cd:78:21:b8:80:11:7a:dd:ca:
18:fb:45:7b:55:7c:46:c8:e4:92:26:bc:f3:77:43:25:0f:34:
e4:48:85:81:cf:63:0d:84:59:d1:ed:47:d6:67:b2:71:0e:82:
ca:26:76:e3:c3:52:85:5f:61:63:bc:1f:0b:7a:7c:b3:0f:b4:
dd:56:1d:c3:9e:3d:14:17:69:44:4d:b0:de:25:7b:0c:32:03:
26:39:ff:21:32:06:88:a8:27:e1:35:e0:45:f6:a2:7a:e3:87:
f6:a1:45:ef:23:12:f8:5a:01:e7:2b:64:53:d2:7b:a0:e0:46:
71:25:e4:53:64:42:bd:ef:51:c3:1b:5b:48:24:8c:18:3d:7d:
8a:e3:14:00:e1:8d:53:0d:e6:da:77:51:73:5c:3b:3b:2c:0c:
83:37:c5:fe:87:86:f3:5a:01:8e:88:7f:33:a1:74:26:8a:89:
71:18:3b:10:fd:fa:8d:e9:45:c7:f1:f4:bd:7b:82:82:e6:82:
60:19:0a:c8:0b:7f:00:98:24:72:51:1d:17:6e:f8:2c:de:75:
c0:2c:25:5f:06:53:d1:3f:dc:3e:d3:39:41:59:e2:8f:ac:7e:
5e:47:37:4a:1e:ee:47:05:0b:d3:d7:5a:75:0a:4b:8b:bb:80:
76:02:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:09:40 2026 by rpki-client