Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/nJafxbopJY7GrNCQlLwBkVyPTo0.roa
File: nJafxbopJY7GrNCQlLwBkVyPTo0.roa (raw, json)
Hash identifier: PAkXwXLmo360YYvO2FVu+u0axDmDc0b2Skgpdn5clt4=
Subject key identifier: 9C:96:9F:C5:BA:29:25:8E:C6:AC:D0:90:94:BC:01:91:5C:8F:4E:8D
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019FF58F8568534AC74640520C538BF72098
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/nJafxbopJY7GrNCQlLwBkVyPTo0.roa
Signing time: Wed 12 Aug 2026 10:40:51 +0000
ROA not before: Wed 12 Aug 2026 10:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43541
IP address blocks: 46.243.48.0/24 maxlen: 24
46.243.49.0/24 maxlen: 24
46.243.50.0/24 maxlen: 24
46.243.55.0/24 maxlen: 24
78.24.8.0/21 maxlen: 21
93.185.96.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
178.251.184.0/23 maxlen: 23
185.14.252.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
185.64.216.0/22 maxlen: 22
185.115.1.0/24 maxlen: 24
185.115.2.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
2a02:5420:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:8f:85:68:53:4a:c7:46:40:52:0c:53:8b:f7:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Aug 12 10:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c969fc5ba29258ec6acd09094bc01915c8f4e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:42:02:88:58:bb:be:db:d3:85:d2:9f:1b:
14:6b:e1:95:ac:da:68:37:40:f3:c7:93:c0:92:5c:
98:2f:a2:53:2c:4a:19:6e:cd:4d:3a:a7:6f:14:40:
82:cb:8c:09:2f:08:d5:a6:05:33:4b:c0:d4:b7:c2:
df:7e:ba:a6:dc:79:74:45:29:35:c6:6f:ae:85:1a:
af:ed:e8:b4:f9:ed:0f:8c:42:d7:68:7c:23:fa:98:
a4:18:9d:c8:97:4d:0c:14:cf:1b:af:3a:bc:fe:18:
e2:6c:e9:66:46:24:de:d6:d7:cd:d4:68:4e:15:e3:
e9:34:d7:d9:82:68:4d:d7:57:9d:29:0f:59:6f:39:
34:0e:2c:42:f3:27:97:bb:43:07:ae:08:05:89:0f:
ee:02:9a:07:ed:77:4e:84:20:54:08:36:23:ac:ed:
16:28:be:d9:bf:6f:a1:11:dc:25:e4:6c:d4:74:67:
1b:8d:11:b9:10:d8:5e:91:32:f3:be:bd:8d:67:9c:
63:88:53:a7:20:e8:5f:a9:d0:92:12:a9:5a:35:e9:
9b:5e:b6:00:06:43:e5:cd:06:b9:d7:b2:ae:cd:a5:
38:76:e8:de:d6:86:0a:e4:3d:32:8d:bb:6c:06:30:
4b:2b:6a:bd:d0:62:50:a2:cc:c1:30:e8:cc:9e:ff:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:9F:C5:BA:29:25:8E:C6:AC:D0:90:94:BC:01:91:5C:8F:4E:8D
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/nJafxbopJY7GrNCQlLwBkVyPTo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0-46.243.50.255
46.243.55.0/24
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::/31
2a02:5420:11::/48
Signature Algorithm: sha256WithRSAEncryption
34:3c:77:5c:1c:1f:74:78:b6:db:0c:3d:cd:b7:42:bd:e8:19:
7a:4f:e6:6c:bd:ea:1d:5e:5c:3f:99:c9:53:c3:4f:5e:c4:b2:
45:1d:05:1c:94:c3:45:d9:2f:6b:47:80:f3:42:05:c5:1f:6c:
24:fa:96:90:92:ad:a8:73:e2:e7:df:6a:f1:5a:75:85:92:96:
c9:cd:7e:5f:b7:20:eb:a2:b6:aa:01:ed:c0:ef:76:f4:fd:5f:
15:51:e1:d9:4e:ca:5c:ae:32:3d:2e:5b:47:de:6a:4b:43:f3:
b3:c1:13:b0:4c:ff:ef:f3:d9:0b:59:38:25:f2:4e:a3:13:b2:
5e:01:f5:a8:3b:e4:47:12:d9:c2:e3:6d:8e:81:61:e9:95:e5:
c7:2a:d8:32:7c:8f:fc:ee:dd:64:ce:b7:61:bf:b3:55:41:ee:
06:b7:98:c3:e5:d8:11:5e:b7:75:cf:ad:87:30:5f:76:a6:5c:
d7:7d:a0:30:bf:2a:b0:98:69:b5:79:ce:ef:16:09:94:89:21:
d6:54:30:40:f9:48:5e:73:99:2b:4c:a4:f5:98:e6:27:8c:65:
98:5c:ba:48:71:22:aa:08:13:bd:2b:e1:1b:2c:34:64:84:39:
6d:8e:f3:19:cd:88:d4:17:99:bb:c4:9b:78:5b:33:cb:a4:40:
af:0c:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 19:55:54 2026 by rpki-client