Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/nkQCIfsafpP0faPXq-JmBzueDNw.roa
File: nkQCIfsafpP0faPXq-JmBzueDNw.roa (raw, json)
Hash identifier: gNpsal8wGYLek5tpMaKnRWcNEwaZ2Wj22gLMCgc/QlY=
Subject key identifier: 9E:44:02:21:FB:1A:7E:93:F4:7D:A3:D7:AB:E2:66:07:3B:9E:0C:DC
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01A143D68445DE81C861E23A7D034E29B6F1
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/nkQCIfsafpP0faPXq-JmBzueDNw.roa
Signing time: Fri 16 Oct 2026 08:31:34 +0000
ROA not before: Fri 16 Oct 2026 08:31:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5400
IP address blocks: 62.5.0.0/17 maxlen: 17
62.102.0.0/17 maxlen: 17
62.134.0.0/16 maxlen: 16
62.173.192.0/18 maxlen: 18
62.180.0.0/16 maxlen: 16
82.150.0.0/19 maxlen: 19
185.94.0.0/22 maxlen: 22
194.213.64.0/19 maxlen: 19
195.90.64.0/19 maxlen: 19
195.100.0.0/16 maxlen: 16
195.163.0.0/16 maxlen: 16
195.182.96.0/19 maxlen: 19
195.206.65.0/24 maxlen: 24
212.8.160.0/19 maxlen: 19
212.21.192.0/19 maxlen: 19
212.31.192.0/19 maxlen: 19
212.41.128.0/19 maxlen: 19
212.108.0.0/19 maxlen: 19
212.127.0.0/19 maxlen: 19
212.162.192.0/18 maxlen: 18
213.15.0.0/16 maxlen: 16
213.137.160.0/19 maxlen: 19
213.194.0.0/18 maxlen: 18
213.236.64.0/18 maxlen: 18
2001:740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:d6:84:45:de:81:c8:61:e2:3a:7d:03:4e:29:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Oct 16 08:31:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e440221fb1a7e93f47da3d7abe266073b9e0cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:c5:7b:c2:44:b3:f1:eb:b9:da:fd:b1:59:
9c:d2:b9:e3:c9:38:a4:e5:d3:fc:65:00:39:2f:04:
7d:e5:b0:8e:5f:f5:e4:5d:34:f5:69:01:83:7b:05:
23:ac:6c:0c:2e:29:23:8a:68:80:91:14:71:3c:b9:
53:dd:15:e3:e5:f6:0a:a9:fc:83:12:83:be:06:c3:
eb:01:42:43:62:23:72:09:fb:41:ca:9b:06:ff:fa:
a1:9e:f5:9d:50:e4:2d:7d:41:b3:96:f6:65:9e:67:
bf:83:bc:3c:70:25:e0:23:57:c2:a6:2a:bb:ff:bb:
e3:04:29:3c:b8:f5:93:6a:8c:ff:c2:4e:04:8d:b8:
5e:36:22:30:f5:d0:d8:31:71:0f:b3:74:6d:bc:12:
d4:47:de:49:08:c5:f7:f5:78:0c:a2:9f:d0:f6:67:
8f:0f:87:40:c0:77:c7:89:62:c3:82:09:f1:94:71:
8c:6a:21:94:28:4e:e5:d3:b0:c9:9c:db:5c:27:42:
14:87:d9:82:80:3d:8c:d7:5a:37:55:b7:5c:80:df:
6a:5e:15:29:3b:97:58:ea:74:e3:74:88:28:bf:9f:
70:18:83:57:6a:0b:87:08:49:74:de:eb:83:0f:be:
a0:34:63:1c:d8:77:7f:b4:57:35:b0:18:60:15:f6:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:02:21:FB:1A:7E:93:F4:7D:A3:D7:AB:E2:66:07:3B:9E:0C:DC
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/nkQCIfsafpP0faPXq-JmBzueDNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.5.0.0/17
62.102.0.0/17
62.134.0.0/16
62.173.192.0/18
62.180.0.0/16
82.150.0.0/19
185.94.0.0/22
194.213.64.0/19
195.90.64.0/19
195.100.0.0/16
195.163.0.0/16
195.182.96.0/19
195.206.65.0/24
212.8.160.0/19
212.21.192.0/19
212.31.192.0/19
212.41.128.0/19
212.108.0.0/19
212.127.0.0/19
212.162.192.0/18
213.15.0.0/16
213.137.160.0/19
213.194.0.0/18
213.236.64.0/18
IPv6:
2001:740::/32
Signature Algorithm: sha256WithRSAEncryption
76:c7:93:c2:b7:19:83:70:a0:4e:8c:85:d7:27:df:34:7b:97:
97:97:bd:12:5f:69:3e:06:00:61:a1:8d:8d:9b:a9:85:87:07:
a2:3b:4e:8d:09:28:dc:1e:15:e8:2d:c6:36:ac:4d:92:00:77:
d8:48:2f:06:38:60:c3:81:26:c0:f2:e4:d6:08:53:2b:b1:cd:
31:71:62:03:74:d8:e0:7b:32:16:4a:d7:9b:69:c8:df:f2:8a:
4e:6d:ca:c2:b8:00:d9:e6:61:3c:c1:93:01:b1:91:9d:8f:6b:
09:58:54:b5:9a:97:75:15:ac:3b:7b:a9:99:45:81:4a:2f:79:
2a:52:a8:ec:6d:1a:ec:7d:55:4a:cd:ba:63:8d:ff:da:7f:b6:
6b:c1:54:dd:3a:58:db:c4:ba:e8:d9:f6:8d:88:33:35:8c:ba:
5a:43:a8:46:ae:3b:f2:52:75:08:68:e5:91:b0:bc:60:c1:39:
cf:bf:cd:b3:8a:9c:74:6b:62:0d:f8:ff:b5:27:a2:4f:1d:66:
c7:9d:20:3b:60:df:2c:60:c6:68:00:bf:0d:77:12:e4:af:13:
e5:6a:10:95:df:1f:13:78:79:e6:9e:6b:8d:60:fc:f6:17:98:
a1:6d:2e:34:e5:6b:18:7e:4c:54:07:05:9e:b4:06:93:a8:ec:
b7:7c:35:13
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAaFD1oRF3oHIYeI6fQNOKbbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4
ZDA1NTcwHhcNMjYxMDE2MDgzMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTQ0MDIyMWZiMWE3ZTkzZjQ3ZGEzZDdhYmUyNjYwNzNiOWUwY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywDFe8JEs/Hrudr9sVmc0rnjyTik
5dP8ZQA5LwR95bCOX/XkXTT1aQGDewUjrGwMLikjimiAkRRxPLlT3RXj5fYKqfyD
EoO+BsPrAUJDYiNyCftBypsG//qhnvWdUOQtfUGzlvZlnme/g7w8cCXgI1fCpiq7
/7vjBCk8uPWTaoz/wk4EjbheNiIw9dDYMXEPs3RtvBLUR95JCMX39XgMop/Q9meP
D4dAwHfHiWLDggnxlHGMaiGUKE7l07DJnNtcJ0IUh9mCgD2M11o3VbdcgN9qXhUp
O5dY6nTjdIgov59wGINXaguHCEl03uuDD76gNGMc2Hd/tFc1sBhgFfZVXwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFJ5EAiH7Gn6T9H2j16viZgc7ngzcMB8GA1UdIwQY
MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt
OWRjYTVjYzgwZGQ5LzEvbmtRQ0lmc2FmcFAwZmFQWHEtSm1CenVlRE53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5
LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBkgQCAAEwgYsDBAc+
BQADBAc+ZgADAwA+hgMEBj6twAMDAD60AwQFUpYAAwQCuV4AAwQFwtVAAwQFw1pA
AwMAw2QDAwDDowMEBcO2YAMEAMPOQQMEBdQIoAMEBdQVwAMEBdQfwAMEBdQpgAME
BdRsAAMEBdR/AAMEBtSiwAMDANUPAwQF1YmgAwQG1cIAAwQG1exAMA0EAgACMAcD
BQAgAQdAMA0GCSqGSIb3DQEBCwUAA4IBAQB2x5PCtxmDcKBOjIXXJ980e5eXl70S
X2k+BgBhoY2Nm6mFhweiO06NCSjcHhXoLcY2rE2SAHfYSC8GOGDDgSbA8uTWCFMr
sc0xcWIDdNjgezIWStebacjf8opObcrCuADZ5mE8wZMBsZGdj2sJWFS1mpd1Faw7
e6mZRYFKL3kqUqjsbRrsfVVKzbpjjf/af7ZrwVTdOljbxLro2faNiDM1jLpaQ6hG
rjvyUnUIaOWRsLxgwTnPv82zipx0a2IN+P+1J6JPHWbHnSA7YN8sYMZoAL8NdxLk
rxPlahCV3x8TeHnmnmuNYPz2F5ihbS405WsYfkxUBwWetAaTqOy3fDUT
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:56 2026 by rpki-client