Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/N0ZcemySJ8a9sZDubAVwU_UNKLc.roa
File: N0ZcemySJ8a9sZDubAVwU_UNKLc.roa (raw, json)
Hash identifier: G5Ws1txlCa+zl1rhcw1KrtPPSDx/1xJ9lXrv4SQxVdg=
Subject key identifier: 37:46:5C:7A:6C:92:27:C6:BD:B1:90:EE:6C:05:70:53:F5:0D:28:B7
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019E63FE6583726EE460123B1CA70946EF4D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/N0ZcemySJ8a9sZDubAVwU_UNKLc.roa
Signing time: Tue 26 May 2026 11:14:36 +0000
ROA not before: Tue 26 May 2026 11:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 84.232.39.0/24 maxlen: 24
84.236.132.0/24 maxlen: 24
85.204.142.0/24 maxlen: 24
88.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:fe:65:83:72:6e:e4:60:12:3b:1c:a7:09:46:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 26 11:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37465c7a6c9227c6bdb190ee6c057053f50d28b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:56:a1:d0:52:09:a7:9d:0d:92:d9:bc:01:
dc:a6:14:c2:d1:2b:ef:0b:25:bd:90:e3:7f:cb:f0:
54:d6:60:07:b2:db:f6:9f:85:d2:fa:ea:d3:5c:b2:
5e:54:4a:b5:0f:67:26:40:95:a6:df:1a:01:0b:bb:
08:28:8e:d7:24:59:ae:b4:14:92:ff:09:3c:d7:51:
67:87:1c:a5:0c:18:47:a7:c7:cd:81:fd:a7:5a:6f:
9a:27:ed:76:dd:a3:c6:1b:84:33:f9:2b:8d:4e:6f:
19:b4:38:b3:e8:dc:39:5e:4d:08:3c:24:6c:bc:2d:
4c:6b:6b:38:5d:92:9e:d5:68:f2:15:ad:65:bd:03:
c2:e9:6d:b0:a3:00:de:90:94:c9:21:2f:35:69:d4:
aa:2c:eb:79:09:da:97:52:43:e8:a2:63:ac:f7:b2:
dd:e3:8e:56:af:2a:9c:07:bd:79:c1:4f:db:cc:78:
5b:0e:db:71:bf:38:6a:a0:e0:e6:5d:41:0d:f2:af:
4d:71:9f:1b:6f:f2:46:88:aa:72:69:fc:14:69:cd:
ed:37:26:6b:90:e2:a8:57:97:5f:f5:0c:20:d1:a0:
80:46:e9:2e:47:a3:5d:14:53:69:37:dd:ba:ce:b6:
63:e8:3d:3d:7c:08:27:0d:8e:3a:3b:48:71:bc:24:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:46:5C:7A:6C:92:27:C6:BD:B1:90:EE:6C:05:70:53:F5:0D:28:B7
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/N0ZcemySJ8a9sZDubAVwU_UNKLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.39.0/24
84.236.132.0/24
85.204.142.0/24
88.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a8:3e:fa:c3:24:6a:6a:8e:50:d5:58:bd:ce:16:f0:df:8d:
b2:60:31:a3:86:38:69:97:b3:3b:4d:15:55:ee:62:34:8c:90:
06:bc:cb:e2:a1:6b:ee:9c:2a:af:44:87:ce:07:46:91:f4:22:
d9:82:25:a2:da:62:86:c9:b2:b3:a2:4e:c5:bb:41:53:4c:92:
a8:16:d7:e3:81:f1:46:ac:aa:13:01:1c:00:ce:13:02:51:e9:
04:78:33:b9:76:81:09:c5:87:ba:0a:3e:91:a6:14:4c:a3:97:
98:82:0a:1f:0c:88:28:55:74:c3:e3:0e:48:a6:21:80:74:bd:
22:88:44:75:1d:31:94:80:a7:69:5e:08:6d:ae:59:56:94:ab:
b8:ec:d3:c8:00:2b:4e:2e:04:c6:37:03:82:c9:bc:64:d4:0f:
ac:03:f5:1c:cd:ca:41:89:e9:de:af:89:5c:13:b3:c5:e2:6e:
7f:a7:37:5f:0f:66:2c:9f:6e:18:a4:92:28:55:cb:b8:45:cb:
52:fd:55:de:e1:e1:cb:43:81:05:79:ad:50:44:e2:c3:51:d2:
65:e3:b5:81:f8:11:13:b8:e2:7a:fa:d9:4b:4f:11:e4:09:dd:
57:76:d7:6c:50:f2:0e:19:66:92:05:91:4b:99:09:fe:5e:c2:
86:46:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:40 2026 by rpki-client