Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Nr4fVnsGQyUUI5zfnqT_T_L_qr4.roa
File: Nr4fVnsGQyUUI5zfnqT_T_L_qr4.roa (raw, json)
Hash identifier: W1QA4vox9nL4Gg2Mo0dH/iYmvrRy0Bjr1OCARmmdHUA=
Subject key identifier: 36:BE:1F:56:7B:06:43:25:14:23:9C:DF:9E:A4:FF:4F:F2:FF:AA:BE
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FC7B9471FC8DB46AFC9ACA2170D37E2A0
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Nr4fVnsGQyUUI5zfnqT_T_L_qr4.roa
Signing time: Mon 03 Aug 2026 13:03:56 +0000
ROA not before: Mon 03 Aug 2026 13:03:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 91.192.93.0/24 maxlen: 24
138.249.17.0/24 maxlen: 24
138.249.22.0/24 maxlen: 24
170.168.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:b9:47:1f:c8:db:46:af:c9:ac:a2:17:0d:37:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 3 13:03:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36be1f567b06432514239cdf9ea4ff4ff2ffaabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:5a:46:f3:9b:c2:65:5c:57:8b:2b:34:26:
1e:be:f4:dd:12:75:12:36:64:e3:16:94:c0:be:ee:
48:f1:05:f4:58:52:d9:02:41:a7:be:ea:ec:7c:3c:
22:9d:f6:73:fb:39:cf:5c:b5:90:f9:84:08:52:97:
d3:6c:29:0b:57:3a:72:d9:dd:dc:5e:ce:3f:9a:96:
65:7b:08:f4:08:71:89:20:9f:ac:13:a3:0e:89:32:
e4:01:31:c8:c0:db:31:bb:e0:7c:66:3c:f2:0f:49:
fe:b7:16:01:de:51:09:2b:f7:9e:af:5b:59:24:53:
64:1f:dc:2f:ef:be:2b:f8:28:d8:ec:ef:d0:3d:59:
04:11:f9:ab:19:f0:a3:e7:4e:b5:f5:07:68:2d:0d:
ad:d0:e3:68:69:ad:9b:21:75:c5:4b:e6:ca:de:33:
45:62:9c:90:5a:3b:b4:ef:eb:1f:a8:6f:3a:71:b6:
02:2a:18:39:0a:45:d0:4f:ae:4e:c1:c6:7d:3c:c1:
f7:b6:c4:17:5f:92:bd:10:b7:9f:ca:b5:0e:4a:55:
10:cf:5a:9b:6a:e8:8f:b3:9e:ca:86:15:f6:86:a6:
a1:6d:0b:e7:9a:5d:67:d3:d9:6e:d7:af:60:ac:2e:
3d:68:ab:c9:51:d4:32:8c:bd:e6:c3:92:2e:72:7f:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:1F:56:7B:06:43:25:14:23:9C:DF:9E:A4:FF:4F:F2:FF:AA:BE
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Nr4fVnsGQyUUI5zfnqT_T_L_qr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.93.0/24
138.249.17.0/24
138.249.22.0/24
170.168.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0b:03:0a:41:fe:de:37:79:c4:08:4a:e2:3d:df:d7:43:82:
99:15:00:b5:ce:c2:19:c1:d0:24:24:2c:fc:1a:1b:75:65:19:
48:7e:2c:66:18:9e:0c:90:e8:e0:28:e9:f1:fa:5d:bf:8d:d7:
67:2f:fa:6c:94:37:a4:aa:80:80:8a:8e:a2:39:6a:87:53:6b:
cc:42:44:6e:f0:52:ff:db:5d:3d:72:ab:70:47:eb:68:22:eb:
f5:1f:71:fa:13:8d:a3:7b:57:e8:8d:8b:2e:ed:b0:be:c4:25:
dd:b6:e4:a9:24:b1:4b:f0:41:89:a2:ff:f9:54:24:3c:24:f9:
0e:45:10:74:c7:84:28:99:6d:d2:41:c1:bf:bf:59:88:fc:d9:
d5:ad:d3:8d:56:a9:02:de:77:4a:ea:1f:a9:c7:7e:f6:20:78:
7e:a6:8f:9e:cd:d4:15:fa:b7:f5:37:12:aa:fd:b0:26:68:12:
3d:25:f1:ae:86:f1:31:40:41:36:84:3e:ab:bf:c0:8c:36:1c:
23:c9:1c:1f:2c:a1:79:ee:ec:e8:42:65:75:13:d6:8a:7a:82:
b6:e0:bc:d3:65:b5:bd:e8:e2:94:b5:eb:c8:9b:0c:33:77:f7:
47:33:2e:bb:11:f6:50:ca:83:0b:79:d3:57:d0:2b:91:37:a9:
e3:5b:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 00:56:05 2026 by rpki-client