Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/NPKT0Udd-dVgXn-fFEU0A2EgaL8.roa
File: NPKT0Udd-dVgXn-fFEU0A2EgaL8.roa (raw, json)
Hash identifier: 5CvFPhEkKG3TyUSLj4wqkrH2gYCPrb4fjwk2EKfqC+U=
Subject key identifier: 34:F2:93:D1:47:5D:F9:D5:60:5E:7F:9F:14:45:34:03:61:20:68:BF
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 01A03EA3F576B6A68B36968C8F15345E05BA
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/NPKT0Udd-dVgXn-fFEU0A2EgaL8.roa
Signing time: Wed 26 Aug 2026 15:15:27 +0000
ROA not before: Wed 26 Aug 2026 15:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42388
IP address blocks: 144.208.214.232/29 maxlen: 29
144.208.243.0/24 maxlen: 24
185.81.206.64/26 maxlen: 26
185.81.206.128/26 maxlen: 26
185.81.208.0/24 maxlen: 24
188.172.219.64/32 maxlen: 32
188.172.235.188/32 maxlen: 32
188.172.248.0/24 maxlen: 24
213.227.160.0/24 maxlen: 24
213.227.168.222/32 maxlen: 32
213.227.172.0/24 maxlen: 24
213.227.191.0/24 maxlen: 24
217.146.18.0/24 maxlen: 24
217.146.22.170/32 maxlen: 32
217.146.26.216/32 maxlen: 32
2a00:11c0:5:613::1000/128 maxlen: 128
2a00:11c0:d::1a/128 maxlen: 128
2a00:11c0:e:ffff:1::1000/128 maxlen: 128
2a00:11c0:48:13::/64 maxlen: 64
2a00:11c0:4d::/48 maxlen: 48
2a00:11c0:63:350::1000/128 maxlen: 128
2a00:11c0:82:359::1000/128 maxlen: 128
2a00:11c0:aa1::/48 maxlen: 48
2a00:11c0:1010::/48 maxlen: 48
2a00:11c0:11c0::/48 maxlen: 128
2a05:8900:aa1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:a3:f5:76:b6:a6:8b:36:96:8c:8f:15:34:5e:05:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Aug 26 15:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34f293d1475df9d5605e7f9f14453403612068bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:a5:70:cd:11:50:8b:c3:23:09:5e:03:69:
1d:19:1c:34:cf:1c:0e:1c:f8:96:73:df:e0:4f:96:
e3:64:7f:3c:25:51:f4:fc:1c:d5:2b:1e:88:1e:f2:
c0:c8:0f:45:88:d2:8a:4b:f5:fe:ce:46:10:c6:1a:
d1:c0:f9:67:50:97:3d:8b:a8:fb:0b:8f:9e:24:35:
25:d3:2d:bb:d5:66:4e:a7:0d:62:c2:f4:bb:a3:0b:
74:a5:57:1f:7d:59:00:30:de:fc:a1:93:0e:b2:b1:
a8:12:26:e5:df:3b:7e:c6:0a:3b:24:30:95:fb:55:
ae:d0:0d:83:9c:73:43:c9:0c:3d:0d:e1:e3:0b:f8:
dd:28:16:18:fe:fc:c8:d8:5b:25:29:52:e6:76:35:
68:7f:6b:85:da:62:f6:61:43:e2:33:68:4f:41:7d:
66:f7:9d:79:6e:46:0c:fc:b8:fa:15:2e:58:b5:b3:
bf:70:7b:ab:95:46:dc:fb:e5:be:3a:6a:74:73:f8:
cb:6b:36:7d:2b:b9:d5:dd:cb:46:85:3c:28:4c:d7:
32:5b:ef:13:bb:08:9a:b6:ee:49:b5:cd:e6:91:c0:
18:1b:ef:87:5b:6c:94:43:fe:ba:95:6e:97:9a:72:
04:c1:d7:c1:96:70:4c:59:5a:ea:c5:d0:8d:27:9f:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:93:D1:47:5D:F9:D5:60:5E:7F:9F:14:45:34:03:61:20:68:BF
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/NPKT0Udd-dVgXn-fFEU0A2EgaL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.214.232/29
144.208.243.0/24
185.81.206.64-185.81.206.191
185.81.208.0/24
188.172.219.64/32
188.172.235.188/32
188.172.248.0/24
213.227.160.0/24
213.227.168.222/32
213.227.172.0/24
213.227.191.0/24
217.146.18.0/24
217.146.22.170/32
217.146.26.216/32
IPv6:
2a00:11c0:5:613:0:0:0:1000/128
2a00:11c0:d:0:0:0:0:1a/128
2a00:11c0:e:ffff:1:0:0:1000/128
2a00:11c0:48:13::/64
2a00:11c0:4d::/48
2a00:11c0:63:350:0:0:0:1000/128
2a00:11c0:82:359:0:0:0:1000/128
2a00:11c0:aa1::/48
2a00:11c0:1010::/48
2a00:11c0:11c0::/48
2a05:8900:aa1::/48
Signature Algorithm: sha256WithRSAEncryption
0a:82:8a:6f:50:b9:01:ac:53:34:de:02:75:49:c5:62:93:30:
1c:74:f8:46:09:11:04:c5:c3:e5:eb:2d:54:b1:70:c8:a3:73:
1a:cd:90:bc:5c:91:59:94:f6:68:1b:d4:a8:cb:91:e2:58:32:
4a:3d:35:9b:10:e2:b8:7d:5f:7d:62:07:8b:6f:14:cb:89:32:
68:bb:35:dc:34:b0:81:65:b1:9d:a1:0e:e3:78:a2:5d:34:74:
c6:f3:61:b3:ac:19:a9:b3:4a:f7:f2:61:bb:2e:50:0c:92:f0:
e2:fa:14:6f:35:2c:d6:10:14:1a:2a:95:17:43:64:fc:f1:8d:
58:4d:29:41:5a:ea:3f:c2:f9:15:23:c7:0a:57:53:92:58:f8:
d8:19:4c:1a:41:db:a0:6a:c5:09:7c:71:e8:a5:cf:de:62:e3:
1b:f6:90:d3:6e:75:f9:46:0d:43:2c:d1:66:27:2e:ca:2c:19:
1b:e0:9e:79:77:5a:dc:c8:08:e2:8c:50:ca:9e:ad:af:a5:0b:
aa:39:64:46:4e:50:32:35:fd:8c:8d:56:7a:b9:3d:d7:4f:f2:
8d:d4:66:f2:9a:57:c9:0a:00:15:6f:51:5e:c2:71:50:58:b5:
28:00:90:6f:fa:f3:b5:b8:4d:89:3b:e6:0a:f3:8e:01:20:24:
73:a3:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:11:37 2026 by rpki-client