Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nd0Eck_nz3ghXvdRrVwWwXvHCo0.roa
File: nd0Eck_nz3ghXvdRrVwWwXvHCo0.roa (raw, json)
Hash identifier: L4qP6Xw65WPorEHDq3H8TlG/8dpadg8aW20xl71y0DE=
Subject key identifier: 9D:DD:04:72:4F:E7:CF:78:21:5E:F7:51:AD:5C:16:C1:7B:C7:0A:8D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019E33E9211F2AEDC7A2D59EB9B981E1E880
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nd0Eck_nz3ghXvdRrVwWwXvHCo0.roa
Signing time: Sun 17 May 2026 03:09:36 +0000
ROA not before: Sun 17 May 2026 03:09:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:e9:21:1f:2a:ed:c7:a2:d5:9e:b9:b9:81:e1:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 17 03:09:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ddd04724fe7cf78215ef751ad5c16c17bc70a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:d1:fb:63:12:ea:cd:39:7c:3d:fe:47:f9:
d2:fc:41:13:99:df:1c:66:fb:e1:a4:57:35:c6:5e:
cc:b9:7f:28:fd:c4:47:89:28:27:21:a7:ec:1d:a6:
73:f2:39:d4:8d:63:f3:ba:6e:8c:7b:cf:98:0f:41:
14:71:26:aa:2e:ce:3e:a8:86:f1:69:4d:4e:42:62:
89:0f:f2:9b:ff:90:d3:c5:b4:2c:ef:4f:aa:96:9f:
c7:76:d0:a4:f5:a9:f5:9b:a9:5b:7f:4a:63:6c:12:
39:ae:be:9d:3a:5b:ef:e2:eb:cf:16:a3:11:70:fe:
dd:54:a2:59:2c:32:0d:ae:ef:f3:dc:17:be:5c:99:
27:5a:c7:28:0f:95:98:51:0a:31:c4:87:4f:9f:2e:
00:6d:b5:4c:74:20:17:99:bc:53:71:e2:56:e7:88:
e3:26:83:e8:56:a9:e3:93:9d:ef:a8:2f:9c:e9:74:
3b:d2:36:23:08:6e:d5:0e:4b:95:fc:89:36:de:d9:
5d:dc:21:cd:b7:e2:b6:34:7d:d8:60:6c:55:27:63:
11:39:22:7c:0e:85:0a:4a:04:f6:42:0d:6e:a6:c6:
ea:d8:c0:c5:da:63:3b:3e:49:6b:6d:bf:9f:65:3a:
82:f1:80:36:f4:da:34:8e:83:24:bf:90:cf:9e:cf:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:04:72:4F:E7:CF:78:21:5E:F7:51:AD:5C:16:C1:7B:C7:0A:8D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nd0Eck_nz3ghXvdRrVwWwXvHCo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.9.0/24
89.251.10.0/24
159.255.32.0/21
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
80:d4:bc:15:36:cb:b3:f4:22:9a:18:a7:2f:0f:b5:eb:30:4f:
f0:45:89:5c:a1:28:c6:03:1c:17:05:35:2a:00:55:44:5c:6e:
19:c6:d3:e2:f6:10:39:74:03:59:5d:6e:ee:66:b1:7c:3d:06:
fc:4a:ff:04:82:d6:dc:01:9a:93:75:86:52:3d:3b:4e:03:d7:
40:ff:6c:1d:49:05:b6:f8:e3:60:65:e9:6c:e7:2e:a8:82:8f:
db:19:ee:6c:3a:8c:94:c0:d3:e6:27:e3:f3:33:e4:92:40:0b:
f6:88:a0:95:83:7b:30:b0:00:20:41:3f:2a:41:dd:74:20:6f:
be:c4:ec:50:b3:29:88:08:dd:f2:9a:40:65:a2:a8:3a:70:d0:
1b:21:6e:2f:0c:62:51:0d:10:1b:6f:ed:bb:c6:4b:ae:fa:b2:
2e:5b:1a:26:31:4c:dd:4e:e4:81:80:d7:17:2a:a6:20:da:e6:
1e:d3:51:c6:2e:8b:fb:7c:76:92:13:e0:3b:f5:3d:5e:19:38:
c9:34:dd:9b:b5:b1:fb:9a:bf:3a:f1:27:b5:94:8b:0c:8e:3e:
78:a5:e3:0f:e6:33:95:6c:81:ec:a2:a5:f7:fe:98:ae:77:d2:
40:6f:81:2c:a1:22:77:bd:35:88:1e:c3:f5:32:c5:af:57:aa:
03:69:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:27 2026 by rpki-client