Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/n3eMtrVcpbQuO2E7-SdNkWag7pM.roa
File: n3eMtrVcpbQuO2E7-SdNkWag7pM.roa (raw, json)
Hash identifier: 50iGPMDlfRz0JRn/xGLGFW34Dm+Kssjdi382UEKwEOM=
Subject key identifier: 9F:77:8C:B6:B5:5C:A5:B4:2E:3B:61:3B:F9:27:4D:91:66:A0:EE:93
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 019E21EC05EDAD88CA4B72BBD6CB36DF6378
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/n3eMtrVcpbQuO2E7-SdNkWag7pM.roa
Signing time: Wed 13 May 2026 15:19:36 +0000
ROA not before: Wed 13 May 2026 15:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213671
IP address blocks: 95.142.148.0/24 maxlen: 24
192.48.111.0/24 maxlen: 24
2a05:b100:1000::/36 maxlen: 36
2a05:b100:2000::/36 maxlen: 36
2a05:b100:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:ec:05:ed:ad:88:ca:4b:72:bb:d6:cb:36:df:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: May 13 15:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f778cb6b55ca5b42e3b613bf9274d9166a0ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:38:2e:86:76:97:af:a7:30:e3:52:f7:c8:97:
2d:72:ab:3c:3e:ac:a4:a2:60:54:2e:aa:43:1c:d2:
2e:2e:16:f2:88:13:fd:d9:df:9d:a1:7f:e3:aa:bd:
6f:a3:77:17:d4:10:7e:e2:9f:62:d8:d4:d3:c6:5d:
e8:59:ba:a6:34:50:60:da:ae:2a:87:87:2f:d8:e0:
df:30:c4:9e:9c:33:9e:69:2a:51:f4:f5:ed:25:54:
7c:35:70:c2:ba:f8:5e:e3:ed:7a:fe:9d:f8:df:d9:
7d:68:20:fa:65:b2:11:11:71:6e:b8:bf:b1:6a:a0:
d1:04:33:66:d9:b8:6e:60:ca:80:0d:a3:09:1e:3d:
1b:db:f2:58:f2:b0:96:4b:8f:12:45:dc:1c:93:6f:
a4:78:34:94:86:3a:e9:ff:6f:39:7e:22:45:38:9b:
0c:5d:17:34:b9:35:e1:92:3a:54:05:0a:4d:aa:a8:
c9:01:44:bd:5a:2b:09:16:00:a6:c7:b0:78:3c:3c:
55:9d:36:59:4b:6c:d7:00:04:43:c1:63:63:d2:4c:
e4:b7:62:8d:29:97:76:84:df:0d:fd:85:d0:97:dd:
9e:05:a3:ca:29:6a:23:c1:73:e6:72:dc:80:bd:6d:
4e:94:bb:30:cb:f5:55:b6:7e:e7:aa:57:6a:88:2d:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:8C:B6:B5:5C:A5:B4:2E:3B:61:3B:F9:27:4D:91:66:A0:EE:93
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/n3eMtrVcpbQuO2E7-SdNkWag7pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.148.0/24
192.48.111.0/24
IPv6:
2a05:b100:1000::-2a05:b100:3fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:53:7b:a8:9d:7b:ef:f2:cf:82:17:bd:d3:e1:87:65:69:e4:
10:22:4c:1a:5f:a3:c3:17:21:da:c0:dd:d8:2c:b5:7e:c6:25:
17:fb:c3:da:cd:d5:af:b8:49:70:9f:b6:1e:4b:6b:6d:f9:b3:
87:41:79:99:ba:6f:55:67:17:1b:e7:81:e6:39:59:2d:0b:f3:
0f:c8:ef:57:f7:09:fd:0b:e3:e9:b1:a6:7d:01:ff:0c:db:8a:
74:92:ef:56:07:b1:51:3f:a9:60:9e:56:fd:8d:01:2d:26:5d:
c7:e8:60:c7:21:99:18:e3:03:7e:0d:44:40:92:ca:06:a0:53:
f0:ff:50:63:a5:19:14:3d:f7:c2:74:ea:fb:8b:f7:3b:00:a2:
b3:7b:77:a6:2c:0c:3f:4b:41:8a:22:46:b3:49:c7:56:6c:fb:
d1:0f:1d:b5:1e:e0:58:9d:ea:e2:cd:8d:8a:0f:db:8e:a3:e2:
e5:e5:27:01:ce:c2:3f:77:37:55:6a:04:d2:40:01:f1:be:a5:
17:43:03:0d:e1:2e:c9:b6:57:2b:8e:56:a0:7f:87:0c:6e:3e:
04:81:cc:10:d9:da:52:db:3f:36:9d:35:4c:31:d2:b7:9f:3d:
8a:35:dc:3d:96:0d:57:f4:33:df:44:6e:99:67:68:ec:a6:56:
e7:0d:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:15:16 2026 by rpki-client