Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ntIXGuQ5_pn4QlP8UF6ac8BwIZ8.roa
File: ntIXGuQ5_pn4QlP8UF6ac8BwIZ8.roa (raw, json)
Hash identifier: Pn451tDE/Eiwvt5eMRNsWEHzaORUeb6ZcSkji4OdPkE=
Subject key identifier: 9E:D2:17:1A:E4:39:FE:99:F8:42:53:FC:50:5E:9A:73:C0:70:21:9F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0245E83850BF7D5959D789AD15603CC3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ntIXGuQ5_pn4QlP8UF6ac8BwIZ8.roa
Signing time: Fri 21 Aug 2026 12:49:28 +0000
ROA not before: Fri 21 Aug 2026 12:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2497
IP address blocks: 83.148.154.0/23 maxlen: 23
83.148.156.0/22 maxlen: 22
83.148.168.0/22 maxlen: 22
83.148.180.0/22 maxlen: 22
83.148.184.0/22 maxlen: 22
85.189.204.0/22 maxlen: 22
85.189.216.0/22 maxlen: 22
86.53.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:5e:83:85:0b:f7:d5:95:9d:78:9a:d1:56:03:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 21 12:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ed2171ae439fe99f84253fc505e9a73c070219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:6e:3c:8e:61:88:39:c3:64:89:f4:6a:5d:
f5:f6:fa:10:eb:5f:ef:61:b7:51:ab:23:3f:b6:a8:
cc:e4:44:a5:b7:cf:4c:20:47:1c:c1:8e:57:93:17:
c1:0e:12:42:94:2c:50:2b:1d:bf:49:a7:2d:bb:66:
f0:1f:56:49:01:41:e8:76:b6:32:f5:c9:14:de:4e:
c2:7f:41:57:eb:25:e8:94:f4:f3:2b:c9:00:dd:ce:
a4:3b:76:97:ba:b5:98:8c:f4:e4:91:56:e9:89:f0:
01:30:76:e5:31:a3:5b:f7:30:9b:3f:19:e8:89:ea:
b6:18:fc:4d:a9:13:58:cb:b5:e8:1d:77:db:83:df:
a7:04:69:c5:a7:ad:61:03:fd:71:fa:7a:a2:6a:31:
5b:54:93:10:a7:e7:29:7e:03:70:d4:cd:ee:7a:98:
d1:02:ab:f4:3c:26:f3:a9:22:ff:fe:bb:f7:2f:c2:
a3:f5:4d:cc:ed:76:4c:0e:fb:ab:ab:27:86:81:ad:
5b:e9:59:89:dd:0e:b0:23:72:07:cf:3e:39:5e:f0:
90:c8:81:60:b9:c2:9e:67:e9:22:cb:bd:bd:6c:73:
86:13:64:67:d1:c1:4c:75:5d:a0:44:81:14:5c:cf:
a7:08:69:26:ff:85:ba:d3:1c:bd:85:8f:71:87:dd:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:17:1A:E4:39:FE:99:F8:42:53:FC:50:5E:9A:73:C0:70:21:9F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ntIXGuQ5_pn4QlP8UF6ac8BwIZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.154.0-83.148.159.255
83.148.168.0/22
83.148.180.0-83.148.187.255
85.189.204.0/22
85.189.216.0/22
86.53.152.0/22
Signature Algorithm: sha256WithRSAEncryption
69:9a:3d:62:17:72:30:f5:3b:8e:29:c4:46:d4:98:71:e4:fa:
ee:7a:b9:e4:47:dc:63:67:e7:72:90:98:e0:07:f6:94:6a:bc:
98:f9:55:af:18:94:f0:3c:73:35:44:f4:c7:01:f4:3c:32:98:
fe:f5:41:07:88:b3:ea:80:fa:2f:4a:1c:19:2d:4e:aa:2f:8f:
0c:61:08:a1:f9:6f:2a:f4:85:93:09:92:a5:20:9f:01:0f:e2:
cb:32:ca:71:d2:74:b2:3f:dd:46:01:78:8d:78:b6:c9:85:03:
c9:c2:b9:3c:4d:e4:ed:cc:15:3a:6b:33:89:de:de:14:d0:f9:
6b:16:0e:74:e5:d1:14:b2:93:ad:c8:19:0a:a1:f0:91:ec:cc:
28:c3:f0:19:0b:e0:58:f8:6d:31:b5:04:18:80:f4:5c:a9:09:
ca:92:21:13:3c:22:f2:f6:a2:b1:86:56:cf:e6:ee:6d:c5:b0:
ee:f4:ff:c0:66:a4:41:39:ab:17:95:31:e2:f7:46:80:4e:8c:
b6:9f:90:ba:6c:e1:7c:6b:c4:66:7b:fe:a5:30:df:a2:af:bc:
2b:17:5b:67:32:a0:1e:af:12:40:15:6e:ef:d3:20:32:88:2e:
d5:81:5a:d7:cb:3e:13:58:83:1a:56:57:99:4f:9d:7e:39:7b:
11:32:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:56:43 2026 by rpki-client