Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/neYuJK3cfAh9PQBoSjqbGKPpOEU.roa
File: neYuJK3cfAh9PQBoSjqbGKPpOEU.roa (raw, json)
Hash identifier: +yz+3AEnIfKjdfV+Db24zTgMhqk8W0iG4UlI2YUZ2vk=
Subject key identifier: 9D:E6:2E:24:AD:DC:7C:08:7D:3D:00:68:4A:3A:9B:18:A3:E9:38:45
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EA6E3E2FC6C6D5C5D27295F2933A20AFE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/neYuJK3cfAh9PQBoSjqbGKPpOEU.roa
Signing time: Mon 08 Jun 2026 11:00:13 +0000
ROA not before: Mon 08 Jun 2026 11:00:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.107.88.0/24 maxlen: 24
79.99.146.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:e3:e2:fc:6c:6d:5c:5d:27:29:5f:29:33:a2:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 8 11:00:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de62e24addc7c087d3d00684a3a9b18a3e93845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:32:8b:5d:f4:36:ab:20:52:b9:a4:49:b2:
15:3b:25:73:0f:7d:9d:68:84:8e:d3:c2:a4:da:0d:
37:8e:b7:41:a1:5e:6e:21:c1:d1:8f:91:77:bd:7f:
90:41:64:2c:cc:71:0d:a3:8f:bc:6c:f4:35:b6:08:
bd:3f:f0:2d:28:28:e8:e2:96:b7:ad:b3:63:b2:00:
35:23:2c:ad:fa:8e:de:2f:d7:60:16:da:68:26:77:
7a:32:66:68:14:c0:4b:a1:cd:8c:5c:b2:ea:9f:a1:
db:4b:cb:a9:3b:fb:36:66:4b:a7:a6:c7:42:0c:3e:
f3:4c:56:52:10:56:ad:d3:8a:92:10:ba:6c:92:2a:
b9:b5:94:ce:af:d1:60:cd:ee:25:da:aa:3c:ef:86:
3f:b8:b9:2b:c9:c0:3d:e3:94:26:df:93:12:42:65:
3a:c0:f1:c0:05:16:44:72:6a:96:1e:b9:45:cd:e6:
2c:bc:12:64:ac:94:76:f5:06:d3:98:f6:42:fb:1c:
a5:99:bb:d4:a8:4f:6e:7a:fb:a9:25:e3:37:68:f4:
38:4e:63:33:47:54:03:88:f7:7a:29:7d:f3:91:b9:
6a:00:66:a5:6e:8d:ed:47:50:01:32:8c:59:c7:1a:
9d:0b:ff:11:36:2b:70:28:a0:5a:a7:e2:91:cf:ac:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:2E:24:AD:DC:7C:08:7D:3D:00:68:4A:3A:9B:18:A3:E9:38:45
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/neYuJK3cfAh9PQBoSjqbGKPpOEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.88.0/24
79.99.146.0/24
80.240.94.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.118.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a7:fb:89:3b:4f:db:22:e1:0c:ae:df:34:83:73:f8:0b:8d:
ce:0b:62:5d:ff:24:fd:0b:c9:83:7f:e0:67:7e:9c:eb:a7:7d:
3e:66:78:eb:73:e1:d2:7c:ce:6a:90:2e:f7:6b:da:61:37:b9:
60:93:0a:79:64:cb:77:b7:70:41:6a:ed:ba:a3:4c:46:c9:7b:
b9:22:cb:ec:44:ed:3a:5f:73:3c:b3:da:2c:2b:2c:1b:1e:45:
e3:2a:51:68:b0:c6:07:f4:3a:dc:c6:a5:13:df:13:cc:a2:ad:
c0:8c:83:ec:c2:67:a3:13:25:0e:3b:5d:8c:1e:30:34:13:c5:
5f:92:32:5b:0d:4f:f2:41:7b:54:82:1e:d7:4a:44:fc:93:01:
38:bf:03:51:dc:ff:c7:d6:35:79:84:5a:eb:07:91:f1:d3:0a:
0e:f9:ec:16:ed:1c:5b:f3:05:29:ea:06:66:1d:47:97:62:58:
46:e9:f4:9a:07:70:ad:df:61:cb:1e:5f:43:24:8c:6f:11:df:
c4:91:4a:bb:ca:9e:2e:8c:fb:c7:e1:fb:7e:bf:2d:f6:ed:12:
85:d5:dd:7c:d9:c3:66:36:57:ce:2e:ed:6b:6f:c7:c3:76:34:
32:62:b6:93:32:59:67:2e:9d:b1:23:49:df:84:76:87:17:c2:
35:2a:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:17 2026 by rpki-client