Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ntDnz6ZT0E7xhsYn385MMtio0I8.roa
File: ntDnz6ZT0E7xhsYn385MMtio0I8.roa (raw, json)
Hash identifier: bsMfqH3JaHv5JTK0ZJCBcrXfgtTOcbmmEJhRTyVyiRg=
Subject key identifier: 9E:D0:E7:CF:A6:53:D0:4E:F1:86:C6:27:DF:CE:4C:32:D8:A8:D0:8F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEAB18003963219967E313E73DB8294F9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ntDnz6ZT0E7xhsYn385MMtio0I8.roa
Signing time: Mon 10 Aug 2026 08:02:08 +0000
ROA not before: Mon 10 Aug 2026 08:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 37.98.147.0/24 maxlen: 24
37.98.149.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.109.0/24 maxlen: 24
82.153.54.0/24 maxlen: 24
89.213.202.0/23 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b1:80:03:96:32:19:96:7e:31:3e:73:db:82:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 10 08:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ed0e7cfa653d04ef186c627dfce4c32d8a8d08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:3e:96:ad:ad:fd:b7:71:d9:0d:87:87:03:
e1:91:b0:7f:51:f3:79:d1:e4:95:2f:35:22:df:0a:
bb:4d:1b:33:3c:6d:2a:8a:3b:13:4b:6c:68:2a:70:
c1:df:42:17:95:76:9e:f6:ee:15:40:0f:45:52:6d:
4c:e9:18:2f:b5:07:e0:09:6a:4a:f4:7a:b8:77:17:
30:b6:ea:df:95:9f:fc:60:37:ae:a0:56:77:f6:47:
d7:00:ab:bd:31:72:24:05:42:59:1f:e7:e4:25:0b:
f3:b4:b3:f9:65:30:d4:c8:5f:f6:7e:07:84:78:12:
c9:75:3e:ed:ff:39:36:05:cd:e3:92:7e:d1:38:0c:
48:b3:f3:21:7a:fd:cf:3a:9b:ce:35:12:80:7f:7b:
17:ac:a2:cc:d5:a6:93:9b:0a:36:60:3c:29:43:30:
c5:62:5d:6a:2a:66:10:eb:34:c5:e4:f5:b4:bf:a4:
ad:d9:00:07:52:ff:73:0f:58:4d:4d:22:76:17:d1:
5d:4d:74:cc:85:bb:2e:b5:10:ce:ca:ac:cd:8b:f9:
49:49:af:d7:2d:0c:2b:80:71:e7:03:d4:b5:96:52:
14:2a:a3:0b:50:7f:fc:d1:39:00:fa:e3:6d:e4:50:
aa:43:9e:1c:37:16:d1:26:5d:5b:7e:fc:a6:cc:ec:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:E7:CF:A6:53:D0:4E:F1:86:C6:27:DF:CE:4C:32:D8:A8:D0:8F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ntDnz6ZT0E7xhsYn385MMtio0I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.147.0/24
37.98.149.0/24
81.168.58.0/24
81.168.109.0/24
82.153.54.0/24
89.213.202.0/23
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
19:68:0b:3c:07:fc:16:d1:8f:5d:f0:86:71:01:1e:f7:bc:75:
6f:42:1f:77:0d:01:33:61:4b:58:56:58:b5:5e:88:6a:c7:9d:
a2:76:bf:e9:36:32:e1:bb:5a:88:c1:bb:fd:5c:d5:69:29:7d:
d6:7e:90:76:66:3a:ab:24:27:14:56:a4:bd:3c:2b:b6:26:17:
1c:7e:73:73:f8:3e:f6:b5:be:a9:5b:5f:ef:f8:af:ef:25:ef:
49:f6:75:33:6b:b3:d1:d1:0a:82:59:8a:34:18:2a:0d:11:52:
c5:75:a9:c1:2e:81:ee:8a:49:f3:c3:25:7e:0f:6d:72:73:c9:
4b:75:14:a8:2a:ce:85:cb:77:23:d6:f4:a6:f5:b3:42:42:1d:
7c:c9:83:1f:1d:01:b4:83:17:85:32:32:5c:76:9b:28:bf:be:
38:86:6f:16:87:e3:a8:36:88:33:4c:3d:28:05:ef:4a:1b:ee:
ef:0c:54:d0:16:58:b3:cc:b6:82:ae:cf:cb:b6:f5:a2:20:eb:
4d:44:c5:f1:73:66:d0:4b:bf:8d:49:1f:70:8f:ad:51:2a:eb:
7a:a9:f2:3e:a7:f3:58:61:23:90:5d:e4:ab:c5:06:46:71:cd:
f5:20:1d:66:63:dd:0d:93:cb:74:f1:ff:b0:57:9a:e3:56:fc:
ec:6e:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:12 2026 by rpki-client