Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/rNtNK8NrJnb6bySsuYgnmZ5mRsg.roa
File: rNtNK8NrJnb6bySsuYgnmZ5mRsg.roa (raw, json)
Hash identifier: Wycl7HMi0wrN1apn2VgbOJh8AmgYHiZsusmpvtaYJ94=
Subject key identifier: AC:DB:4D:2B:C3:6B:26:76:FA:6F:24:AC:B9:88:27:99:9E:66:46:C8
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A049B498890AC028819C330946E98F70C1
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/rNtNK8NrJnb6bySsuYgnmZ5mRsg.roa
Signing time: Fri 28 Aug 2026 18:49:27 +0000
ROA not before: Fri 28 Aug 2026 18:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 136.176.233.0/24 maxlen: 24
136.176.241.0/24 maxlen: 24
136.176.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:b4:98:89:0a:c0:28:81:9c:33:09:46:e9:8f:70:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Aug 28 18:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acdb4d2bc36b2676fa6f24acb98827999e6646c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:b0:fa:70:03:0d:08:73:d8:f0:50:26:40:
78:f0:5a:1d:ea:ff:e8:ec:3b:1f:e1:36:9a:9e:02:
b9:a8:00:f4:99:25:43:52:37:b2:4d:79:a0:35:8f:
4f:e1:b9:56:4b:6e:d5:e4:66:b1:a6:2e:aa:28:d3:
9a:8c:eb:6c:5e:db:a5:4b:c1:a1:25:04:86:c7:b2:
85:1e:5e:80:10:f6:08:a7:0b:65:d5:31:23:54:e8:
8f:23:b2:03:29:38:10:e5:82:e8:aa:35:c2:72:2d:
3c:a8:36:f5:4b:b7:ae:3f:0a:83:be:58:63:ea:74:
77:86:ef:a8:48:f8:2c:3b:0e:53:3f:da:b6:f1:58:
fd:cb:a3:56:d6:99:54:44:70:b5:5a:dc:2d:92:0e:
d7:76:da:73:f3:e8:bd:8d:59:66:55:c3:5b:4b:0c:
c8:84:be:e2:29:ff:03:47:58:32:d3:e7:5a:89:d6:
9d:8c:e3:1d:78:aa:68:34:1a:f2:99:0a:5f:71:94:
aa:43:85:10:b0:c2:ea:eb:68:10:81:3a:59:f5:0e:
1e:d5:e7:8d:de:20:a2:8d:13:4a:9c:46:3a:58:f6:
dc:16:08:0d:5f:21:d7:f3:a1:3f:f8:d9:29:f0:05:
5b:73:51:6d:d5:00:77:fb:dd:f6:c5:3e:f1:42:43:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:4D:2B:C3:6B:26:76:FA:6F:24:AC:B9:88:27:99:9E:66:46:C8
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/rNtNK8NrJnb6bySsuYgnmZ5mRsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.233.0/24
136.176.241.0/24
136.176.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:85:19:04:a0:17:81:09:f6:30:b4:91:7c:2f:14:77:b1:77:
14:f5:df:fc:46:44:b5:96:95:6c:43:33:2d:df:b4:00:1e:0d:
90:95:4d:b7:14:0f:7c:1e:4d:8d:ae:58:81:32:df:9e:a0:02:
42:aa:51:0f:2b:08:7f:f1:6a:b0:29:ee:e0:19:5b:66:5d:a4:
5c:23:9c:2f:9d:88:44:01:31:45:9e:c0:f0:7d:ca:bb:81:0f:
46:34:23:b7:19:c3:d7:80:d0:16:9b:8f:1a:7c:c8:6a:17:86:
4f:a3:33:66:9b:4a:7b:d3:46:a4:26:ed:70:3c:c7:ce:dc:59:
ac:2e:12:0e:27:c0:8e:36:ab:4d:b3:29:97:3d:5e:59:10:56:
a6:a9:97:72:1e:19:39:35:ed:64:38:3f:13:0d:c9:94:42:e0:
f4:2d:21:e2:da:70:30:a1:be:16:9c:e1:e6:1c:11:88:4d:c6:
12:35:d7:a5:04:b6:3b:cd:6f:18:4e:e6:29:d2:cc:dc:a6:66:
47:8a:e4:05:3a:9c:3a:cd:d6:03:1d:9c:1a:08:25:10:b2:d3:
12:bb:4e:49:d6:5c:84:06:1c:0c:22:59:03:c8:a3:09:a4:38:
71:bc:3f:e5:ac:c2:d2:70:94:19:11:c3:08:fb:e0:07:ae:4b:
d5:cf:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 01:24:19 2026 by rpki-client