Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/nmE-QVU130bdGtH8wB613Krdop8.roa
File: nmE-QVU130bdGtH8wB613Krdop8.roa (raw, json)
Hash identifier: 2Ar8sXocwIKtDmeO+V7Ysx7hBagKUJGXXEKIvkCyLAA=
Subject key identifier: 9E:61:3E:41:55:35:DF:46:DD:1A:D1:FC:C0:1E:B5:DC:AA:DD:A2:9F
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01A08AEEE5BDFBEE73F8459F3E7BD9842EA6
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/nmE-QVU130bdGtH8wB613Krdop8.roa
Signing time: Thu 10 Sep 2026 10:48:27 +0000
ROA not before: Thu 10 Sep 2026 10:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208570
IP address blocks: 87.236.149.0/24 maxlen: 24
91.217.133.0/24 maxlen: 24
171.33.160.0/22 maxlen: 24
195.69.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:ee:e5:bd:fb:ee:73:f8:45:9f:3e:7b:d9:84:2e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Sep 10 10:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e613e415535df46dd1ad1fcc01eb5dcaadda29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:98:71:b9:c8:b1:ab:f1:69:5b:94:4e:03:
84:04:4d:94:3c:cc:da:97:38:dd:2d:0d:77:2a:33:
58:3f:ae:03:42:11:18:69:d8:68:a7:9c:2a:8a:77:
c6:90:0b:6c:c3:7a:42:75:e8:e0:f7:b1:13:9f:1b:
ae:54:a1:81:37:15:ef:da:01:d0:72:0a:60:2e:04:
f0:9b:af:59:c3:ca:5d:5e:c7:46:e8:8c:23:80:40:
67:12:3b:2c:7b:51:07:19:33:f0:f8:10:c9:55:67:
30:a1:0f:0c:fe:f9:16:e6:64:26:97:20:95:5c:71:
4f:36:6b:ac:b3:c8:ef:b0:4f:f3:c8:ed:b6:d8:01:
4b:07:14:0e:8d:bc:64:f6:ec:1e:e9:ee:25:70:32:
e3:ed:12:05:86:af:cf:34:55:2f:62:af:24:d8:7d:
52:1c:25:1f:8c:b1:53:8f:93:5c:86:3c:97:b0:8c:
ad:26:63:af:96:da:aa:d8:b5:f8:df:c1:97:17:28:
f2:0a:16:c2:99:c2:68:d7:23:29:5c:f0:e6:73:db:
48:32:99:5b:68:8f:ff:0a:c9:f4:53:bc:bf:a9:ed:
15:ac:05:c6:fc:2d:fd:c2:f4:c9:db:e5:3a:02:6e:
5b:46:3b:f5:4f:85:03:f7:86:a9:9b:53:2a:52:a3:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:3E:41:55:35:DF:46:DD:1A:D1:FC:C0:1E:B5:DC:AA:DD:A2:9F
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/nmE-QVU130bdGtH8wB613Krdop8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
91.217.133.0/24
171.33.160.0/22
195.69.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4a:03:d4:92:ba:ea:69:9e:4a:dd:db:2c:b3:31:75:12:6d:
86:a3:a1:a5:eb:d7:d1:d8:31:a0:83:1c:5a:e9:6d:56:76:97:
b3:22:6f:87:46:24:e4:c0:b7:88:64:52:1a:dc:78:8e:42:64:
3a:b6:e3:84:8f:c5:fd:bc:c0:70:ac:80:c6:47:41:e9:c7:6b:
f0:1f:8a:ea:3d:e3:61:08:10:53:5f:a6:84:ae:c9:2c:86:bd:
d4:19:e1:73:ac:b5:17:2c:19:2d:d8:95:52:71:10:46:4d:40:
1d:1c:83:be:83:17:de:5a:d8:bd:99:78:9a:9f:78:bf:e8:62:
52:4c:4a:5c:86:0d:b9:53:e7:ca:d7:c9:2f:a1:fb:14:0e:89:
08:9e:96:f0:f6:b8:c3:d9:35:85:ff:f5:bd:eb:2f:b8:e5:df:
f6:85:29:4e:55:d4:58:eb:17:65:cb:87:04:c1:4b:f4:23:46:
58:80:8a:70:25:6a:e7:c8:90:7c:91:4e:db:ed:a9:71:7e:de:
a4:c2:27:50:fb:21:95:69:f5:1f:e2:02:44:92:cd:f6:db:01:
3e:cd:3e:16:49:42:fe:a7:ab:c7:7e:26:be:91:34:b7:2b:6b:
12:2f:8a:e8:8b:9c:8e:a1:e6:c2:97:ba:91:45:bb:27:2b:79:
f5:38:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:31:54 2026 by rpki-client