Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/N3LeClgvTZ0cIBBSmaNsGMO857Y.roa
File: N3LeClgvTZ0cIBBSmaNsGMO857Y.roa (raw, json)
Hash identifier: HJVb7bWji+tQh+qim7uMTNTbiNamdpGLCNaMJ5rIvKI=
Subject key identifier: 37:72:DE:0A:58:2F:4D:9D:1C:20:10:52:99:A3:6C:18:C3:BC:E7:B6
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01A0742471C436A30AC43C03211CA1EFBADA
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/N3LeClgvTZ0cIBBSmaNsGMO857Y.roa
Signing time: Sun 06 Sep 2026 00:35:40 +0000
ROA not before: Sun 06 Sep 2026 00:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 2.56.9.0/24 maxlen: 24
5.183.76.0/24 maxlen: 24
45.14.113.0/24 maxlen: 24
45.95.185.0/24 maxlen: 24
45.95.187.0/24 maxlen: 24
147.189.128.0/24 maxlen: 24
147.189.131.0/24 maxlen: 24
147.189.135.0/24 maxlen: 24
176.111.217.0/24 maxlen: 24
185.215.224.0/24 maxlen: 24
185.215.227.0/24 maxlen: 24
2a0b:ae40:1::/48 maxlen: 48
2a0b:ae40:2::/48 maxlen: 48
2a0b:ae40:3::/48 maxlen: 48
2a0b:ae40:4::/48 maxlen: 48
2a0b:ae47:3::/48 maxlen: 48
2a0b:ae47:4::/48 maxlen: 48
2a0e:c80:3::/48 maxlen: 48
2a0e:c80:323::/48 maxlen: 48
2a0e:c80:403::/48 maxlen: 48
2a0e:c80:743::/48 maxlen: 48
2a0e:3840:2::/48 maxlen: 48
2a0e:3840:4::/48 maxlen: 48
2a0e:3840:242::/48 maxlen: 48
2a0e:3840:415::/48 maxlen: 48
2a0e:3840:801::/48 maxlen: 48
2a0f:9980:6::/48 maxlen: 48
2a0f:9980:195::/48 maxlen: 48
2a0f:9980:598::/48 maxlen: 48
2a0f:9980:936::/48 maxlen: 48
2a0f:9981::/32 maxlen: 32
2a0f:9982::/32 maxlen: 32
2a0f:9983::/32 maxlen: 32
2a0f:9984::/32 maxlen: 32
2a0f:9985::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:74:24:71:c4:36:a3:0a:c4:3c:03:21:1c:a1:ef:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Sep 6 00:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3772de0a582f4d9d1c20105299a36c18c3bce7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:60:2f:a4:2f:cc:83:68:c8:9d:8d:ae:86:
a5:cd:4b:6a:ed:e2:4a:55:7f:94:c1:0a:d4:1e:0d:
ab:ae:2d:8e:4f:1b:ae:c2:a6:6f:ef:96:69:d2:e8:
1d:6f:f6:bd:f2:c9:15:97:ba:84:f7:9f:99:e2:8e:
20:3a:1c:85:4c:34:c2:24:ec:ed:88:52:50:32:b7:
f9:73:15:9f:c9:9b:12:10:df:89:7c:53:50:6d:5b:
91:35:c9:1d:ef:bf:ff:8a:b3:64:78:e2:ae:68:cd:
a7:19:79:d3:94:26:c9:83:64:9c:91:57:e2:1f:cb:
6c:55:a0:6c:73:74:32:be:a0:61:f6:d3:bf:d5:c7:
cc:d8:c2:d8:a5:15:84:8f:06:e6:54:f4:48:c9:32:
70:02:f6:4b:c7:7a:cd:d9:10:27:3b:3e:81:14:9c:
23:d7:c4:47:44:06:f2:54:1e:27:81:15:4d:8d:8a:
ec:7b:7e:3c:89:9c:8a:3d:46:2a:b6:fd:37:1c:4e:
06:08:ef:81:57:5b:05:cf:45:7a:99:a6:d5:1d:ae:
63:15:7c:23:2a:19:9e:7e:0b:95:6c:98:a6:04:0a:
0a:6d:47:fb:f8:b6:8b:57:47:32:e7:82:8a:98:1c:
6f:5c:58:24:6a:42:7b:93:fd:c8:2e:88:e9:1c:80:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:DE:0A:58:2F:4D:9D:1C:20:10:52:99:A3:6C:18:C3:BC:E7:B6
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/N3LeClgvTZ0cIBBSmaNsGMO857Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.9.0/24
5.183.76.0/24
45.14.113.0/24
45.95.185.0/24
45.95.187.0/24
147.189.128.0/24
147.189.131.0/24
147.189.135.0/24
176.111.217.0/24
185.215.224.0/24
185.215.227.0/24
IPv6:
2a0b:ae40:1::-2a0b:ae40:4:ffff:ffff:ffff:ffff:ffff
2a0b:ae47:3::-2a0b:ae47:4:ffff:ffff:ffff:ffff:ffff
2a0e:c80:3::/48
2a0e:c80:323::/48
2a0e:c80:403::/48
2a0e:c80:743::/48
2a0e:3840:2::/48
2a0e:3840:4::/48
2a0e:3840:242::/48
2a0e:3840:415::/48
2a0e:3840:801::/48
2a0f:9980:6::/48
2a0f:9980:195::/48
2a0f:9980:598::/48
2a0f:9980:936::/48
2a0f:9981::-2a0f:9985:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:14:f6:1f:8b:40:69:7a:89:ae:d7:55:25:9f:95:15:fa:cb:
0e:00:c1:7b:05:b8:da:43:cd:48:17:7a:b4:c6:a2:ae:b4:f6:
14:3d:7b:44:76:f1:42:b4:b8:db:a9:4d:78:c3:fc:8b:4a:d4:
1e:1f:b3:be:a5:94:73:1e:4a:ed:65:65:23:04:0c:00:c0:22:
72:1a:f3:40:2d:d1:6b:cf:08:f4:a0:4e:16:e9:ae:ac:f4:78:
de:29:53:e9:39:aa:80:c7:a7:df:15:69:67:c7:b9:ee:e6:a5:
22:49:13:b2:14:e9:ee:13:a8:5e:2b:dd:55:6f:f1:7c:b3:9d:
fd:c0:48:68:89:ca:63:bd:0f:17:76:a9:b4:62:57:0c:96:6f:
18:14:53:6e:09:a3:9d:4b:52:fe:f1:53:02:c4:40:48:c2:10:
c8:af:7f:1f:4b:70:5a:a5:c0:e2:08:b7:b0:9f:cd:42:cf:7f:
0f:83:7a:92:3b:82:ce:c8:53:cb:ed:f0:ff:80:30:9f:1b:71:
61:e0:c8:87:79:27:d3:a6:ad:6a:93:03:80:fc:ef:0a:59:33:
25:66:59:48:cf:a9:f5:a0:13:fb:e0:a2:05:d3:14:db:84:c7:
de:24:f8:ab:c4:ae:30:de:21:44:d8:eb:49:c1:74:a1:aa:be:
47:7c:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:06:00 2026 by rpki-client