Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/npk6WkIHJCvL3_l_cXYjMzft0kI.roa
File: npk6WkIHJCvL3_l_cXYjMzft0kI.roa (raw, json)
Hash identifier: t+MEBsgDts42eIKY0nTbdaPBG3x9AZb+9dTa2sHYe1g=
Subject key identifier: 9E:99:3A:5A:42:07:24:2B:CB:DF:F9:7F:71:76:23:33:37:ED:D2:42
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019E220692F8494DAA61EDA40676104CEED6
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/npk6WkIHJCvL3_l_cXYjMzft0kI.roa
Signing time: Wed 13 May 2026 15:48:36 +0000
ROA not before: Wed 13 May 2026 15:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201746
IP address blocks: 45.94.100.0/24 maxlen: 24
45.94.101.0/24 maxlen: 24
45.94.102.0/24 maxlen: 24
45.94.103.0/24 maxlen: 24
193.178.45.0/24 maxlen: 24
193.178.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:06:92:f8:49:4d:aa:61:ed:a4:06:76:10:4c:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: May 13 15:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e993a5a4207242bcbdff97f7176233337edd242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:ae:f9:a8:96:a4:ee:fc:5e:94:df:27:3e:
5d:75:eb:dd:26:19:cc:80:49:0e:c7:b9:c9:01:98:
7d:3c:6e:7d:84:d8:e1:5d:0e:d7:14:57:58:0a:06:
b2:03:c5:ca:35:e9:d5:70:11:d4:c0:13:17:f8:23:
b3:be:1f:26:94:59:8c:a4:fd:76:42:f5:a5:0b:df:
b6:b6:22:fb:f5:ba:75:2b:86:32:91:28:f3:d3:44:
3a:e7:52:b7:f3:d5:3c:f8:67:ba:7a:2c:fe:7f:8e:
fb:7e:cd:9a:93:ae:5d:c2:cb:53:99:f2:76:bf:b8:
f2:df:2f:02:0c:5a:f4:b9:80:5c:c9:f3:c6:6e:4e:
63:1d:94:ae:54:fa:22:d3:a8:df:a2:73:71:01:29:
d9:52:6d:d9:ef:e9:67:72:7f:8d:2f:0c:66:94:e0:
56:80:d3:08:b4:dd:a2:db:f8:18:97:8d:2f:7f:d6:
8e:89:22:e0:1d:d0:4a:63:ac:c6:fb:58:cd:fb:d0:
ae:9b:35:20:57:61:00:77:7f:e9:f3:76:6f:fa:3c:
88:29:39:77:cc:f7:d3:76:2c:a4:b2:42:b6:9d:54:
99:87:78:a3:b9:a6:39:2c:1d:f5:46:2a:3a:48:b5:
9f:1a:cb:a5:90:87:89:fb:b6:0d:4f:4b:bb:59:91:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:3A:5A:42:07:24:2B:CB:DF:F9:7F:71:76:23:33:37:ED:D2:42
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/npk6WkIHJCvL3_l_cXYjMzft0kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0/22
193.178.45.0-193.178.46.255
Signature Algorithm: sha256WithRSAEncryption
99:76:87:91:49:46:c8:58:50:31:52:5a:3a:67:3a:5c:a9:74:
de:3a:0d:83:2a:75:0b:1c:5f:09:ec:64:ff:dc:49:cb:9d:56:
87:a2:af:99:78:ba:e5:e2:ca:87:94:2b:42:56:f2:4c:2f:9a:
0c:d1:a9:59:ec:4d:a4:6c:03:18:98:02:98:b6:6c:18:6c:38:
65:67:4c:a6:c0:66:43:99:68:b5:a6:bc:28:36:14:0f:9f:11:
5e:39:4f:84:36:79:1d:12:e5:00:25:bd:4a:27:ea:65:b4:cf:
4d:e8:28:57:bb:bd:94:8e:55:f6:26:75:cf:1d:25:70:74:aa:
fc:9c:15:78:a5:04:d2:4d:d3:5f:22:c2:d9:cb:b2:a0:79:3d:
47:cd:4f:e5:6e:69:0e:92:3c:17:e0:e2:c6:e8:cd:36:23:b2:
3d:52:8f:e9:ca:3c:de:4c:a6:4b:24:c4:a1:2b:88:6e:a2:d7:
3d:cf:db:13:ac:3b:1a:07:af:fa:f7:62:07:32:64:be:c6:c4:
55:39:78:25:20:60:38:4f:84:9d:55:b1:e9:50:cd:91:38:58:
7d:cd:f8:01:f8:46:2a:72:0f:c5:fc:e5:c7:5a:53:2b:8b:e8:
2a:fb:ec:75:a1:20:d6:de:d1:28:dc:a3:6f:ae:c5:d5:64:99:
0f:6d:71:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 02:03:27 2026 by rpki-client