Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/NJw0kazCh3ZmX1glwCHFL9ZDeTg.roa
File: NJw0kazCh3ZmX1glwCHFL9ZDeTg.roa (raw, json)
Hash identifier: 3q6uUJ7ETuZAOrHikqX6W3xxK8mcnHQKs3+augX100E=
Subject key identifier: 34:9C:34:91:AC:C2:87:76:66:5F:58:25:C0:21:C5:2F:D6:43:79:38
Certificate issuer: /CN=c2245df89d68c1e35e3e0e0aedeef3f2a6c2fa36
Certificate serial: 01A07DA32A73BD1C955CFB1FE04BB0E62B20
Authority key identifier: C2:24:5D:F8:9D:68:C1:E3:5E:3E:0E:0A:ED:EE:F3:F2:A6:C2:FA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiRd-J1oweNePg4K7e7z8qbC-jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/NJw0kazCh3ZmX1glwCHFL9ZDeTg.roa
Signing time: Mon 07 Sep 2026 20:50:40 +0000
ROA not before: Mon 07 Sep 2026 20:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202228
IP address blocks: 79.108.200.0/21 maxlen: 24
82.146.12.0/23 maxlen: 24
89.35.234.0/24 maxlen: 24
89.35.250.0/23 maxlen: 24
91.90.164.0/23 maxlen: 24
91.189.136.0/21 maxlen: 24
91.202.192.0/22 maxlen: 24
94.240.52.0/22 maxlen: 24
185.193.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiRd-J1oweNePg4K7e7z8qbC-jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:a3:2a:73:bd:1c:95:5c:fb:1f:e0:4b:b0:e6:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2245df89d68c1e35e3e0e0aedeef3f2a6c2fa36
Validity
Not Before: Sep 7 20:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=349c3491acc28776665f5825c021c52fd6437938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:68:f7:83:fe:05:f1:7b:5f:ce:6e:68:91:
6c:ff:7f:cd:9f:91:37:7c:e4:f6:85:e6:57:d2:c3:
f7:2f:37:60:cf:cc:b0:32:65:44:4e:b1:2f:6a:72:
18:0d:89:75:19:fd:ac:9d:f9:2b:ec:02:74:b5:35:
42:ae:d7:4f:3d:20:e6:a6:ff:fa:5c:ba:79:5e:6d:
93:14:6a:e6:2b:ce:0e:1f:a4:df:ba:54:cd:a4:5f:
d9:e9:cc:53:33:39:55:6b:ef:45:2b:6c:a4:ae:86:
cd:af:4a:c4:51:1a:0e:40:aa:8f:2b:09:6e:ee:1f:
7d:d1:0b:71:08:28:a0:30:dc:05:17:3e:81:95:0f:
83:51:98:af:b6:4e:38:e1:11:1c:f4:8e:37:d0:e5:
e8:0c:ce:29:88:bb:61:e6:d1:df:bd:e8:13:4b:6d:
0d:ca:5a:bb:2d:87:45:59:49:94:4a:0f:78:b7:21:
04:b3:04:47:df:0f:50:38:0d:5a:3d:2a:07:8a:69:
38:cf:65:40:db:af:1d:09:9d:0c:af:6b:21:3e:01:
5e:ae:39:2a:dc:9d:32:73:e2:cb:1b:1b:17:1b:44:
af:ee:af:a6:2c:46:60:40:d1:b1:ea:45:40:4b:12:
77:ef:58:d8:d4:b0:cd:47:ff:fb:19:ef:28:e4:71:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:34:91:AC:C2:87:76:66:5F:58:25:C0:21:C5:2F:D6:43:79:38
X509v3 Authority Key Identifier:
keyid:C2:24:5D:F8:9D:68:C1:E3:5E:3E:0E:0A:ED:EE:F3:F2:A6:C2:FA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiRd-J1oweNePg4K7e7z8qbC-jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/NJw0kazCh3ZmX1glwCHFL9ZDeTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.108.200.0/21
82.146.12.0/23
89.35.234.0/24
89.35.250.0/23
91.90.164.0/23
91.189.136.0/21
91.202.192.0/22
94.240.52.0/22
185.193.116.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f8:93:9b:a1:ce:d7:a8:d2:e4:59:56:bd:07:45:39:55:23:
e0:85:80:5d:c3:61:7f:3c:78:48:4b:c3:03:b9:72:c0:ba:65:
24:3f:bc:53:aa:ae:c2:1f:a1:6e:ca:a6:86:b0:00:57:c2:95:
15:6d:7e:1d:d3:f0:75:4f:c4:71:6a:d1:e6:54:96:cc:57:7a:
76:bd:0b:18:50:5e:da:f8:c9:a0:fc:8b:4a:53:7b:70:ff:64:
74:b0:27:1e:fa:a0:05:56:6c:1e:31:1a:52:36:aa:e7:48:f1:
00:74:3a:17:51:27:66:27:65:c3:1c:a3:a8:62:71:da:69:08:
72:fb:e3:cc:71:63:49:af:b0:27:b3:07:28:d1:86:98:7a:27:
87:00:14:2b:9b:00:84:07:a9:9c:a5:ae:6f:4b:6e:0b:a2:2e:
35:99:1b:6b:1a:40:7d:68:66:47:50:73:bb:41:1d:6b:7c:4d:
4e:35:7c:09:a2:e2:da:e1:ab:c4:4e:cb:40:36:22:00:0a:15:
0b:6d:c0:3a:55:57:f9:e1:53:e9:7d:ac:d8:c5:07:35:a6:d9:
d8:71:bb:d4:a3:35:8b:39:e6:18:1c:a2:b7:4e:10:b7:f6:5f:
5d:1f:c6:d5:90:2f:0b:03:78:42:c8:d2:f0:6a:9a:29:dd:ea:
69:9b:55:cb
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaB9oypzvRyVXPsf4Euw5isgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjQ1ZGY4OWQ2OGMxZTM1ZTNlMGUwYWVkZWVmM2YyYTZj
MmZhMzYwHhcNMjYwOTA3MjA1MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDljMzQ5MWFjYzI4Nzc2NjY1ZjU4MjVjMDIxYzUyZmQ2NDM3OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa9o94P+BfF7X85uaJFs/3/Nn5E3
fOT2heZX0sP3Lzdgz8ywMmVETrEvanIYDYl1Gf2snfkr7AJ0tTVCrtdPPSDmpv/6
XLp5Xm2TFGrmK84OH6TfulTNpF/Z6cxTMzlVa+9FK2ykrobNr0rEURoOQKqPKwlu
7h990QtxCCigMNwFFz6BlQ+DUZivtk444REc9I430OXoDM4piLth5tHfvegTS20N
ylq7LYdFWUmUSg94tyEEswRH3w9QOA1aPSoHimk4z2VA268dCZ0Mr2shPgFerjkq
3J0yc+LLGxsXG0Sv7q+mLEZgQNGx6kVASxJ371jY1LDNR//7Ge8o5HEJewIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFDScNJGswod2Zl9YJcAhxS/WQ3k4MB8GA1UdIwQY
MBaAFMIkXfidaMHjXj4OCu3u8/Kmwvo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lSZC1KMW93ZU5lUGc0SzdlN3o4cWJDLWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYjJhOWUtZmU4NC00YThhLWJlMGUt
OGRkMTVjOWUzMTQ1LzEvTkp3MGthekNoM1ptWDFnbHdDSEZMOVpEZVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYjJhOWUtZmU4NC00YThhLWJlMGUtOGRkMTVjOWUzMTQ1
LzEvd2lSZC1KMW93ZU5lUGc0SzdlN3o4cWJDLWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQDT2zIAwQB
UpIMAwQAWSPqAwQBWSP6AwQBW1qkAwQDW72IAwQCW8rAAwQCXvA0AwQCucF0MA0G
CSqGSIb3DQEBCwUAA4IBAQAC+JOboc7XqNLkWVa9B0U5VSPghYBdw2F/PHhIS8MD
uXLAumUkP7xTqq7CH6FuyqaGsABXwpUVbX4d0/B1T8RxatHmVJbMV3p2vQsYUF7a
+Mmg/ItKU3tw/2R0sCce+qAFVmweMRpSNqrnSPEAdDoXUSdmJ2XDHKOoYnHaaQhy
++PMcWNJr7Answco0YaYeieHABQrmwCEB6mcpa5vS24Loi41mRtrGkB9aGZHUHO7
QR1rfE1ONXwJouLa4avETstANiIAChULbcA6VVf54VPpfazYxQc1ptnYcbvUozWL
OeYYHKK3ThC39l9dH8bVkC8LA3hCyNLwapop3eppm1XL
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:59 2026 by rpki-client