Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4je5dWsEL-YRPwFDUr4x1qMkRiY.roa
File: 4je5dWsEL-YRPwFDUr4x1qMkRiY.roa (raw, json)
Hash identifier: QWBBjAIIT8XANfffqBiCC36hhMzewkpClsGx2Rz7GzE=
Subject key identifier: E2:37:B9:75:6B:04:2F:E6:11:3F:01:43:52:BE:31:D6:A3:24:46:26
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0668B2AB4ECDD3F9CD2FA232F8E4EAD07
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4je5dWsEL-YRPwFDUr4x1qMkRiY.roa
Signing time: Thu 03 Sep 2026 09:13:11 +0000
ROA not before: Thu 03 Sep 2026 09:13:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 45.11.10.0/24 maxlen: 24
45.13.180.0/24 maxlen: 24
62.197.136.0/21 maxlen: 24
89.33.85.0/24 maxlen: 24
89.39.163.0/24 maxlen: 24
89.39.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:8b:2a:b4:ec:dd:3f:9c:d2:fa:23:2f:8e:4e:ad:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 3 09:13:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e237b9756b042fe6113f014352be31d6a3244626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:6e:66:72:fd:43:92:af:b9:e6:f1:2f:56:
c8:7f:ed:22:32:38:89:cb:8e:26:6e:a5:d9:d2:ee:
f3:09:84:ad:48:16:bb:47:94:00:46:44:24:81:b6:
94:6b:ae:66:4d:60:4e:d2:38:62:51:fe:5b:35:81:
ce:f8:fc:10:96:3b:10:5a:94:b0:20:27:24:c2:40:
8e:3d:8b:ee:65:10:42:e3:c4:87:fc:62:48:80:92:
ee:f2:08:56:a3:f0:74:b2:94:e4:12:6d:f1:9e:25:
89:d4:ff:1f:b9:b2:12:14:c0:21:8a:ce:41:ff:13:
a0:4f:3a:9c:41:1a:d7:80:c3:05:a9:be:47:56:8b:
ec:68:e2:8b:07:cf:4f:96:a1:af:49:a3:84:0c:2d:
6f:d9:b9:9b:bf:a8:9b:7a:8a:7a:cb:00:12:78:75:
78:4e:ce:c8:eb:93:26:cc:63:3f:4b:10:37:57:85:
4a:fe:44:17:03:71:40:b0:0f:e5:64:44:1c:db:8e:
cf:a5:ef:4d:4d:bf:72:6f:b0:15:c2:5b:a8:85:1f:
60:d0:14:a2:51:b9:e4:c2:81:42:3d:6c:3e:c4:81:
26:9d:7e:01:cb:05:93:28:11:75:c6:20:37:5d:a6:
aa:5b:27:32:66:3d:44:05:6e:36:1b:f1:b1:c8:af:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:B9:75:6B:04:2F:E6:11:3F:01:43:52:BE:31:D6:A3:24:46:26
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4je5dWsEL-YRPwFDUr4x1qMkRiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.10.0/24
45.13.180.0/24
62.197.136.0/21
89.33.85.0/24
89.39.163.0-89.39.164.255
Signature Algorithm: sha256WithRSAEncryption
67:7d:8f:5e:e8:db:2f:e1:12:75:5a:ad:9b:f5:a4:af:75:aa:
f1:ac:10:ce:01:fe:97:a2:c4:51:40:d2:18:28:2e:44:7b:ea:
a1:02:89:76:91:cc:45:db:f7:19:42:73:f4:61:bc:7e:a7:ca:
b8:e0:c4:aa:ea:b8:db:48:ae:40:70:9b:19:2e:db:ca:52:7e:
6f:53:fd:64:48:5c:e7:07:e2:7b:85:4f:44:f5:46:f3:9f:b8:
b4:b1:c0:73:b6:2b:42:9f:57:f4:fe:8c:52:77:3a:ec:a5:c5:
cb:4a:24:95:68:2a:f2:99:58:d0:c6:6f:ff:14:43:dd:87:00:
8a:45:84:d2:2b:d0:38:6a:e2:8d:50:7e:ab:89:87:a0:c3:ed:
86:c9:bf:60:87:ea:14:1d:47:be:09:4c:3d:6e:c7:8d:c4:45:
7e:ea:ff:84:a6:89:04:38:e0:be:a1:ce:ce:56:7d:d9:dc:4c:
35:63:c8:c2:c9:7c:54:aa:d5:ef:73:a2:2a:c8:3c:f4:c8:ea:
4e:19:81:ec:65:0d:a8:96:0b:bf:6c:8e:02:5c:16:6d:a5:5e:
31:7f:35:16:9c:4f:2f:91:b9:74:e8:c6:31:e7:bb:3a:ba:eb:
21:de:4c:f3:2f:7f:e2:92:c2:05:49:cd:51:32:ce:bc:8d:d9:
96:5f:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:43 2026 by rpki-client