Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/C_DPGvbShuNkuPtQa5D5z3U0sBg.roa
File: C_DPGvbShuNkuPtQa5D5z3U0sBg.roa (raw, json)
Hash identifier: 7zXIVZv/c5nT9oa2E7UiiMsV6evchlb/co1C+5xkQ5A=
Subject key identifier: 0B:F0:CF:1A:F6:D2:86:E3:64:B8:FB:50:6B:90:F9:CF:75:34:B0:18
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FCBD9CB942C29CCD3E54D5F136C013A64
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/C_DPGvbShuNkuPtQa5D5z3U0sBg.roa
Signing time: Tue 04 Aug 2026 08:17:55 +0000
ROA not before: Tue 04 Aug 2026 08:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 45.146.186.0/24 maxlen: 24
89.39.162.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
185.205.191.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d9:cb:94:2c:29:cc:d3:e5:4d:5f:13:6c:01:3a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 4 08:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bf0cf1af6d286e364b8fb506b90f9cf7534b018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:c8:09:e4:79:ff:25:ef:49:03:f4:00:7f:
48:c5:d5:0f:56:e6:44:38:ee:df:a5:ea:67:96:d2:
c0:99:e7:60:44:1a:22:14:5f:b0:94:f9:63:e3:39:
35:a1:bd:4a:7c:48:40:22:80:7f:d9:35:41:d6:80:
37:fc:97:f4:01:a5:14:4d:71:ad:e9:30:b8:b3:6a:
76:58:75:bd:79:8e:45:20:d9:e5:b6:ca:3e:24:f2:
c8:05:68:8d:67:9a:84:fc:ff:9b:15:60:d7:6c:9b:
04:b3:37:4c:b4:28:d6:b0:70:69:5e:2a:6d:ca:6f:
ac:e0:69:c3:46:7d:c4:bd:d9:1e:41:c3:ae:b1:dc:
aa:10:a7:42:d6:23:6b:e5:ec:47:9b:e5:31:85:cc:
27:3b:10:85:21:be:3c:ab:91:d1:cb:24:f8:ce:fe:
42:bb:21:27:1e:41:41:d2:62:1e:98:50:9d:df:bd:
b4:26:18:9a:49:43:8f:f5:e0:fd:df:0b:d5:2d:f0:
57:2c:ec:98:96:ac:9a:14:08:0e:c9:6f:f7:95:81:
00:36:d8:40:cf:1b:8a:42:a1:1c:10:6d:39:68:27:
9c:a3:3e:9c:20:a8:85:ef:02:cd:f8:d6:04:29:e4:
cd:ef:c7:63:b5:7f:d4:43:19:7e:4f:c7:b2:37:15:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:CF:1A:F6:D2:86:E3:64:B8:FB:50:6B:90:F9:CF:75:34:B0:18
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/C_DPGvbShuNkuPtQa5D5z3U0sBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.186.0/24
89.39.162.0/24
91.190.108.0/22
185.205.191.0/24
188.212.155.0/24
188.241.182.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
46:c0:b6:ef:b2:08:a5:2b:7d:e7:ee:a6:5b:bc:68:a9:99:f5:
0b:7b:23:d8:ec:bf:de:40:d5:18:30:00:9e:53:ab:a0:d4:70:
62:89:b7:2c:28:47:03:a5:8e:ee:bb:a6:89:e2:1e:5c:4c:52:
0b:c5:f1:40:a8:1f:d4:6d:7e:47:0a:8e:8a:50:5c:87:3e:4a:
03:90:af:56:5c:02:06:b9:9d:19:c1:85:81:26:d4:9e:61:d1:
88:a5:1a:31:8a:3b:11:1c:1a:de:59:6a:90:f3:66:19:6d:57:
82:c6:44:55:74:52:83:5f:d4:13:62:39:c8:fe:c0:5f:a6:b5:
a2:37:d0:c1:d6:f8:45:46:77:45:27:53:f7:3d:4c:55:c6:86:
f4:c5:cf:92:3b:88:e9:e1:4a:21:af:89:68:2b:dc:8a:16:4e:
86:f4:a1:51:81:5f:bd:af:24:2c:7d:17:52:fb:f3:ff:f9:2c:
ca:98:91:ad:05:20:3e:9c:02:6e:c7:a0:62:02:0a:15:0a:c4:
a8:ba:bc:a2:f9:f0:ca:c7:41:64:5f:ab:a9:9c:7c:c5:a9:1e:
0f:77:7c:c7:1f:39:e8:ab:7a:26:39:cc:bf:b2:a6:ab:4c:0b:
0b:fd:a9:bd:44:e4:00:23:1e:b9:65:cb:81:03:1e:7c:cd:9f:
05:2d:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:42 2026 by rpki-client