Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cVcrCy8N3_dk-mW_NQBoeUuK7ME.roa
File: cVcrCy8N3_dk-mW_NQBoeUuK7ME.roa (raw, json)
Hash identifier: FGsVebvBEpKjtkw1DMwSNt3cMEkP4UoLoys4Z3kakyA=
Subject key identifier: 71:57:2B:0B:2F:0D:DF:F7:64:FA:65:BF:35:00:68:79:4B:8A:EC:C1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0668B289B96E9FD98E17F028E9EEB0BE4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cVcrCy8N3_dk-mW_NQBoeUuK7ME.roa
Signing time: Thu 03 Sep 2026 09:13:10 +0000
ROA not before: Thu 03 Sep 2026 09:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 5.181.114.0/24 maxlen: 24
5.183.226.0/24 maxlen: 24
45.9.92.0/24 maxlen: 24
45.9.184.0/24 maxlen: 24
45.10.186.0/24 maxlen: 24
45.83.29.0/24 maxlen: 24
45.88.20.0/24 maxlen: 24
45.88.22.0/24 maxlen: 24
45.89.36.0/24 maxlen: 24
45.89.38.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.2.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.138.0/24 maxlen: 24
45.143.54.0/24 maxlen: 24
45.145.46.0/24 maxlen: 24
45.146.187.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
87.247.148.0/22 maxlen: 24
89.40.160.0/24 maxlen: 24
91.190.96.0/24 maxlen: 24
91.190.99.0/24 maxlen: 24
91.190.104.0/24 maxlen: 24
91.217.250.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
178.239.205.0/24 maxlen: 24
185.184.135.0/24 maxlen: 24
185.205.189.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
188.240.75.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
2a0b:64c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:8b:28:9b:96:e9:fd:98:e1:7f:02:8e:9e:eb:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 3 09:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71572b0b2f0ddff764fa65bf350068794b8aecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:98:c4:e1:98:0b:08:49:a6:31:20:90:9b:
c6:57:fd:cd:a7:9f:d5:85:59:ab:1d:42:69:63:b7:
2e:70:7a:e4:c2:43:e1:03:59:bf:b2:52:5d:d5:3f:
53:5f:ad:96:a3:75:aa:27:41:bd:d0:bf:68:67:8a:
39:c3:fd:64:dc:3d:3e:73:e9:b1:dd:ad:d9:f7:c9:
5b:69:21:f6:b5:a0:4e:90:dd:b2:22:a2:f7:46:3d:
52:30:ef:39:39:8f:c8:5f:31:ea:57:95:15:43:78:
45:9f:b7:5a:fe:0f:57:ca:44:43:87:8a:4b:0d:d4:
c0:d0:5c:a3:f9:5a:3d:29:96:bd:1b:6d:aa:41:1a:
fa:dc:d9:f2:14:61:3d:2d:a4:8b:34:7d:f4:27:25:
d8:56:40:99:e7:87:19:09:3b:ae:14:63:f0:62:d0:
27:13:65:67:ad:6f:a5:96:b5:26:44:f4:6c:70:0f:
a2:22:ff:03:0c:df:84:34:82:c2:b6:fc:0f:9f:6a:
46:b0:13:cc:95:9e:93:47:3f:60:6e:5a:ac:6c:7c:
a4:0b:ab:67:93:c0:07:fe:b3:84:2e:25:28:70:88:
ec:81:ed:d4:cb:01:a9:64:3c:bb:de:62:0c:11:54:
5e:be:6a:b1:4a:2d:59:11:e3:d7:4a:ea:65:49:63:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:57:2B:0B:2F:0D:DF:F7:64:FA:65:BF:35:00:68:79:4B:8A:EC:C1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cVcrCy8N3_dk-mW_NQBoeUuK7ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.114.0/24
5.183.226.0/24
45.9.92.0/24
45.9.184.0/24
45.10.186.0/24
45.83.29.0/24
45.88.20.0/24
45.88.22.0/24
45.89.36.0/24
45.89.38.0/24
45.91.150.0/24
45.92.2.0/24
45.92.76.0/24
45.134.138.0/24
45.143.54.0/24
45.145.46.0/24
45.146.187.0/24
45.156.157.0/24
87.247.148.0/22
89.40.160.0/24
91.190.96.0/24
91.190.99.0/24
91.190.104.0/24
91.217.250.0/24
91.221.81.0/24
93.114.195.0/24
93.114.246.0/24
178.239.205.0/24
185.184.135.0/24
185.205.189.0/24
188.214.27.0/24
188.240.75.0/24
217.74.16.0/24
IPv6:
2a0b:64c1::/32
Signature Algorithm: sha256WithRSAEncryption
12:c9:4d:cc:a7:54:92:7b:32:43:d4:ed:53:e8:35:13:66:86:
3f:0b:49:20:5c:6b:7e:3e:fa:be:78:59:d9:4f:c5:60:0e:a8:
7f:9a:a4:b4:aa:2d:ac:4d:25:8a:2a:97:63:44:2a:1c:20:8d:
da:b8:b3:ff:4a:a5:8d:3c:db:b1:43:b2:2f:19:38:3e:d7:7e:
4b:4f:76:62:c4:22:35:d5:c1:f3:78:37:13:46:a6:57:a0:21:
4b:08:0d:9c:f4:15:1d:1d:33:33:41:8f:f8:14:e4:fd:11:a9:
f9:ec:d0:2d:24:6c:10:9f:20:d5:14:d8:b5:ba:5b:89:43:32:
c6:db:55:27:45:fc:98:86:cc:e0:2e:9a:b7:9d:ab:65:14:16:
fe:8e:c5:d2:55:1a:f9:b4:b3:87:dd:79:2e:e9:c5:0c:62:00:
a0:3a:e5:1a:5e:04:96:6f:a5:7d:4a:26:13:71:50:69:96:44:
07:65:f6:90:f1:c2:a8:e0:e0:47:9b:3c:ce:dd:38:57:eb:47:
1b:b0:4e:c1:fe:bd:b9:59:26:dc:10:91:69:3f:67:ce:c5:1e:
e6:3a:4b:49:56:f8:a6:90:31:ae:17:98:4e:29:9a:83:58:77:
79:d8:41:1c:9b:7b:57:ae:0b:ac:b1:4b:b9:68:84:1e:f3:69:
f3:aa:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:39 2026 by rpki-client