Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dA9u2FfS0F0fRtZpDBdNR2XO08U.roa
File: dA9u2FfS0F0fRtZpDBdNR2XO08U.roa (raw, json)
Hash identifier: Q2uG/6XCjSs74AKsPACjuSeDU3UrnqQzRqPU0W4lBJ0=
Subject key identifier: 74:0F:6E:D8:57:D2:D0:5D:1F:46:D6:69:0C:17:4D:47:65:CE:D3:C5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A048D32742ADD30D9699D64A342A2658C3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dA9u2FfS0F0fRtZpDBdNR2XO08U.roa
Signing time: Fri 28 Aug 2026 14:43:12 +0000
ROA not before: Fri 28 Aug 2026 14:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.70.0/24 maxlen: 24
45.67.97.0/24 maxlen: 24
45.130.202.0/23 maxlen: 24
45.133.4.0/24 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
89.34.126.0/23 maxlen: 24
185.165.45.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
194.5.83.0/24 maxlen: 24
194.61.40.0/24 maxlen: 24
194.61.41.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
204.75.229.0/24 maxlen: 24
217.19.27.0/24 maxlen: 24
220.158.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d3:27:42:ad:d3:0d:96:99:d6:4a:34:2a:26:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 28 14:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=740f6ed857d2d05d1f46d6690c174d4765ced3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:f1:04:78:54:52:f1:80:f8:9e:a3:0d:72:
a7:2d:7c:77:b7:73:92:24:9c:22:c3:93:17:ae:b6:
d1:91:ec:32:5c:a6:ec:3c:f3:97:f6:1b:1b:8a:3a:
80:61:39:66:c7:e4:20:ed:dd:29:d7:39:ce:43:51:
67:be:33:9c:41:22:8e:29:a7:29:bc:fa:16:bd:c1:
a0:1c:d4:27:cc:05:b2:76:7f:61:b6:c4:f6:05:00:
ca:a6:fa:11:a2:a4:6b:b2:48:30:e4:83:2e:a2:83:
83:3d:d2:f6:45:81:63:d1:18:39:15:4b:7b:80:f5:
fa:9d:2d:24:a7:16:76:a8:21:6d:62:1d:14:c1:5c:
bf:f8:97:d0:b8:68:8d:79:8f:4e:5a:a1:bd:18:50:
7c:08:5a:a1:05:59:b5:6f:f4:4c:fe:93:29:46:c9:
2c:c4:d7:9f:5b:c7:0d:84:24:62:69:a3:a8:41:f7:
f7:bb:46:d6:ae:32:af:41:5a:2e:9f:1b:ac:f9:a9:
10:cc:52:33:00:b2:90:02:04:cf:02:86:68:21:da:
9a:5d:68:4f:1d:38:12:eb:79:7e:67:e1:e8:75:06:
21:47:72:a6:77:40:df:e4:2a:c8:e2:a4:12:80:0c:
56:24:eb:1d:eb:62:c5:88:eb:20:fe:87:2d:71:09:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:6E:D8:57:D2:D0:5D:1F:46:D6:69:0C:17:4D:47:65:CE:D3:C5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dA9u2FfS0F0fRtZpDBdNR2XO08U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.67.97.0/24
45.130.202.0/23
45.133.4.0/22
89.34.126.0/23
185.165.45.0/24
185.245.7.0/24
188.213.202.0/24
194.5.82.0/23
194.61.40.0/23
203.25.124.0/24
204.75.229.0/24
217.19.27.0/24
220.158.199.0/24
Signature Algorithm: sha256WithRSAEncryption
11:89:0a:6c:e4:fe:50:ae:8a:a9:f7:1c:a5:a6:54:37:56:77:
ee:ce:8a:19:ab:ca:dc:11:9e:15:0f:ca:61:70:69:cc:1e:07:
57:e2:f5:db:37:5c:5c:6d:83:96:4a:fd:3f:27:e7:74:45:06:
61:79:6f:02:52:f4:0f:be:69:76:8a:92:2e:23:5b:c3:29:1e:
16:5d:1c:8f:7a:47:d7:dc:66:6c:24:8b:82:7b:d7:e0:f4:ea:
fe:82:67:0e:6b:65:40:a0:9d:fb:a0:0c:38:9c:3b:6c:cf:43:
9e:99:61:91:af:c9:72:72:22:d5:eb:75:65:a6:fd:9d:40:f3:
c4:16:20:cb:5e:35:5d:43:1a:cb:2b:d5:03:e3:48:2f:09:c4:
b4:ee:b8:22:76:21:a1:f6:a9:e0:10:46:e5:25:0e:51:d1:75:
44:6d:b3:33:a7:44:5f:fb:fc:f7:f7:2f:68:63:1e:28:ef:69:
db:81:c0:e1:e4:1a:81:ba:ea:7c:8e:40:13:6f:65:d6:b9:db:
46:0c:cd:ce:b3:ff:ff:93:5a:31:77:b4:00:21:fc:34:8e:9f:
53:12:96:cc:9d:22:4a:e5:a4:29:2d:04:c5:f2:f2:be:4b:5b:
97:a9:00:db:81:b3:9a:ab:0e:1b:98:34:cc:df:f1:bd:12:a3:
3f:84:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:41 2026 by rpki-client