Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sXE_tH420p51pxWAwiTM5rSNNo4.roa
File: sXE_tH420p51pxWAwiTM5rSNNo4.roa (raw, json)
Hash identifier: iVFULr8i4hYVYPE2b//pZfBcnp7XG2SsKpujWFz8zfA=
Subject key identifier: B1:71:3F:B4:7E:36:D2:9E:75:A7:15:80:C2:24:CC:E6:B4:8D:36:8E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0E7E849961269452C40A4B3D0A864F66E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sXE_tH420p51pxWAwiTM5rSNNo4.roa
Signing time: Mon 28 Sep 2026 12:05:55 +0000
ROA not before: Mon 28 Sep 2026 12:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11194
IP address blocks: 46.102.176.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
89.35.114.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
93.113.221.0/24 maxlen: 24
185.160.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:49:96:12:69:45:2c:40:a4:b3:d0:a8:64:f6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 28 12:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1713fb47e36d29e75a71580c224cce6b48d368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:05:10:48:bd:9f:6d:6c:f5:34:8f:13:dd:
b3:c7:a4:f7:30:a3:25:be:59:bf:42:69:3c:41:bb:
45:94:b5:40:d3:6c:d4:24:7f:ee:99:88:28:77:2a:
11:76:6b:55:2a:7e:27:3d:c0:36:4e:8f:fe:68:ab:
44:45:3e:04:c7:75:6a:1e:92:9f:70:17:a4:af:97:
e5:83:13:c7:e2:71:b3:92:7e:c4:5d:85:cf:ea:44:
22:6e:ba:6e:c6:c8:38:88:23:03:1c:1b:36:a8:6b:
ea:e9:e0:aa:27:32:f7:de:1c:03:e4:f2:82:cb:4f:
1d:ab:0d:ab:00:02:98:df:b6:37:f4:45:1a:24:ca:
02:7d:dd:ac:10:63:b5:9b:33:da:18:95:97:6f:f1:
3d:47:3a:5b:58:29:31:03:a1:e9:e3:17:6d:80:15:
0a:21:4e:b9:51:32:57:68:66:b8:1c:d0:73:52:e8:
42:3d:88:41:c5:bc:2f:a6:eb:d4:1e:76:a9:2f:7f:
9f:77:16:01:b3:8b:25:6f:92:e7:00:fe:86:8a:ae:
5f:0f:d3:24:e9:66:89:a1:ec:ff:c5:33:3b:cb:5e:
d0:da:fb:25:5a:81:9c:31:25:61:43:6c:da:00:d6:
86:ad:f8:03:03:db:13:04:1f:c7:cb:eb:9e:5b:07:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:3F:B4:7E:36:D2:9E:75:A7:15:80:C2:24:CC:E6:B4:8D:36:8E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sXE_tH420p51pxWAwiTM5rSNNo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.176.0/24
86.107.107.0/24
89.35.114.0/24
89.37.137.0/24
93.113.221.0/24
185.160.80.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a4:a1:7e:02:15:d6:a7:b4:7a:03:d2:56:bd:47:5a:3c:aa:
c2:f7:f7:7c:f9:ac:51:a4:d0:35:b8:9f:82:8f:ad:8e:ca:37:
3a:21:f8:4e:8c:a5:1b:0b:98:bb:56:09:9a:c0:1c:fc:de:a9:
f7:d4:a1:79:2c:4b:19:eb:59:0e:13:e3:88:f0:73:1a:c6:a9:
2a:f6:e0:88:9a:e2:0f:be:37:7c:b5:ec:3f:86:fe:01:f7:73:
01:11:e1:24:32:8b:a3:5f:64:10:5b:19:86:84:eb:87:d8:6b:
06:b1:9e:67:28:82:52:ea:a9:6e:b8:ea:4b:fa:14:97:e8:c1:
3b:91:58:1c:e5:00:ec:c9:58:0a:3a:b5:31:62:04:8a:42:35:
b6:96:ea:6f:09:f6:85:5f:1a:86:b7:29:f7:0a:fd:db:51:ae:
1b:ca:1f:4c:ab:be:3d:12:49:17:d0:d2:2d:2c:2a:1c:7b:f4:
14:eb:e3:79:3b:8d:46:53:61:be:72:9b:38:c8:66:2d:29:e0:
52:a3:a4:3a:46:c3:de:f9:2f:e5:5f:cf:c7:de:44:ea:3c:c2:
19:d7:90:71:f6:76:4b:18:73:4e:ba:c1:33:77:18:55:a2:4f:
45:8c:64:0a:79:29:fe:c4:b1:d2:54:57:f8:fe:dd:80:2a:54:
07:87:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:59:37 2026 by rpki-client