Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tDQSIKFvEvRn59_q_IAIZlNSwvo.roa
File: tDQSIKFvEvRn59_q_IAIZlNSwvo.roa (raw, json)
Hash identifier: mTibx63uoj6KdvaCn/kzolZBwl2yRZb9JNRrAXZOfY0=
Subject key identifier: B4:34:12:20:A1:6F:12:F4:67:E7:DF:EA:FC:80:08:66:53:52:C2:FA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0E7E848E5B25E73EA8DD093DE407E6FEB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tDQSIKFvEvRn59_q_IAIZlNSwvo.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6260
IP address blocks: 46.102.176.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
89.35.114.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
93.113.221.0/24 maxlen: 24
185.160.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:48:e5:b2:5e:73:ea:8d:d0:93:de:40:7e:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4341220a16f12f467e7dfeafc8008665352c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:33:84:6a:32:8b:59:03:bc:3d:c7:96:5a:
bd:d0:26:77:b3:9d:fd:ec:a7:3e:be:9c:8f:0a:71:
53:b5:2d:6b:43:29:94:c9:63:46:1e:3a:c4:73:1d:
41:7a:5f:33:8c:ee:30:f9:6d:be:88:36:6a:cd:af:
4c:a3:33:e6:ff:ee:ff:7a:7c:ba:77:04:86:ac:6e:
ad:1e:bd:7e:9e:bc:3d:b1:a3:75:a8:78:ba:6e:0b:
47:77:3f:85:ec:89:00:de:3a:f1:c4:87:e9:b5:62:
f4:af:fd:60:e1:7b:3e:87:99:f4:d0:64:34:2d:1a:
b6:02:31:d6:c4:3e:3c:fa:6f:af:62:19:b3:07:1b:
79:53:09:b7:7b:71:9f:1f:7a:d7:9d:61:6d:ac:b8:
47:6a:72:13:82:70:a0:ca:c4:11:a0:af:48:6a:34:
27:c7:1d:a4:f0:30:34:e9:1e:a9:e1:5b:fb:ef:fd:
54:0c:79:d7:53:49:3a:04:8f:89:bd:7a:26:5b:13:
84:59:77:92:8c:fd:87:0e:3e:d6:fb:e7:8b:cb:9e:
d9:fe:5b:b1:0e:e5:d1:85:4e:c8:89:60:b0:7f:cf:
5a:1b:b4:b8:67:03:e7:4f:bc:71:2f:35:95:fa:40:
a7:1d:f9:3a:3a:2f:9d:a2:51:a3:d3:1d:be:18:94:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:12:20:A1:6F:12:F4:67:E7:DF:EA:FC:80:08:66:53:52:C2:FA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tDQSIKFvEvRn59_q_IAIZlNSwvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.176.0/24
86.107.107.0/24
89.35.114.0/24
89.37.137.0/24
93.113.221.0/24
185.160.80.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bd:5f:52:7f:f5:7a:44:7b:78:04:40:eb:1a:ca:02:ed:c6:
9f:6e:56:03:b4:14:df:0e:05:de:4f:47:27:70:81:6b:02:37:
cc:2f:e4:82:b7:61:5e:1a:2c:34:ee:6c:a0:cb:bd:f7:15:07:
cc:ab:da:6e:d7:cf:07:c6:34:be:de:61:28:a0:fa:98:61:dd:
c7:79:68:b6:5e:75:c0:71:86:9f:05:4d:09:e0:46:5e:b3:70:
b9:72:f2:5e:f7:80:d0:34:69:70:0c:67:c2:b8:86:27:c6:ed:
63:b3:99:2b:dc:19:71:64:f3:a1:73:6b:25:9e:9c:be:1d:28:
a2:1c:6c:0a:fd:cc:d6:72:a6:35:6b:bf:19:f4:7b:04:57:4a:
80:6f:ee:8d:3c:73:65:ac:56:32:84:a2:8e:38:6c:18:77:e5:
ad:cc:4e:f8:28:d3:b7:cc:4f:81:35:5f:77:c4:1e:a2:0d:5f:
50:6d:39:1f:b1:4d:ae:39:9a:17:8c:47:40:78:1a:8d:02:07:
bd:02:0b:0c:2f:ce:a7:8b:11:8e:76:0c:eb:c1:fe:f5:fb:70:
71:fd:ac:d3:1f:3e:ec:d4:75:11:71:e3:2f:98:82:82:25:b3:
a1:f4:07:f6:3d:08:c7:50:b9:6b:99:6e:f2:ab:95:dc:b3:b6:
bf:45:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:11:46 2026 by rpki-client