Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/w4zQHGtjV3nNfKRaPQ_cKstrLbw.roa
File: w4zQHGtjV3nNfKRaPQ_cKstrLbw.roa (raw, json)
Hash identifier: jH5tsFgtgFM5vPIFO54CWH+y+PhLaA7oxXCBBRVwuWA=
Subject key identifier: C3:8C:D0:1C:6B:63:57:79:CD:7C:A4:5A:3D:0F:DC:2A:CB:6B:2D:BC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019CAE13ED8C898E788B566B07E58D3D1D0F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/w4zQHGtjV3nNfKRaPQ_cKstrLbw.roa
Signing time: Mon 02 Mar 2026 10:24:27 +0000
ROA not before: Mon 02 Mar 2026 10:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 84.245.17.0/24 maxlen: 24
84.245.22.0/24 maxlen: 24
84.245.23.0/24 maxlen: 24
87.101.0.0/24 maxlen: 24
87.101.1.0/24 maxlen: 24
185.227.74.0/24 maxlen: 24
185.227.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:13:ed:8c:89:8e:78:8b:56:6b:07:e5:8d:3d:1d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 2 10:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c38cd01c6b635779cd7ca45a3d0fdc2acb6b2dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:7f:83:75:b2:4e:e3:08:d3:9a:ba:3e:6a:
03:d8:36:10:8a:cf:bf:ab:cb:92:fd:48:25:b3:6d:
a9:ed:97:ef:63:fa:83:35:52:fd:16:c9:2c:ac:af:
93:1d:03:1d:38:97:53:52:87:6f:ff:12:fb:19:ff:
1d:c2:fa:ef:b5:70:0f:e9:12:13:54:97:a0:b8:72:
e2:ed:a2:4d:af:57:85:60:ef:96:15:27:d4:af:96:
fd:33:78:50:ef:c0:47:98:d6:ea:6c:cb:22:89:62:
6c:1c:49:d0:0b:eb:57:3a:31:02:5a:30:7a:a7:b0:
bf:e5:dc:37:68:77:fa:82:2e:5c:69:96:5e:59:fe:
63:9a:04:a0:b6:cb:88:73:cd:ae:85:91:5a:0d:14:
3a:31:df:48:7c:04:72:6e:cb:5e:eb:24:b8:9f:48:
f5:45:76:dd:63:71:b7:8c:13:4a:6d:a8:5a:cb:63:
81:e6:95:5a:a2:5d:b7:34:59:6f:d6:a7:39:67:49:
89:03:5b:b6:d5:ff:e7:b4:16:be:68:dd:c1:92:ce:
88:54:bf:84:59:d9:7c:90:42:d3:8c:b5:21:cf:55:
da:69:d0:a0:c9:fd:91:c4:63:01:ae:c2:fc:30:b6:
69:53:70:6c:0d:a5:a6:e1:26:1f:d6:28:26:de:28:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:D0:1C:6B:63:57:79:CD:7C:A4:5A:3D:0F:DC:2A:CB:6B:2D:BC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/w4zQHGtjV3nNfKRaPQ_cKstrLbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.17.0/24
84.245.22.0/23
87.101.0.0/23
185.227.74.0/23
Signature Algorithm: sha256WithRSAEncryption
77:16:94:76:35:81:56:c8:c0:2a:a5:69:0e:37:65:9e:81:37:
ff:40:e3:b2:4b:9e:cf:cc:b4:6f:bc:52:d0:35:bd:42:89:ff:
3b:c1:54:6a:e6:f4:fe:c0:98:09:d7:4f:41:b9:ab:da:c9:47:
ac:79:f0:c9:d8:46:1f:fa:59:2f:64:f7:fa:d5:34:4a:51:af:
a6:f4:4c:8b:0a:2f:47:c9:c4:d0:96:d1:f3:a3:71:e6:a5:64:
80:fd:6a:02:7d:93:0b:a5:07:6e:bd:fa:d8:70:08:2a:ba:c5:
17:7c:ed:a5:e0:2a:b4:63:81:47:a3:32:7f:10:54:76:00:33:
fb:28:2a:e4:39:89:78:b4:e9:0b:56:66:83:32:56:cb:2e:2c:
6e:2d:0d:d4:4e:e4:90:b1:ea:13:cb:7f:52:7e:c6:30:6c:e0:
ec:4c:66:ff:0f:9b:0b:c5:ff:8b:a7:ef:d8:56:e8:51:85:14:
ad:d9:71:87:f8:de:d5:93:44:a9:b6:6f:61:76:1d:10:2c:29:
32:cc:b6:ed:b8:21:d2:95:9e:f2:ec:5d:c3:0c:a0:eb:5f:88:
62:66:7f:de:fb:fa:92:70:bf:7f:94:b6:88:92:8e:de:97:53:
c3:fd:7b:51:53:c0:ae:48:3c:f4:bc:fa:a3:73:15:85:ac:2c:
1a:6f:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:41:29 2026 by rpki-client