Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/424CCN9QyDvL6fO6bZ7Xg6Fm46s.roa
File: 424CCN9QyDvL6fO6bZ7Xg6Fm46s.roa (raw, json)
Hash identifier: SHulRC6ks6gdnmfzG9uIHolgIjLc6fN1BcexLvRfVok=
Subject key identifier: E3:6E:02:08:DF:50:C8:3B:CB:E9:F3:BA:6D:9E:D7:83:A1:66:E3:AB
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01A033C4C1F748E8F068F6ECCE2774F0CF34
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/424CCN9QyDvL6fO6bZ7Xg6Fm46s.roa
Signing time: Mon 24 Aug 2026 12:35:27 +0000
ROA not before: Mon 24 Aug 2026 12:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4637
IP address blocks: 85.149.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:c4:c1:f7:48:e8:f0:68:f6:ec:ce:27:74:f0:cf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Aug 24 12:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e36e0208df50c83bcbe9f3ba6d9ed783a166e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:45:c5:8b:01:96:c7:5f:69:f0:97:29:e8:
d0:e9:bf:7f:4d:0e:66:be:83:cb:cd:da:5c:07:1f:
1c:f3:2c:fd:e5:c5:1c:ea:d6:24:30:b5:93:bb:4f:
27:e6:99:07:54:ac:50:6c:72:f5:c6:0e:54:63:4a:
88:28:46:41:41:35:87:3d:09:37:80:0a:42:d2:58:
9b:c2:45:7a:d6:b0:79:95:97:df:83:f6:a0:e4:fb:
f5:cd:25:f1:fa:ef:aa:64:87:2f:3b:cf:c0:53:a7:
c2:98:4a:f9:c0:76:0e:0c:b0:01:9c:81:8a:31:3a:
d5:48:79:d1:4b:de:36:52:0f:61:6b:2c:0b:03:fa:
32:1c:36:7d:dd:1c:a5:10:94:14:c1:bb:7c:17:6c:
4c:e5:c2:f9:fc:b6:b7:87:1d:f9:a8:04:3e:d7:6d:
43:34:0c:b6:24:4b:e8:1a:34:f5:b6:e0:15:da:25:
26:9a:71:2b:72:b5:b8:6a:6d:d8:42:91:23:4a:88:
13:3c:65:83:27:25:6d:17:55:af:17:eb:fa:80:31:
d2:73:2b:8b:0c:84:64:c5:6b:77:6a:db:54:b1:8b:
d3:c5:b2:92:7d:cb:10:c7:56:fb:e2:dd:25:df:e7:
63:f9:02:1e:1f:b6:4e:e2:61:18:67:55:d5:e1:6e:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:02:08:DF:50:C8:3B:CB:E9:F3:BA:6D:9E:D7:83:A1:66:E3:AB
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/424CCN9QyDvL6fO6bZ7Xg6Fm46s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.192.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:3e:78:11:4d:bb:44:73:de:49:38:df:92:3b:ef:c2:8d:ce:
2f:fc:43:08:af:86:2e:61:9c:ba:b7:60:50:33:8a:b4:7a:23:
04:7a:f5:a5:20:9b:94:b1:31:8a:59:44:68:92:f8:9e:73:49:
27:99:02:34:83:bd:86:f7:cc:13:8e:dd:38:6a:e3:0b:cd:a0:
cd:27:17:96:a8:c1:59:b9:7c:ee:2c:60:26:b5:8b:c5:6f:33:
11:d8:fd:df:56:71:fa:c1:ef:8f:58:9b:0e:ff:3a:c4:75:18:
83:7f:ed:77:c4:2b:be:a4:b1:a7:0d:8c:e7:e8:4f:da:bc:ad:
5d:8b:68:09:6e:39:56:e4:0e:3a:15:ad:8a:fd:51:96:02:26:
9c:e4:34:85:71:63:d6:28:26:4d:d0:c5:7e:e0:7f:ff:a7:c0:
ec:58:0d:61:d3:57:2a:75:32:af:0c:17:26:14:a6:35:7b:70:
74:97:3f:8c:3b:25:2c:56:a5:c0:23:0b:76:23:2a:79:6a:36:
4c:9f:cd:b6:ce:79:ed:8b:d9:cc:3c:21:2c:1c:58:3a:15:48:
e1:07:c3:e1:01:af:d0:e8:12:91:57:23:12:c5:77:05:de:e5:
16:f4:4c:b5:8f:32:60:17:df:a6:c0:ed:48:bf:e2:d1:da:75:
ca:af:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:30 2026 by rpki-client