Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/16Np4JNZv6v2ZaABJcy2sCql7pI.roa
File: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (raw, json)
Hash identifier: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=
Subject key identifier: D7:A3:69:E0:93:59:BF:AB:F6:65:A0:01:25:CC:B6:B0:2A:A5:EE:92
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019CEB9454C087A0C9457D948E6B7FD0C530
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/16Np4JNZv6v2ZaABJcy2sCql7pI.roa
Signing time: Sat 14 Mar 2026 09:01:32 +0000
ROA not before: Sat 14 Mar 2026 09:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 91.217.166.0/24 maxlen: 24
185.136.135.0/24 maxlen: 24
2a05:9080:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:94:54:c0:87:a0:c9:45:7d:94:8e:6b:7f:d0:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 14 09:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7a369e09359bfabf665a00125ccb6b02aa5ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:45:2d:dc:65:c0:04:4a:38:0d:f5:ed:5c:
01:eb:85:5e:b5:99:15:71:79:7b:ae:04:ce:6e:09:
9f:27:fb:f7:b4:45:24:8e:1d:37:46:c6:99:94:0f:
13:9f:41:cf:4b:22:aa:07:ad:2c:d6:d8:64:ee:0e:
46:d0:1e:40:82:07:e4:69:b5:32:8b:24:3f:45:14:
1f:a1:dc:d9:60:f4:2b:5d:31:4d:ce:e5:58:8a:27:
b4:88:b8:08:ff:b5:44:00:f8:03:d6:32:d1:85:05:
c0:7f:a7:0c:03:31:16:5d:2a:53:20:0f:27:c7:76:
56:8c:77:2a:93:34:48:9b:9b:fa:aa:9a:d2:f3:3b:
ec:f5:58:db:22:f0:eb:23:74:10:00:8e:9a:27:f5:
5c:75:fc:69:44:40:1d:18:cd:71:d1:be:d7:a7:ea:
d6:3a:6e:f2:77:2b:c8:06:62:72:59:60:a5:9a:d2:
90:71:f2:26:45:18:2f:e6:9b:a1:ce:c5:1a:0d:fb:
70:67:40:de:3b:27:d8:01:cc:db:e8:e1:c4:25:97:
fd:35:48:47:ec:b1:8b:12:dd:d7:d3:09:14:a2:ce:
93:38:83:ff:87:10:34:6e:43:36:b6:c7:13:7f:73:
e7:21:f8:66:48:d2:85:c1:d7:33:c1:f3:da:c7:8b:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:69:E0:93:59:BF:AB:F6:65:A0:01:25:CC:B6:B0:2A:A5:EE:92
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/16Np4JNZv6v2ZaABJcy2sCql7pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
185.136.135.0/24
IPv6:
2a05:9080:12::/48
Signature Algorithm: sha256WithRSAEncryption
a8:90:ac:9d:46:91:3d:94:12:a1:3c:45:0f:8d:b5:b2:5b:23:
26:c3:5a:f0:17:f0:44:ea:5f:1c:3e:85:ae:dd:b8:85:77:a4:
56:1b:16:54:34:f8:3b:d9:8f:57:41:f1:b3:a1:e9:6f:83:aa:
5b:9f:3f:cd:c2:c5:04:c8:d3:12:fe:34:23:10:9a:87:20:78:
cb:3a:9c:e0:1b:7d:e6:3d:be:6f:0b:ef:44:7a:75:db:41:f9:
8e:a0:4f:c1:06:9a:28:31:a2:27:a1:a8:77:65:92:b6:06:2d:
59:fb:cb:2a:15:75:bf:0b:28:b8:b5:f3:17:97:c0:b2:f4:37:
b2:92:75:4c:12:7e:ab:1d:bb:a3:5c:28:1a:e6:f1:f4:81:09:
e9:30:c9:a0:96:53:40:30:fb:64:72:13:be:4f:f4:47:e5:c4:
57:02:d3:df:2a:22:4f:e2:d7:e0:d7:15:c6:7a:a0:4b:9a:d4:
87:d8:c0:73:b4:e8:76:78:bd:b1:2b:cd:20:9b:17:1f:8e:be:
35:53:65:a2:5d:f8:65:b8:e6:16:50:b0:78:af:2c:18:25:e9:
97:77:34:c0:c5:5f:d3:f8:44:25:63:6b:55:5d:0e:14:33:18:
ab:ab:a3:06:2e:88:f3:f4:b6:1f:12:ac:3a:fb:15:40:fb:14:
79:8a:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:08:54 2026 by rpki-client