Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Nxf3NkasjMg0O14imf-2yps-vpU.roa
File: Nxf3NkasjMg0O14imf-2yps-vpU.roa (raw, json)
Hash identifier: xfljJ5Vyp5z1tLD+OJmlXbvBFnkpN414It/vCe3yY64=
Subject key identifier: 37:17:F7:36:46:AC:8C:C8:34:3B:5E:22:99:FF:B6:CA:9B:3E:BE:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0F6E5044D7A64E14A8DAC11FEE8E523CE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Nxf3NkasjMg0O14imf-2yps-vpU.roa
Signing time: Thu 01 Oct 2026 09:56:39 +0000
ROA not before: Thu 01 Oct 2026 09:56:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
62.106.87.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.202.205.0/24 maxlen: 24
185.202.206.0/24 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.119.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e5:04:4d:7a:64:e1:4a:8d:ac:11:fe:e8:e5:23:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 1 09:56:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3717f73646ac8cc8343b5e2299ffb6ca9b3ebe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:84:69:e9:33:9e:ca:98:c7:4d:b1:e4:1e:
5f:20:9e:79:e1:b7:d6:02:48:ce:64:7c:8b:ce:ac:
66:6a:3d:25:42:74:fb:a1:8a:b0:4a:12:a3:8b:c5:
25:a2:62:ef:27:9a:7b:4f:14:b0:6d:17:05:2e:2e:
b8:3f:40:7d:04:61:4a:c8:45:93:9e:51:55:51:1a:
9c:57:74:49:23:5a:ac:b1:7c:e0:d7:f9:b2:24:f5:
12:b5:25:cb:a3:42:e2:9e:40:8f:0e:24:f4:05:0c:
3a:56:90:80:e2:b8:0d:b5:c2:cf:03:ff:49:41:38:
d4:3d:8e:b5:7b:23:c2:28:48:0e:ff:c3:8d:c5:ff:
8b:63:c3:7a:4f:ea:85:d5:7b:2f:d4:1a:03:5c:00:
da:34:dc:a3:a9:53:c1:da:54:06:19:de:80:6b:be:
48:fd:cb:b5:60:b0:74:bf:43:93:16:37:94:5f:45:
77:50:43:27:d9:7e:fd:b1:89:ce:86:1c:6c:bb:38:
a5:10:4f:6b:51:7b:5c:ca:ed:af:46:04:99:ae:40:
c8:d1:ba:20:85:ec:5a:27:df:91:53:d7:93:cb:e8:
a5:04:65:8a:5a:a2:61:be:20:5c:80:4a:f6:5a:0f:
1c:ff:b1:f0:52:c3:c5:01:fb:11:8f:53:ff:87:7a:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:F7:36:46:AC:8C:C8:34:3B:5E:22:99:FF:B6:CA:9B:3E:BE:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Nxf3NkasjMg0O14imf-2yps-vpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
62.106.87.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:82:12:39:fd:2d:32:f7:6c:b9:bb:35:91:c2:4d:2d:b5:e2:
fd:f1:74:69:36:c8:19:98:80:81:bb:1a:8b:33:61:6e:b2:1d:
e5:ec:f8:79:ca:b1:71:77:a3:22:ba:f1:55:8d:39:b5:1e:d7:
0e:f2:f2:d8:5f:50:41:86:5c:e1:22:41:75:9d:d1:22:54:a0:
38:8d:e6:67:1e:4e:2e:bd:ca:29:fe:67:34:e1:8a:c4:44:ae:
8f:d2:08:5d:38:72:ea:a8:d2:21:56:98:bd:27:85:fe:43:5d:
8b:62:9f:36:0b:ec:7c:47:ba:09:df:06:63:c1:16:52:1f:23:
5c:2a:83:04:ba:da:1e:2b:81:cf:99:f5:91:45:68:38:db:55:
bd:a2:c4:b0:2a:44:84:e9:c2:6a:8f:36:11:8f:37:94:85:77:
3d:54:b2:6c:b9:bb:08:cc:95:cb:b6:80:e3:6e:35:24:c3:a3:
04:9f:35:2c:a3:77:d1:89:a9:8a:27:ee:68:02:fa:5b:da:67:
a3:9b:8a:69:c0:b9:f0:d6:ee:8c:dc:16:f2:04:c5:2b:75:8a:
1e:24:86:27:65:e3:3b:1c:3e:52:c8:a8:b2:31:6e:65:f8:4c:
00:b4:38:0b:8e:b8:c9:36:c2:f5:7a:4f:f5:55:ef:14:a6:38:
37:53:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:37 2026 by rpki-client