Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ne-Yv8mvj6s2oz5qESWzOvwPq9o.roa
File: ne-Yv8mvj6s2oz5qESWzOvwPq9o.roa (raw, json)
Hash identifier: LhSZQNzvgOPV8AoHaeC/z/RQXZisRLq4FXThW+B/Vwc=
Subject key identifier: 9D:EF:98:BF:C9:AF:8F:AB:36:A3:3E:6A:11:25:B3:3A:FC:0F:AB:DA
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019EFB40983AD493BC8AACAFB16E0FADFA71
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ne-Yv8mvj6s2oz5qESWzOvwPq9o.roa
Signing time: Wed 24 Jun 2026 20:09:34 +0000
ROA not before: Wed 24 Jun 2026 20:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 80.242.57.0/24 maxlen: 24
92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
109.196.98.0/24 maxlen: 24
109.196.99.0/24 maxlen: 24
109.196.100.0/24 maxlen: 24
109.196.101.0/24 maxlen: 24
109.196.102.0/24 maxlen: 24
109.196.103.0/24 maxlen: 24
185.42.14.0/24 maxlen: 24
217.78.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:40:98:3a:d4:93:bc:8a:ac:af:b1:6e:0f:ad:fa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 24 20:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9def98bfc9af8fab36a33e6a1125b33afc0fabda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:33:6d:77:89:8d:9f:7d:f4:d2:13:04:c8:
d4:96:93:3e:5f:08:4f:16:10:6d:04:93:54:7f:65:
ad:87:2e:d4:4a:db:b9:d2:ca:7f:5a:5d:6a:3a:0c:
44:98:96:81:ab:1d:99:de:53:b1:0b:16:c2:fb:f1:
47:f6:5e:17:82:b4:52:7b:f3:be:26:fb:d1:14:9e:
eb:d3:4f:a3:4f:b5:82:90:a3:24:a7:2f:ae:dc:41:
41:97:6b:53:b1:20:0d:7a:7c:0d:b3:5d:92:2d:99:
25:1d:a9:1a:48:b4:cb:93:21:6d:97:fe:06:94:8d:
3d:95:92:10:97:3d:e9:8a:bb:5c:bd:ac:d0:c3:5b:
63:42:96:7b:b3:c0:4f:ae:a2:5b:8a:94:a9:4f:0a:
be:a0:06:84:8e:6b:ad:da:a5:41:77:e6:83:97:f9:
36:4b:7b:15:8b:f5:70:7e:20:ee:9c:b0:ea:95:f6:
45:89:3b:5b:32:eb:ec:18:df:5e:b3:a9:53:c2:03:
b9:a6:83:05:31:d2:3a:58:26:27:d1:db:50:06:80:
27:11:da:b9:76:d1:d8:96:cd:4d:bf:2d:e1:86:3a:
8d:21:61:3c:b5:ed:13:ee:49:4d:f9:28:8a:1c:96:
80:52:40:f1:d7:52:d8:16:e7:2e:00:1e:2c:38:47:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:98:BF:C9:AF:8F:AB:36:A3:3E:6A:11:25:B3:3A:FC:0F:AB:DA
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ne-Yv8mvj6s2oz5qESWzOvwPq9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.57.0/24
92.63.176.0/22
109.196.98.0-109.196.103.255
185.42.14.0/24
217.78.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:06:1e:7a:93:cf:26:b1:98:ae:88:b1:c6:69:94:04:26:d2:
e0:bc:46:d2:3f:bf:9f:c9:85:e7:3c:b1:eb:33:73:b2:3e:82:
9f:89:cc:7f:b1:57:f0:e9:0e:cc:24:e6:9a:6f:90:6f:ff:f0:
13:bf:53:20:f6:ad:49:50:1e:7b:09:cf:6c:85:b6:c1:3f:5b:
dc:af:66:80:46:b9:29:6e:b2:d7:06:f1:76:00:24:be:00:97:
fe:e3:cd:d8:ac:dc:c2:4e:42:f5:55:d0:54:1e:6c:dc:b5:b2:
0b:4a:1f:15:91:e1:0a:e9:09:90:e2:11:4d:c5:59:eb:9a:67:
1c:5b:96:67:52:df:4e:3e:d7:16:69:8a:78:c3:63:14:ce:42:
84:c2:8c:c7:79:19:ef:0e:a8:24:56:f2:05:1c:ab:0f:75:38:
8d:70:66:5d:70:ac:fd:ab:a0:1b:66:df:b8:3b:7c:01:0c:04:
8c:62:73:80:2e:bd:2b:a8:7b:3b:e2:c9:51:91:de:62:63:0e:
57:ca:4a:53:11:85:dc:4b:e6:47:b1:34:46:32:c0:a9:13:c4:
33:2d:1c:4d:5c:f7:78:8f:e8:40:f9:5f:a8:13:83:d8:12:0c:
8b:e5:e5:ba:8a:1c:2c:19:c0:e9:1d:b7:79:4e:38:c4:1e:f4:
90:62:f3:49
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ77QJg61JO8iqyvsW4PrfpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwNjI0MjAwOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGVmOThiZmM5YWY4ZmFiMzZhMzNlNmExMTI1YjMzYWZjMGZhYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9czbXeJjZ999NITBMjUlpM+XwhP
FhBtBJNUf2Wthy7UStu50sp/Wl1qOgxEmJaBqx2Z3lOxCxbC+/FH9l4XgrRSe/O+
JvvRFJ7r00+jT7WCkKMkpy+u3EFBl2tTsSANenwNs12SLZklHakaSLTLkyFtl/4G
lI09lZIQlz3pirtcvazQw1tjQpZ7s8BPrqJbipSpTwq+oAaEjmut2qVBd+aDl/k2
S3sVi/VwfiDunLDqlfZFiTtbMuvsGN9es6lTwgO5poMFMdI6WCYn0dtQBoAnEdq5
dtHYls1Nvy3hhjqNIWE8te0T7klN+SiKHJaAUkDx11LYFucuAB4sOEdmzwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJ3vmL/Jr4+rNqM+ahElszr8D6vaMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvbmUtWXY4bXZqNnMyb3o1cUVTV3pPdndQcTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAUPI5AwQC
XD+wMAwDBAFtxGIDBANtxGADBAC5Kg4DBADZTuowDQYJKoZIhvcNAQELBQADggEB
ALYGHnqTzyaxmK6IscZplAQm0uC8RtI/v5/Jhec8seszc7I+gp+JzH+xV/DpDswk
5ppvkG//8BO/UyD2rUlQHnsJz2yFtsE/W9yvZoBGuSlustcG8XYAJL4Al/7jzdis
3MJOQvVV0FQebNy1sgtKHxWR4QrpCZDiEU3FWeuaZxxblmdS304+1xZpinjDYxTO
QoTCjMd5Ge8OqCRW8gUcqw91OI1wZl1wrP2roBtm37g7fAEMBIxic4AuvSuoezvi
yVGR3mJjDlfKSlMRhdxL5kexNEYywKkTxDMtHE1c93iP6ED5X6gTg9gSDIvl5bqK
HCwZwOkdt3lOOMQe9JBi80k=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:36 2026 by rpki-client