Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/nOxVbejcHuHuHoTF-NQdqgliuso.roa
File: nOxVbejcHuHuHoTF-NQdqgliuso.roa (raw, json)
Hash identifier: Ncxtqa1hQQQSZkxvpD3ovLg6zz4yB7Gi82lvCmMom6M=
Subject key identifier: 9C:EC:55:6D:E8:DC:1E:E1:EE:1E:84:C5:F8:D4:1D:AA:09:62:BA:CA
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0F7575B67A96D327A76E091108A128F2B
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/nOxVbejcHuHuHoTF-NQdqgliuso.roa
Signing time: Thu 01 Oct 2026 12:01:32 +0000
ROA not before: Thu 01 Oct 2026 12:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.7.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.18.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:57:5b:67:a9:6d:32:7a:76:e0:91:10:8a:12:8f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Oct 1 12:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cec556de8dc1ee1ee1e84c5f8d41daa0962baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:3b:a2:97:8a:f8:3c:62:e2:7d:d6:30:37:
2b:0d:e2:b6:19:cd:44:9a:91:b4:66:ac:3b:29:88:
77:67:b1:b8:82:6f:92:53:3b:6c:96:76:df:66:b5:
f0:c3:6b:03:ec:e7:ca:c5:a7:3e:e4:ba:7a:3a:cc:
46:40:45:6d:79:5b:f9:3f:bc:42:a5:64:1c:66:93:
d2:7c:4d:bf:9e:06:79:2d:35:b4:3c:07:9e:a6:46:
65:b7:3b:89:57:d5:40:2a:01:f7:a8:c7:c1:42:09:
6b:0f:26:36:90:7b:c5:e7:b6:f6:94:62:71:7d:39:
0a:4e:ea:f3:83:d6:ea:06:a7:db:7d:30:25:06:89:
c8:48:7e:f4:58:a4:94:af:51:ea:be:af:7d:a7:1d:
86:ad:6c:a6:5a:ca:84:35:fb:8a:8a:b5:f0:0d:cb:
a8:dd:32:09:a7:0a:d8:cb:83:bb:3a:ae:6f:dc:17:
c9:5f:80:e5:f3:6b:4a:35:1c:24:df:49:c3:b2:4e:
60:32:a3:e8:1e:e2:47:dd:21:b8:d9:5d:e9:28:b6:
8e:91:42:ac:66:0b:e7:e4:19:c7:f1:79:7d:9d:73:
73:24:e0:ca:4b:a2:08:eb:20:bc:8e:be:d9:53:45:
17:92:00:b9:b4:84:7c:51:a9:42:e5:48:40:01:d6:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:55:6D:E8:DC:1E:E1:EE:1E:84:C5:F8:D4:1D:AA:09:62:BA:CA
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/nOxVbejcHuHuHoTF-NQdqgliuso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0/24
194.143.207.0/24
194.143.209.0/24
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.200.0/24
195.114.202.0/23
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.4.0/24
213.220.6.0/23
213.220.11.0/24
213.220.14.0/24
213.220.18.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fd:e3:de:7b:47:be:27:82:11:32:76:a7:19:f5:d4:cd:dd:
5b:f3:f2:39:df:1a:78:bc:7b:ca:98:16:0e:ed:53:c6:f6:38:
9d:f6:37:86:23:a2:ba:22:72:6d:d5:44:17:ec:65:0a:4d:21:
34:99:b8:16:be:4d:38:ea:1f:cf:36:9f:3e:83:a1:91:04:b2:
8e:6d:8e:8c:4a:99:76:07:85:d6:71:ca:9e:00:18:7e:6a:2f:
d5:d1:8a:bd:3f:54:52:85:81:7e:30:d1:bf:4b:5d:05:b0:11:
ca:4d:52:7a:c0:bb:7d:78:fb:2d:d7:f1:ea:e8:b4:f2:d5:51:
fa:36:e2:81:f5:8b:42:41:d5:25:08:cc:a6:4c:a7:eb:7e:24:
36:75:f1:3e:7f:8d:ce:76:0b:82:b6:e9:4f:31:91:d6:93:b1:
1d:8d:f8:31:12:82:7e:ee:df:f5:8c:47:69:4c:e9:35:17:d9:
b5:3f:c6:39:63:ce:40:15:aa:81:af:61:1f:75:cb:87:9f:10:
7a:97:f4:ec:72:4a:b7:1c:4e:08:30:f3:46:9a:dd:9c:a4:bb:
0e:a5:45:81:4d:c5:a9:b9:4e:7c:07:3f:9d:06:8c:e6:cd:ec:
6e:61:ad:bd:9b:3f:58:81:a4:b3:05:8d:1b:02:6d:10:83:b8:
26:ec:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 10:00:16 2026 by rpki-client