Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/nuCtXwBH5F94Zw9YHMzIbXOThro.roa
File: nuCtXwBH5F94Zw9YHMzIbXOThro.roa (raw, json)
Hash identifier: kJo5JQ91VJiREQFeAPpHUzqYHVPLpsKzSSOXriDxweA=
Subject key identifier: 9E:E0:AD:5F:00:47:E4:5F:78:67:0F:58:1C:CC:C8:6D:73:93:86:BA
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019DCD9413E100F96687CD3593770C573CB5
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/nuCtXwBH5F94Zw9YHMzIbXOThro.roa
Signing time: Mon 27 Apr 2026 06:15:26 +0000
ROA not before: Mon 27 Apr 2026 06:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.108.81.0/24 maxlen: 24
91.108.83.0/24 maxlen: 24
93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:94:13:e1:00:f9:66:87:cd:35:93:77:0c:57:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Apr 27 06:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ee0ad5f0047e45f78670f581cccc86d739386ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:06:51:67:ac:2d:2b:04:64:10:2e:fe:2b:
9a:2e:87:df:b5:54:e5:86:6a:4c:6c:31:66:03:b4:
c6:62:45:be:c4:9a:06:2a:60:e6:ff:97:20:d3:ad:
92:40:a8:ea:07:1d:fa:ac:66:78:83:0f:10:0f:ea:
c8:3b:b5:74:c1:46:d5:a2:3a:cd:4b:c1:fd:18:f9:
1a:1a:fc:9e:ba:2d:83:8b:be:fa:e0:99:e3:58:89:
a6:b2:ef:bf:4d:61:f5:62:1f:e2:79:c7:06:63:01:
02:db:26:fd:69:05:5a:13:ef:c9:b4:ca:c1:82:2b:
2e:fa:74:4f:81:a2:34:05:6b:02:9d:56:63:b4:a3:
87:f4:11:48:46:4c:f4:53:f0:6a:99:3a:bf:e5:03:
35:57:23:38:54:eb:50:ba:b0:f7:d8:6d:ed:dd:95:
f1:6f:3f:53:30:5c:60:87:9c:58:7b:02:bc:6e:63:
1d:ae:cd:ab:44:7b:80:1c:e6:f9:3a:1a:78:f3:42:
f0:c4:ce:d0:7f:97:72:41:22:58:96:54:a4:f9:e5:
e1:ae:0f:74:f1:bf:64:ff:56:52:37:34:2d:b3:b3:
cd:ff:59:9c:78:21:c1:ba:c7:97:e4:eb:43:88:20:
06:52:65:41:80:30:93:d1:d1:3a:4c:f9:59:0d:a8:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:AD:5F:00:47:E4:5F:78:67:0F:58:1C:CC:C8:6D:73:93:86:BA
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/nuCtXwBH5F94Zw9YHMzIbXOThro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.81.0/24
91.108.83.0/24
93.127.160.0/23
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
1c:93:8a:c0:82:8d:f2:31:97:32:b5:69:95:a0:94:47:48:d0:
e6:9b:fe:18:58:6e:82:c4:d4:86:75:bd:fa:76:73:15:8e:9f:
8f:73:98:ae:da:5a:f6:2b:4d:7e:9e:14:03:05:be:4d:7f:c3:
cd:02:e6:03:7e:12:5c:f9:d2:f1:a3:ab:50:b3:27:a0:47:33:
6b:15:fd:58:61:78:87:09:d8:5c:02:22:11:a7:68:42:74:d7:
3a:02:84:e6:50:7e:89:aa:a9:43:7d:98:33:6e:d0:70:0c:43:
a9:45:99:b3:b6:83:fd:73:00:77:93:68:c2:db:8f:3a:53:af:
0e:a0:ab:98:7a:d2:29:83:6c:55:69:1a:72:88:69:0b:cb:89:
29:81:59:f2:2a:98:39:bb:ec:b5:61:85:3d:0b:c6:60:0a:d7:
91:0f:87:a2:6f:a7:29:27:9a:24:91:4d:95:a3:04:0f:ea:de:
57:88:6c:06:1e:ce:1a:eb:db:9e:d1:1b:5a:37:13:dc:11:09:
cd:fd:e7:b4:fd:c6:af:fd:74:d9:cf:12:4c:a0:d1:bd:ba:98:
58:83:bc:bd:3a:b7:f9:76:45:e8:a7:cf:3c:63:27:20:c0:06:
90:1a:32:ab:78:5a:fc:fe:1a:21:ea:ce:72:1e:18:91:5b:69:
d3:09:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:49 2026 by rpki-client