Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/NRkgaVVbGPlU9PRi7XOtROH8HCw.roa
File: NRkgaVVbGPlU9PRi7XOtROH8HCw.roa (raw, json)
Hash identifier: cjEd82kk/8w7HH0bDUYDKw8XlWkIMQ64dB85P9sX5Lo=
Subject key identifier: 35:19:20:69:55:5B:18:F9:54:F4:F4:62:ED:73:AD:44:E1:FC:1C:2C
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01A01A817A0EEB1FED1C67719C1B6EBE5F72
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/NRkgaVVbGPlU9PRi7XOtROH8HCw.roa
Signing time: Wed 19 Aug 2026 14:51:27 +0000
ROA not before: Wed 19 Aug 2026 14:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:7::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:127::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:197::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:227::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:247::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:857::/48 maxlen: 48
2a03:5000:858::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:81:7a:0e:eb:1f:ed:1c:67:71:9c:1b:6e:be:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 19 14:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35192069555b18f954f4f462ed73ad44e1fc1c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:f4:c1:c3:0f:a4:27:67:10:22:96:ce:99:
dc:26:99:9a:c4:25:90:cd:7f:7f:09:47:ed:87:71:
34:70:de:be:94:6d:2b:4a:c9:20:01:cd:73:7d:7c:
68:78:72:63:68:0a:7f:69:fe:e2:b9:8d:3a:8a:49:
cc:69:1d:a8:2e:69:86:23:04:49:39:95:ba:77:4e:
79:76:00:ca:8b:2a:c2:ce:2e:88:88:bd:b5:77:a9:
85:07:8a:e1:4e:ff:d1:a5:31:58:8d:81:c9:29:57:
42:47:ac:83:ef:43:9f:51:b4:1d:e0:21:ba:9c:75:
dc:a2:d3:75:6b:f1:03:6a:80:99:e4:7b:4a:af:29:
58:ea:35:0c:ab:12:94:3c:a6:49:64:ff:b8:fe:a7:
2a:b6:d4:b8:f8:1d:e8:9b:f3:cb:47:6f:06:fd:d1:
9e:18:16:31:d9:bb:ef:2d:09:da:b1:be:a6:d1:60:
3c:2e:eb:64:57:90:43:25:c1:10:e3:e2:f3:45:8c:
2b:6a:18:8a:13:43:09:7a:ef:97:71:e4:9c:25:18:
38:15:e9:6a:6a:14:5c:b5:05:b4:4a:29:ff:b4:0d:
1a:5c:27:bb:a1:da:76:7e:33:37:08:d8:08:10:21:
50:b3:54:5d:31:05:a1:37:81:c4:28:70:3f:f0:07:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:20:69:55:5B:18:F9:54:F4:F4:62:ED:73:AD:44:E1:FC:1C:2C
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/NRkgaVVbGPlU9PRi7XOtROH8HCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:7::/48
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:127::/48
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:197::/48
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:227::/48
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:247::/48
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:857::-2a03:5000:858:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7e:05:1b:cf:5e:a3:3a:15:2f:77:a6:5a:37:e3:c4:38:1a:e5:
99:0c:4a:96:0e:cf:23:eb:34:58:d5:64:7c:fc:28:6a:16:01:
db:72:0e:23:c0:9c:d2:d7:51:fd:5c:10:8c:6a:34:46:54:e0:
60:93:48:64:ea:54:d0:67:87:47:31:f5:e5:be:db:67:f4:9b:
6a:e5:8c:9b:14:f7:f4:24:fc:e0:5d:ac:aa:08:b1:a3:3e:cb:
fc:f3:0d:2f:26:d4:c9:d9:24:f1:83:a9:06:09:c6:d1:9d:82:
86:12:b3:60:76:12:fa:3c:5f:a4:92:40:6a:50:75:27:c9:55:
36:14:f0:03:bb:db:cb:27:7f:39:50:f0:b4:a6:a1:ad:11:f0:
a3:1e:ce:d0:2a:ab:84:5e:9c:2d:de:e7:63:bb:93:6d:58:e8:
be:5b:48:3f:36:ca:52:76:df:95:ce:dd:0c:93:67:b3:9d:d3:
5b:f2:9a:96:3e:f3:26:98:e0:0d:cd:7b:99:b6:92:8d:2b:91:
3a:fc:07:ba:57:93:ae:f1:0c:91:26:de:cb:01:c6:4c:84:1b:
ea:e8:76:ef:a0:22:32:65:8b:c4:a8:17:e8:62:23:af:c5:0d:
14:4b:71:28:21:18:fa:aa:54:f9:9f:31:7e:4b:78:32:ac:4d:
25:bf:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:32:47 2026 by rpki-client