Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/nIgfPArQS9tv1SFmbcff1iaV-ac.roa
File: nIgfPArQS9tv1SFmbcff1iaV-ac.roa (raw, json)
Hash identifier: LmX0nAZ4dVW7pJ2OY2bERveF61BobTLkyj91uEdpXzc=
Subject key identifier: 9C:88:1F:3C:0A:D0:4B:DB:6F:D5:21:66:6D:C7:DF:D6:26:95:F9:A7
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 01A09EFB5823CFFB8D77875E5154BE6BBAC7
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/nIgfPArQS9tv1SFmbcff1iaV-ac.roa
Signing time: Mon 14 Sep 2026 08:14:27 +0000
ROA not before: Mon 14 Sep 2026 08:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4913
IP address blocks: 212.39.160.0/19 maxlen: 24
212.39.160.0/24 maxlen: 24
212.39.161.0/24 maxlen: 24
212.39.162.0/24 maxlen: 24
212.39.164.0/24 maxlen: 24
212.39.166.0/24 maxlen: 24
212.39.167.0/24 maxlen: 24
212.39.170.0/24 maxlen: 24
212.39.172.0/24 maxlen: 24
212.39.173.0/24 maxlen: 24
212.39.174.0/24 maxlen: 24
212.39.176.0/24 maxlen: 24
212.39.177.0/24 maxlen: 24
212.39.178.0/24 maxlen: 24
212.39.180.0/24 maxlen: 24
212.39.184.0/24 maxlen: 24
212.39.185.0/24 maxlen: 24
212.39.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:fb:58:23:cf:fb:8d:77:87:5e:51:54:be:6b:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Sep 14 08:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c881f3c0ad04bdb6fd521666dc7dfd62695f9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:72:1a:2e:8a:65:97:f3:41:c5:28:16:8f:
7a:b7:4e:47:6d:d3:90:3a:40:c0:c1:7a:3d:dd:81:
55:d2:fe:68:d6:20:bd:30:21:ff:cd:86:17:17:dd:
ca:68:e3:18:52:63:d4:9e:fb:4f:39:94:fe:b7:dc:
9d:14:bf:7a:6b:5e:25:f0:c2:e9:ed:0c:47:70:f9:
24:78:82:b2:d1:fa:57:b9:f4:06:f3:84:49:02:84:
5d:47:7b:70:ee:83:88:4a:17:1d:7d:c3:42:ac:1b:
ed:a7:04:a3:7f:d8:b0:d9:b6:e7:3f:24:d1:b0:2d:
e4:a5:b0:ee:34:94:f0:10:e5:7b:ca:89:8f:80:a8:
03:24:34:94:f7:6f:79:24:da:9d:f2:4f:32:2f:f4:
05:47:69:18:95:db:9c:be:e7:0a:0c:04:5b:0f:a2:
98:ac:48:45:cc:0d:15:1e:5c:38:c1:51:12:1b:c9:
e6:4f:32:e0:c6:2a:10:ed:fa:6b:21:9a:0a:f6:73:
2d:cb:16:5d:92:68:b1:5a:98:1e:bd:42:3c:aa:27:
59:e1:e3:bb:74:e0:8d:7f:ea:4f:16:d0:84:05:4b:
56:19:15:5e:72:bc:c1:e9:40:84:a6:73:8d:56:a2:
5e:f0:59:d4:e4:f4:6e:5b:f8:50:23:19:1f:fe:32:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:1F:3C:0A:D0:4B:DB:6F:D5:21:66:6D:C7:DF:D6:26:95:F9:A7
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/nIgfPArQS9tv1SFmbcff1iaV-ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:a9:2a:42:a7:df:d4:5e:13:86:6a:3e:87:20:87:b3:9c:8a:
13:50:e2:3b:42:3e:7b:32:7b:a2:55:2e:73:be:8c:2e:10:5a:
88:a9:e1:3b:2e:cf:f1:46:8a:56:96:9e:22:c6:ab:b7:91:74:
0c:00:d8:75:a6:14:9f:73:a0:90:c6:1c:9d:a6:d9:87:9b:04:
8b:1c:3d:05:59:ab:1d:c7:49:5d:19:53:06:1b:93:40:80:5b:
54:e3:8c:3c:a2:f8:ea:c5:a7:eb:15:7c:f7:55:59:86:09:9b:
0c:61:68:a8:1e:af:f8:07:b1:b3:77:57:3c:d1:22:ff:36:9d:
5a:6a:d9:0b:32:df:f4:56:27:70:9c:eb:43:f1:7a:23:16:3c:
7f:4d:e2:f6:cf:be:15:26:09:61:6b:0b:e5:2f:4a:49:22:d4:
5b:b6:3e:33:86:e3:95:32:d0:5a:be:31:b8:10:62:f8:83:1c:
9e:dc:ce:3b:b7:06:15:3b:81:bd:88:6c:04:d0:4c:de:97:a0:
d7:8a:ab:85:bc:b1:b9:7d:23:fb:9b:38:82:d4:bb:72:77:a3:
53:ad:ce:1d:60:df:2d:be:c6:b8:d0:33:d4:60:2b:91:73:8a:
23:f9:e1:f4:37:37:9a:da:49:d5:22:b4:c0:15:5c:31:f3:e9:
6d:5f:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:19 2026 by rpki-client