Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nIqngnN8j-7MSKyZIg6J52vA5Ms.roa
File: nIqngnN8j-7MSKyZIg6J52vA5Ms.roa (raw, json)
Hash identifier: ECpoxbpaGIKSg6zlPMrP/eGRehKDPQde5684ePqGS40=
Subject key identifier: 9C:8A:A7:82:73:7C:8F:EE:CC:48:AC:99:22:0E:89:E7:6B:C0:E4:CB
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019FAA49DA01496D8FD042F18F2AE8FFDB19
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nIqngnN8j-7MSKyZIg6J52vA5Ms.roa
Signing time: Tue 28 Jul 2026 19:53:14 +0000
ROA not before: Tue 28 Jul 2026 19:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 45.14.244.0/24 maxlen: 24
45.140.145.0/24 maxlen: 24
45.140.146.0/24 maxlen: 24
45.150.65.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
185.234.247.0/24 maxlen: 24
194.39.110.0/24 maxlen: 24
2a0e:4000::/32 maxlen: 48
2a0e:4001:20::/44 maxlen: 44
2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:49:da:01:49:6d:8f:d0:42:f1:8f:2a:e8:ff:db:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 28 19:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c8aa782737c8feecc48ac99220e89e76bc0e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:55:21:3c:ff:98:70:2c:d1:ea:d6:28:90:
bf:79:e6:51:58:0d:51:47:f4:98:ac:85:21:53:3a:
4f:ae:07:39:3a:08:75:64:2b:4d:86:b9:d9:2d:8a:
18:9a:57:9d:8e:e8:5f:26:ee:53:82:b7:7d:64:3a:
b3:fd:fb:d9:89:46:18:56:33:76:af:5c:2a:d1:19:
81:10:8c:18:fb:6f:21:af:ff:57:20:3a:b3:22:e9:
20:03:ca:5f:70:a6:84:29:af:4d:fa:6d:8e:8d:08:
be:8f:25:69:40:6e:41:80:bc:9e:fc:4a:ca:08:67:
c0:e5:af:f0:a3:bc:a7:d0:6b:65:a4:88:4b:03:89:
78:d2:88:91:9a:00:ed:09:98:0e:9c:5c:ab:60:20:
23:30:25:36:c4:d1:c4:04:27:81:c8:1e:95:7c:7e:
3e:ea:4a:6f:9c:46:ca:13:5e:05:42:97:21:e4:9f:
87:d9:f9:b3:15:d1:a1:3d:bc:27:aa:91:ec:8e:72:
9b:cf:13:a3:d1:7b:f6:9a:25:84:9a:e2:99:79:82:
3a:36:be:c8:b3:e3:dd:f3:25:af:71:b5:01:17:33:
86:8e:c4:fa:7d:e0:fa:c5:8d:8f:3d:6b:b0:dd:c4:
61:64:7d:53:f0:92:9d:be:e4:da:d5:51:e4:a5:71:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:A7:82:73:7C:8F:EE:CC:48:AC:99:22:0E:89:E7:6B:C0:E4:CB
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nIqngnN8j-7MSKyZIg6J52vA5Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/24
45.140.145.0-45.140.146.255
45.150.65.0/24
91.194.11.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
185.234.247.0/24
194.39.110.0/24
IPv6:
2a0e:4000::/32
2a0e:4001:20::/44
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d8:dc:1a:6d:16:b8:0a:ef:cf:40:34:f8:c1:0a:69:f5:c7:
08:e5:0a:6f:43:58:e9:27:58:17:0f:5f:d0:f4:19:88:77:b6:
ab:51:e9:ca:06:37:9c:16:ee:5e:b8:52:95:32:ee:0e:e9:9d:
cb:75:bd:8a:ff:01:f1:b6:ed:0c:09:fc:a5:98:08:1d:f0:5b:
1b:c7:56:a0:45:22:1e:03:c8:26:a3:b6:ad:58:d6:16:cd:fc:
66:76:5b:0d:63:04:a5:39:67:46:50:88:1d:67:67:63:15:e2:
e3:51:6a:a9:f0:a8:0d:3f:8a:82:6a:e7:d4:2b:f1:89:73:5f:
11:9e:8b:52:a1:70:dd:0a:a8:0e:57:53:f2:f9:36:e0:d9:3f:
e5:a9:17:ed:8c:d0:c9:69:e8:1d:49:5b:52:c2:a7:8f:eb:5b:
e9:f5:77:af:d3:cf:77:39:f0:ac:98:e2:fb:8a:be:8b:7c:df:
12:cd:3e:64:83:de:d4:28:72:10:bc:8a:d8:b8:7d:f3:1a:a4:
bf:12:f2:f9:4c:19:9c:11:e4:43:c8:d1:40:7c:e2:c5:ee:38:
11:5f:c0:9d:46:d5:37:e3:1d:63:ae:f7:9e:03:3e:99:be:7e:
b4:d9:3b:4a:d4:ca:f8:3d:84:8f:e0:30:22:91:04:44:45:0f:
93:33:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:47 2026 by rpki-client