Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa
File: n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa (raw, json)
Hash identifier: FSpOuQ2nrISxfoUe3fSxdbkQG7z+i/gLxzEWx9TRdDM=
Subject key identifier: 9F:7F:E3:9F:8D:A7:0A:F6:03:CF:B9:78:06:FE:2B:38:94:0B:49:80
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019E8A8539CC696CCC4929694E0DAFE16873
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa
Signing time: Tue 02 Jun 2026 22:47:27 +0000
ROA not before: Tue 02 Jun 2026 22:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:85:39:cc:69:6c:cc:49:29:69:4e:0d:af:e1:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jun 2 22:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f7fe39f8da70af603cfb97806fe2b38940b4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:35:80:46:5a:28:70:7c:ca:22:d1:53:a5:
d4:db:9a:95:ea:35:29:0a:77:ae:1d:4d:29:20:79:
ac:c4:15:4a:c6:a2:6e:06:89:14:f8:a4:60:3a:80:
90:e6:f1:ef:6d:21:29:ba:01:ee:91:8e:40:c8:3b:
76:66:f8:bc:9b:12:cf:93:7c:26:dc:26:4d:19:b9:
57:2d:15:b4:d4:a0:60:fa:f8:1e:b5:d2:2c:a9:76:
b3:5b:15:45:30:96:79:95:30:70:2a:79:29:52:e3:
d0:ac:49:3c:ca:4c:25:ed:67:d3:d0:b3:1d:5f:ac:
3a:64:dc:ff:97:4b:5f:9f:f8:c7:a6:91:3e:1e:47:
18:52:e5:8e:e8:40:60:a1:62:c3:76:db:8f:31:58:
33:2c:e9:bf:3b:79:09:34:9f:49:39:29:f0:d9:ad:
1f:4a:4a:80:6b:ed:02:31:4e:c3:a2:62:74:68:e5:
b5:38:29:1c:20:6c:15:a3:7e:af:84:e9:e3:7e:c9:
b5:b8:ef:45:c0:ca:36:cd:08:99:a6:45:fa:7d:96:
29:2b:74:9b:93:ff:ce:7a:a3:01:bd:53:30:0a:a0:
1e:c0:f9:2f:a7:e2:46:6f:79:41:fb:95:d6:0c:47:
86:c9:dc:a1:26:5b:24:bc:02:73:b1:68:14:65:2a:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7F:E3:9F:8D:A7:0A:F6:03:CF:B9:78:06:FE:2B:38:94:0B:49:80
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:f2:22:b5:8c:d4:27:1c:5c:ac:ad:4f:bd:64:e9:7b:8e:04:
46:0b:17:d9:4c:bb:2e:5f:7d:9f:bc:bd:3f:91:5b:2f:3d:4b:
5c:72:f8:b9:4c:85:00:4e:d0:37:02:94:71:65:ee:e9:5f:10:
62:32:43:f0:d5:f7:62:92:ba:80:08:04:78:9d:51:a6:a1:94:
97:8a:6e:fd:f9:64:06:ca:a6:65:dd:00:ca:8f:69:fc:d9:7f:
52:a3:bb:36:c4:59:c2:7c:e4:7e:16:40:a1:27:04:1b:18:56:
60:78:65:6c:3f:e5:a9:28:e0:33:56:4c:d2:e7:5f:7c:c6:8b:
dd:87:70:db:35:2b:9a:7b:35:f0:9e:e4:2a:33:b9:7b:a4:ff:
d4:39:45:6e:0c:1b:46:6e:54:e6:b4:49:e1:37:1d:22:3e:66:
e9:8c:a6:f3:cb:14:f1:f1:44:12:e3:a6:37:c8:34:8a:ac:aa:
2a:78:ec:92:3d:e3:5f:72:0d:90:9d:6a:c1:68:2e:a6:f4:b5:
28:21:e0:04:08:d1:78:c4:0c:a5:d0:3b:19:dd:19:14:6d:e0:
e6:6e:a5:66:71:6d:ad:ff:57:2a:1f:d4:a3:23:f5:1e:72:8f:
28:16:bc:64:84:b1:dc:86:cb:32:6d:c5:24:51:36:53:aa:c8:
dd:13:5e:79
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ6KhTnMaWzMSSlpTg2v4WhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNjAyMjI0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjdmZTM5ZjhkYTcwYWY2MDNjZmI5NzgwNmZlMmIzODk0MGI0OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X41gEZaKHB8yiLRU6XU25qV6jUp
CneuHU0pIHmsxBVKxqJuBokU+KRgOoCQ5vHvbSEpugHukY5AyDt2Zvi8mxLPk3wm
3CZNGblXLRW01KBg+vgetdIsqXazWxVFMJZ5lTBwKnkpUuPQrEk8ykwl7WfT0LMd
X6w6ZNz/l0tfn/jHppE+HkcYUuWO6EBgoWLDdtuPMVgzLOm/O3kJNJ9JOSnw2a0f
SkqAa+0CMU7DomJ0aOW1OCkcIGwVo36vhOnjfsm1uO9FwMo2zQiZpkX6fZYpK3Sb
k//OeqMBvVMwCqAewPkvp+JGb3lB+5XWDEeGydyhJlskvAJzsWgUZSrPdQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFJ9/45+Npwr2A8+5eAb+KziUC0mAMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvbjNfam40Mm5DdllEejdsNEJ2NHJPSlFMU1lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzBpBAIAATBjAwQBVzpA
AwQCiR8EMAwDBAWJH2ADBACJH2IDBACJH/8wCwMDAZ/+AwQAn/4MMAwDBASf/lAD
BACf/lIwDAMEAZ/+ugMEBp/+gAMEAZ/+yDAMAwQAn/7PAwQAn/7QAwQAwgl0MBoE
AgACMBQwEgMHACoD7sA2AQMHAioD7sA2CDANBgkqhkiG9w0BAQsFAAOCAQEAp/Ii
tYzUJxxcrK1PvWTpe44ERgsX2Uy7Ll99n7y9P5FbLz1LXHL4uUyFAE7QNwKUcWXu
6V8QYjJD8NX3YpK6gAgEeJ1RpqGUl4pu/flkBsqmZd0Ayo9p/Nl/UqO7NsRZwnzk
fhZAoScEGxhWYHhlbD/lqSjgM1ZM0udffMaL3Ydw2zUrmns18J7kKjO5e6T/1DlF
bgwbRm5U5rRJ4TcdIj5m6Yym88sU8fFEEuOmN8g0iqyqKnjskj3jX3INkJ1qwWgu
pvS1KCHgBAjReMQMpdA7Gd0ZFG3g5m6lZnFtrf9XKh/UoyP1HnKPKBa8ZISx3IbL
Mm3FJFE2U6rI3RNeeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:40:26 2026 by rpki-client