Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa
File: nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa (raw, json)
Hash identifier: wB/xRE6h3geXqO4q4Rpv5x1ICmOWqRPL+trpbmTd4xU=
Subject key identifier: 9D:81:4B:9E:19:B0:9A:D8:01:14:4A:01:1F:EC:67:E1:F0:21:CF:84
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019B7EA67ADF70EA9B6FEF80B759137C92A5
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa
Signing time: Fri 02 Jan 2026 12:19:58 +0000
ROA not before: Fri 02 Jan 2026 12:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52106
IP address blocks: 45.148.40.0/22 maxlen: 22
194.60.202.0/24 maxlen: 24
194.60.205.0/24 maxlen: 24
194.61.56.0/24 maxlen: 24
194.61.159.0/24 maxlen: 24
194.180.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:7a:df:70:ea:9b:6f:ef:80:b7:59:13:7c:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jan 2 12:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d814b9e19b09ad801144a011fec67e1f021cf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:9c:d9:cd:f8:9b:18:29:a6:89:3d:26:c1:
04:ba:ed:e9:a6:88:60:9d:44:94:27:df:40:93:ff:
04:8b:f5:37:98:1d:bf:f1:b3:83:fa:96:c4:4f:c0:
1e:d4:45:87:af:27:9a:c8:d7:0d:82:cf:46:00:e8:
a0:e4:90:fb:b0:ed:95:da:23:93:08:30:e2:29:83:
14:dd:3b:00:ae:05:e4:f2:38:79:c7:62:a6:ef:e6:
c8:8d:3e:ec:6f:b9:b6:16:2d:16:80:7b:74:f3:2b:
ac:82:36:c1:33:12:82:99:ca:9f:ca:4c:40:2b:20:
42:1e:38:c4:1d:1b:24:44:a3:40:23:0f:46:de:9b:
5c:df:b4:46:3e:a7:e2:97:34:c6:7a:e7:28:f8:82:
80:c8:00:82:74:f9:bf:46:d5:a2:83:21:82:23:da:
6e:23:c0:bf:58:f2:94:00:4d:dc:93:5c:27:49:c8:
a9:b3:52:86:0e:07:81:3e:cc:4f:24:56:62:64:09:
55:f5:fb:dd:98:1c:e9:ed:a0:eb:5e:65:7f:de:37:
e1:a8:df:bc:4c:84:a9:94:77:13:78:45:67:99:23:
45:76:ac:15:2a:ed:fa:77:06:c0:9f:aa:50:14:75:
79:4e:ff:92:80:7e:4b:77:c5:3b:dc:fb:24:f4:20:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:4B:9E:19:B0:9A:D8:01:14:4A:01:1F:EC:67:E1:F0:21:CF:84
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.40.0/22
194.60.202.0/24
194.60.205.0/24
194.61.56.0/24
194.61.159.0/24
194.180.44.0/22
Signature Algorithm: sha256WithRSAEncryption
91:cd:ea:bc:5d:14:78:54:9f:bf:2d:e9:00:a9:c8:c2:1a:17:
af:aa:ac:3f:0e:52:1f:c0:fe:b9:9b:68:17:2e:ec:24:bd:fd:
45:12:eb:76:da:bf:52:99:06:fd:d1:da:ad:9c:da:b1:ce:38:
2e:b9:0f:35:5a:f5:ef:2a:4f:f8:44:11:d3:db:21:66:90:5b:
a1:4e:0a:68:68:a3:2e:ba:bf:64:ba:81:52:8e:fd:13:28:24:
d9:88:da:10:b9:c8:65:73:81:6c:58:7f:ca:26:1c:a4:1c:62:
24:6b:2d:7f:ce:e5:83:34:8b:c6:dd:ca:ab:8e:fa:b4:ce:39:
a3:c6:43:50:23:a6:98:74:03:46:e1:ef:7b:1e:9c:d4:b5:7f:
4e:2b:03:7f:f0:e5:f3:86:01:ff:b2:7a:24:c5:cd:f4:5e:0a:
08:3a:a1:c2:77:bd:22:5a:d0:77:9f:b2:df:54:97:42:3a:e5:
f5:d0:9a:21:7e:a1:f7:2a:d2:c6:47:33:03:fa:41:7d:52:42:
20:ea:a5:2b:1c:89:84:02:08:b4:f8:8e:31:a7:a5:5e:6a:65:
76:01:a4:9f:06:5f:ed:2d:ba:7f:30:c6:2f:eb:33:7f:8c:8b:
da:cc:5d:e0:d1:1c:7e:fa:65:8f:59:5b:40:90:41:a1:30:7e:
f9:55:f5:94
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZt+pnrfcOqbb++At1kTfJKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi
YTBkYjQwHhcNMjYwMTAyMTIxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDgxNGI5ZTE5YjA5YWQ4MDExNDRhMDExZmVjNjdlMWYwMjFjZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTSc2c34mxgppok9JsEEuu3ppohg
nUSUJ99Ak/8Ei/U3mB2/8bOD+pbET8Ae1EWHryeayNcNgs9GAOig5JD7sO2V2iOT
CDDiKYMU3TsArgXk8jh5x2Km7+bIjT7sb7m2Fi0WgHt08yusgjbBMxKCmcqfykxA
KyBCHjjEHRskRKNAIw9G3ptc37RGPqfilzTGeuco+IKAyACCdPm/RtWigyGCI9pu
I8C/WPKUAE3ck1wnScips1KGDgeBPsxPJFZiZAlV9fvdmBzp7aDrXmV/3jfhqN+8
TISplHcTeEVnmSNFdqwVKu36dwbAn6pQFHV5Tv+SgH5Ld8U73Psk9CB/fQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJ2BS54ZsJrYARRKAR/sZ+HwIc+EMB8GA1UdIwQY
MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt
YzE0MDJkMjYxNDMyLzEvbllGTG5obXdtdGdCRkVvQkgteG40ZkFoejRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy
LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLZQoAwQA
wjzKAwQAwjzNAwQAwj04AwQAwj2fAwQCwrQsMA0GCSqGSIb3DQEBCwUAA4IBAQCR
zeq8XRR4VJ+/LekAqcjCGhevqqw/DlIfwP65m2gXLuwkvf1FEut22r9SmQb90dqt
nNqxzjguuQ81WvXvKk/4RBHT2yFmkFuhTgpoaKMuur9kuoFSjv0TKCTZiNoQuchl
c4FsWH/KJhykHGIkay1/zuWDNIvG3cqrjvq0zjmjxkNQI6aYdANG4e97HpzUtX9O
KwN/8OXzhgH/snokxc30XgoIOqHCd70iWtB3n7LfVJdCOuX10JohfqH3KtLGRzMD
+kF9UkIg6qUrHImEAgi0+I4xp6VeamV2AaSfBl/tLbp/MMYv6zN/jIvazF3g0Rx+
+mWPWVtAkEGhMH75VfWU
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:20:56 2026 by rpki-client