Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/nJjpIHBTEQs7EJPe49KrmTgbM9I.roa
File: nJjpIHBTEQs7EJPe49KrmTgbM9I.roa (raw, json)
Hash identifier: GSChoEPI1gd7EiXd1cr/yljcJpa7XhoXkgwBvTLgANc=
Subject key identifier: 9C:98:E9:20:70:53:11:0B:3B:10:93:DE:E3:D2:AB:99:38:1B:33:D2
Certificate issuer: /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial: 01A039489A835FF481AECD937AE455EB4682
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/nJjpIHBTEQs7EJPe49KrmTgbM9I.roa
Signing time: Tue 25 Aug 2026 14:17:34 +0000
ROA not before: Tue 25 Aug 2026 14:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197133
IP address blocks: 91.197.136.0/22 maxlen: 24
91.197.136.0/24 maxlen: 24
91.197.137.0/24 maxlen: 24
91.197.138.0/24 maxlen: 24
178.248.208.0/21 maxlen: 24
178.248.212.0/24 maxlen: 24
178.248.213.0/24 maxlen: 24
178.251.248.0/21 maxlen: 24
178.251.248.0/24 maxlen: 24
178.251.249.0/24 maxlen: 24
185.32.100.0/23 maxlen: 24
185.32.100.0/24 maxlen: 24
185.32.101.0/24 maxlen: 24
185.32.102.0/24 maxlen: 24
185.114.129.0/24 maxlen: 24
185.114.130.0/23 maxlen: 24
193.202.121.0/24 maxlen: 24
194.69.194.0/23 maxlen: 24
194.143.132.0/23 maxlen: 24
217.114.200.0/24 maxlen: 24
217.114.201.0/24 maxlen: 24
217.114.202.0/24 maxlen: 24
217.114.203.0/24 maxlen: 24
217.114.204.0/24 maxlen: 24
217.114.205.0/24 maxlen: 24
217.114.207.0/24 maxlen: 24
2a02:1740::/32 maxlen: 48
2a03:d280::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:48:9a:83:5f:f4:81:ae:cd:93:7a:e4:55:eb:46:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Validity
Not Before: Aug 25 14:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c98e9207053110b3b1093dee3d2ab99381b33d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:83:d1:4d:29:14:f5:4d:e5:39:32:c0:9a:
db:54:99:44:b4:ec:84:8e:48:7f:69:22:b1:11:5f:
e3:c1:fa:59:4b:74:71:62:d6:9f:90:81:39:dc:84:
a3:e2:33:c6:a0:1c:cd:88:63:5c:94:60:dd:ca:62:
a3:f0:f3:19:46:29:bf:f1:f4:d9:16:7f:78:db:62:
3a:3a:e2:48:e4:e6:62:7a:75:a0:0e:a0:9d:66:c6:
dc:ba:d3:be:e1:1b:f2:69:ef:32:fd:a3:1e:9d:18:
ea:33:1c:23:74:2c:a8:bb:31:cc:76:bf:c0:8d:86:
ae:36:25:ee:5f:dc:ba:db:08:e8:f7:fb:03:0d:c1:
f4:12:00:74:45:4b:85:63:d4:b2:59:4e:13:1d:7c:
49:9a:8c:22:0b:80:4c:79:1d:6f:0e:a7:22:6d:29:
9e:af:45:65:6d:b6:c1:fd:63:7c:f3:d5:d4:b4:b7:
f0:2b:1a:a0:9f:9d:99:4f:c5:42:d3:44:4f:e1:c4:
e2:75:06:9e:71:a7:f3:0d:a1:01:f7:b1:fb:b9:d2:
5e:79:93:57:a9:8b:c0:68:eb:ab:ce:05:ac:ba:07:
d0:33:81:0b:bb:db:bf:9c:47:c2:55:5e:59:95:34:
ca:7e:09:01:54:02:ff:bc:c8:b9:df:c3:6a:11:16:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:E9:20:70:53:11:0B:3B:10:93:DE:E3:D2:AB:99:38:1B:33:D2
X509v3 Authority Key Identifier:
keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/nJjpIHBTEQs7EJPe49KrmTgbM9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.136.0/22
178.248.208.0/21
178.251.248.0/21
185.32.100.0-185.32.102.255
185.114.129.0-185.114.131.255
193.202.121.0/24
194.69.194.0/23
194.143.132.0/23
217.114.200.0-217.114.205.255
217.114.207.0/24
IPv6:
2a02:1740::/32
2a03:d280::/32
Signature Algorithm: sha256WithRSAEncryption
59:c0:48:04:92:d8:6d:28:7c:54:5b:66:b3:3a:48:43:09:04:
06:ef:d1:dc:43:3b:0d:26:9f:93:6d:7c:57:71:95:e0:42:bb:
27:56:ae:a8:49:bb:1e:0f:ac:61:f9:99:05:db:e7:ed:f7:ec:
5f:c8:b2:ee:3d:aa:56:8c:80:20:2b:53:35:9a:65:3b:1e:51:
52:70:57:67:ab:fc:81:9d:3d:02:fd:2a:50:6b:ec:d9:1b:29:
8e:b7:d7:f3:8b:f0:d9:51:8e:e5:c1:80:a2:00:45:e3:8e:bd:
2b:f0:5b:74:53:e2:a9:be:56:00:58:3e:6d:c2:86:5b:f0:42:
bc:35:40:c1:a1:9f:73:ee:b5:9a:e5:88:47:11:ac:b2:ef:8f:
76:b2:2c:18:fe:aa:96:b8:3b:cc:2b:bc:ac:f6:6e:c5:2b:d5:
14:2c:d5:07:34:1b:4a:5a:a6:4f:21:2a:19:21:54:78:8f:a3:
dc:02:29:01:14:31:95:5f:89:34:4c:a2:56:dd:21:84:2b:8b:
e9:2d:cc:5a:26:eb:21:2e:29:ac:af:53:8a:6e:ca:dc:8c:39:
1b:ef:ba:53:09:ef:f3:f4:07:d0:9f:c2:03:a9:a3:b7:c1:f7:
5a:13:98:3e:05:c8:21:db:10:b2:2b:be:e0:61:24:60:fb:29:
7c:8a:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:59 2026 by rpki-client