Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/n-0F0qBM5FEhx7SPlngc7u-ezPw.roa
File: n-0F0qBM5FEhx7SPlngc7u-ezPw.roa (raw, json)
Hash identifier: Gk/QbCKyKgOXJbc8iPykN/sZPMkK2BlJZgD/Urh5k8g=
Subject key identifier: 9F:ED:05:D2:A0:4C:E4:51:21:C7:B4:8F:96:78:1C:EE:EF:9E:CC:FC
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 01A0640E661B7C92BAFBC26BCB27E254A13C
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/n-0F0qBM5FEhx7SPlngc7u-ezPw.roa
Signing time: Wed 02 Sep 2026 21:37:40 +0000
ROA not before: Wed 02 Sep 2026 21:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42369
IP address blocks: 91.250.253.0/24 maxlen: 24
94.176.160.0/23 maxlen: 23
94.176.160.0/24 maxlen: 24
94.176.161.0/24 maxlen: 24
185.235.147.0/24 maxlen: 24
188.240.51.0/24 maxlen: 24
194.33.191.0/24 maxlen: 24
195.8.46.0/24 maxlen: 24
2a10:8b40::/32 maxlen: 32
2a10:8b40:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:0e:66:1b:7c:92:ba:fb:c2:6b:cb:27:e2:54:a1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Sep 2 21:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fed05d2a04ce45121c7b48f96781ceeef9eccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:7e:e0:e2:d2:64:76:f8:fe:cc:8c:5a:2e:
03:c8:d6:0f:98:b4:57:65:ee:11:22:a3:d1:1c:55:
9c:60:af:eb:17:74:46:45:1f:56:bd:b1:b7:38:6d:
67:11:fd:33:1d:a3:32:67:e4:b0:80:6b:a3:8d:90:
c9:ad:aa:2d:b9:56:c0:31:97:41:c2:1f:a2:af:78:
c5:9a:94:0f:51:fe:76:2c:6b:c6:95:b4:45:40:9a:
fd:b7:aa:d8:31:61:aa:87:8b:16:e2:1a:3d:26:24:
ef:69:3d:5e:95:2e:31:ee:ec:c5:ba:b7:c8:70:81:
f5:ba:93:00:b0:6f:f0:8b:d4:9a:c7:9e:cf:0d:c9:
35:87:dd:18:60:21:a7:1e:10:1d:05:7e:50:af:c6:
1f:a9:f9:77:a6:72:04:d3:9c:2a:38:4c:82:35:74:
db:d3:fb:ff:d4:f0:ed:e0:40:e3:a3:5b:1b:a2:5a:
2f:11:7e:eb:24:29:6a:b1:3a:43:67:8d:d7:32:9c:
4c:6d:92:9e:85:e8:d1:8c:7c:c2:d1:f8:a6:58:c0:
c2:12:1e:2a:77:5b:58:c5:08:e4:25:d0:d9:36:72:
45:7c:79:4d:22:76:b3:60:83:34:a8:92:73:e5:fe:
ce:f2:3f:d4:0b:1a:d6:b9:58:60:10:6e:6c:8d:ac:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:05:D2:A0:4C:E4:51:21:C7:B4:8F:96:78:1C:EE:EF:9E:CC:FC
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/n-0F0qBM5FEhx7SPlngc7u-ezPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.253.0/24
94.176.160.0/23
185.235.147.0/24
188.240.51.0/24
194.33.191.0/24
195.8.46.0/24
IPv6:
2a10:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:d4:e8:24:90:1c:1e:b4:03:56:f1:f9:d7:12:be:df:d0:4f:
09:d8:fa:65:d3:bb:76:15:7a:2c:d6:c4:18:70:4e:f8:9a:1e:
6c:cf:fb:df:d7:e8:95:42:3c:3b:7e:74:3c:af:d5:25:88:f8:
77:4c:8e:d5:1f:db:4d:c9:cf:99:ee:e1:dd:c0:ed:ca:1d:17:
a3:c6:0c:41:19:7d:09:2e:45:27:8c:11:fd:70:03:25:d9:0d:
cb:8d:fd:ed:10:42:45:10:84:0c:c6:7e:f0:a5:d8:02:8a:df:
25:f6:12:5d:6a:78:31:24:5e:cc:6f:88:7c:9b:8e:f9:d5:e2:
5b:52:7f:99:ce:98:f6:64:7f:55:62:ef:f6:50:32:0d:f3:02:
24:5c:bb:98:3a:cf:f8:d4:9c:6f:2e:2a:17:61:1d:aa:f1:5b:
c9:10:6b:ab:eb:19:ec:eb:a8:20:eb:7d:fa:ad:54:b4:21:9f:
39:27:45:27:20:1a:8f:77:e6:56:8a:45:a5:71:7e:67:81:cd:
24:f8:fa:46:46:70:cf:03:98:e5:00:e9:6a:d0:c5:8c:65:3e:
fb:fe:df:0b:f0:a6:0a:00:f1:ce:c9:cf:dd:1b:61:fe:f4:bb:
f7:16:ad:8d:79:23:40:8f:5a:67:c3:36:ea:26:1f:cc:82:ae:
c9:c3:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:24 2026 by rpki-client