Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/NDR8IcYiHHFDZR2N02qsDnVz_5s.roa
File: NDR8IcYiHHFDZR2N02qsDnVz_5s.roa (raw, json)
Hash identifier: udGhDxp8Z7og3TPXgaz6gKEp46t0p+oHHXAxRR3YkTo=
Subject key identifier: 34:34:7C:21:C6:22:1C:71:43:65:1D:8D:D3:6A:AC:0E:75:73:FF:9B
Certificate issuer: /CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Certificate serial: 01A0A21C6E557E5770C2A72D88882636412A
Authority key identifier: 8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/NDR8IcYiHHFDZR2N02qsDnVz_5s.roa
Signing time: Mon 14 Sep 2026 22:49:27 +0000
ROA not before: Mon 14 Sep 2026 22:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205809
IP address blocks: 66.203.126.0/23 maxlen: 23
94.24.36.0/24 maxlen: 24
94.24.37.0/24 maxlen: 24
162.208.16.0/24 maxlen: 24
185.206.24.0/24 maxlen: 24
185.206.25.0/24 maxlen: 24
185.206.26.0/24 maxlen: 24
185.206.27.0/24 maxlen: 24
217.180.20.0/23 maxlen: 23
217.180.20.0/24 maxlen: 24
217.180.21.0/24 maxlen: 24
2a09:a381::/32 maxlen: 40
2a09:a381::/40 maxlen: 40
2a0b:e40:1::/48 maxlen: 48
2a0b:e40:2::/48 maxlen: 48
2a0b:e40:3::/48 maxlen: 48
2a0b:e41:1::/48 maxlen: 48
2a0b:e41:2::/48 maxlen: 48
2a0b:e42:1::/48 maxlen: 48
2a0b:e43::/40 maxlen: 40
2a0b:e43:1::/48 maxlen: 48
2a0b:e44::/40 maxlen: 48
2a0b:e45:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a2:1c:6e:55:7e:57:70:c2:a7:2d:88:88:26:36:41:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Validity
Not Before: Sep 14 22:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34347c21c6221c7143651d8dd36aac0e7573ff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:be:9e:97:c8:62:2b:bd:1a:d9:2b:86:3b:
b8:7b:01:66:a0:99:9a:4d:7f:c8:36:cb:5c:42:ef:
c9:dc:ad:1a:1e:db:87:e8:5d:44:f7:12:d8:40:90:
ac:03:16:ea:98:58:f3:62:a9:7b:64:53:6b:67:58:
cb:5b:97:e6:16:c2:a4:11:12:eb:c2:a6:01:20:d3:
f2:10:e4:5d:69:15:cc:67:9d:ac:b6:db:d3:b9:2c:
e1:a4:1e:ab:68:70:4f:ba:31:37:dc:6e:b9:12:88:
c5:e2:1c:f5:81:ba:ab:8c:4b:6e:ff:64:81:20:89:
19:81:28:fc:17:01:b7:97:2e:fd:3e:a4:38:18:35:
6d:c6:57:0d:d6:68:01:dd:ed:b9:94:4a:0e:21:ef:
95:75:ac:b6:5b:f7:24:7c:6b:65:91:2f:79:08:68:
53:f4:67:9d:61:45:e2:ce:9c:4c:b9:76:91:19:91:
4c:ff:ed:e4:2f:8c:77:1b:e5:63:ac:1e:be:d9:9c:
37:fb:98:44:2b:9b:fa:2a:f9:c2:ed:78:21:ef:36:
7c:7b:08:52:98:59:0c:af:d9:59:9c:dd:9e:32:01:
f6:b6:07:12:08:00:00:8a:ea:1e:ca:ef:92:f4:ed:
d2:bc:6a:2b:35:6e:84:85:b0:e9:55:b5:d3:fd:79:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:7C:21:C6:22:1C:71:43:65:1D:8D:D3:6A:AC:0E:75:73:FF:9B
X509v3 Authority Key Identifier:
keyid:8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/NDR8IcYiHHFDZR2N02qsDnVz_5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.126.0/23
94.24.36.0/23
162.208.16.0/24
185.206.24.0/22
217.180.20.0/23
IPv6:
2a09:a381::/32
2a0b:e40:1::-2a0b:e40:3:ffff:ffff:ffff:ffff:ffff
2a0b:e41:1::-2a0b:e41:2:ffff:ffff:ffff:ffff:ffff
2a0b:e42:1::/48
2a0b:e43::/40
2a0b:e44::/40
2a0b:e45:1::/48
Signature Algorithm: sha256WithRSAEncryption
24:6c:1e:71:60:f0:07:8c:6f:94:23:0f:11:d6:c3:31:b4:49:
4f:e2:2e:13:b6:58:01:b4:8f:8a:ce:8d:e9:82:73:21:64:59:
1a:e9:14:07:46:6e:5b:b4:81:47:67:88:55:ef:f8:e9:8f:a9:
ee:a4:02:a2:51:b8:e9:5e:06:ee:97:4b:a6:52:a2:66:ac:82:
1a:c8:90:02:7a:72:04:03:ec:01:ef:32:42:e3:9f:0e:c3:f1:
70:c7:e7:69:18:77:ef:6d:10:8e:29:d8:86:7e:65:d7:68:3b:
ba:d1:64:15:7d:0f:11:ad:ef:e9:ea:16:e9:af:e9:68:67:27:
b7:3a:fe:0a:1e:f7:f0:6f:5c:a4:5a:31:51:5d:84:55:f2:9c:
99:23:43:78:0f:95:07:ba:93:65:01:bc:9b:f9:60:c9:bf:f4:
b9:65:2c:32:64:62:7d:0e:c6:57:01:f1:07:53:44:88:ab:c6:
3d:aa:60:b0:1a:23:61:7c:85:ab:84:14:c3:0a:22:2d:60:d6:
d4:cc:62:52:9f:57:8c:01:66:64:88:cf:f8:e5:7c:8a:92:b1:
2b:25:dc:1f:fd:18:d2:da:b2:ff:5c:b7:28:39:3c:ae:06:dd:
f1:67:4d:09:3d:72:ad:97:63:8e:c1:e5:2e:44:ba:d8:e2:31:
0e:0e:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:51 2026 by rpki-client