Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pNVrf2DRRH4hjluotV98Q-OaH3I.roa
File: pNVrf2DRRH4hjluotV98Q-OaH3I.roa (raw, json)
Hash identifier: 8iBcmpOGnjNX3PTT7qt+bVm/0l23z3DvX7Xn0+L3mxw=
Subject key identifier: A4:D5:6B:7F:60:D1:44:7E:21:8E:5B:A8:B5:5F:7C:43:E3:9A:1F:72
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A18CF3920D5500B20E21A52B4DA0A96E3F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pNVrf2DRRH4hjluotV98Q-OaH3I.roa
Signing time: Fri 30 Oct 2026 13:15:35 +0000
ROA not before: Fri 30 Oct 2026 13:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.70.0/24 maxlen: 24
45.67.97.0/24 maxlen: 24
45.130.202.0/23 maxlen: 24
45.133.4.0/24 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
82.197.200.0/24 maxlen: 24
82.197.201.0/24 maxlen: 24
84.245.26.0/24 maxlen: 24
84.245.27.0/24 maxlen: 24
89.34.126.0/23 maxlen: 24
185.165.45.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
194.5.83.0/24 maxlen: 24
194.61.40.0/24 maxlen: 24
194.61.41.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
204.75.229.0/24 maxlen: 24
217.19.27.0/24 maxlen: 24
220.158.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:f3:92:0d:55:00:b2:0e:21:a5:2b:4d:a0:a9:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 30 13:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4d56b7f60d1447e218e5ba8b55f7c43e39a1f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:10:a8:b8:ba:ae:ca:2b:7e:45:9c:ce:2d:
93:74:46:4e:68:59:3e:cb:45:7a:bb:48:ba:03:24:
89:c1:8d:63:df:fc:90:2d:45:ba:dc:9f:45:32:09:
cf:1e:31:9c:46:c0:1d:d3:c2:fc:7a:fd:cd:61:37:
ba:53:19:57:9a:65:ae:34:71:27:77:9e:34:99:d2:
63:94:29:ba:c4:2d:64:0b:c6:a9:ff:f8:08:ba:ce:
b7:4f:70:57:88:72:6a:c2:98:58:93:bd:64:b9:c5:
94:ff:24:93:01:6e:68:86:d9:b3:ab:8b:ee:95:a1:
fa:b3:33:53:49:1d:7d:bc:c8:f5:5b:47:d6:1f:66:
83:34:64:33:14:0f:c9:42:32:63:80:eb:43:e0:49:
75:ac:80:2d:73:0a:87:c8:5d:15:2a:1b:b6:30:0d:
ee:17:f9:df:87:f2:ec:c3:87:38:86:35:52:92:3c:
5b:31:be:4d:fd:9e:53:37:a4:6a:63:64:e4:a5:3a:
ce:43:8e:ca:d5:e6:d6:13:15:31:fd:0f:24:6e:8e:
48:d3:33:4d:3f:13:94:17:62:f2:e7:95:77:d1:e8:
dc:28:00:f0:9c:54:f3:ef:81:88:0b:19:70:57:50:
5c:e5:5a:2a:0f:04:0c:9f:b2:c4:90:ff:41:49:a7:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D5:6B:7F:60:D1:44:7E:21:8E:5B:A8:B5:5F:7C:43:E3:9A:1F:72
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pNVrf2DRRH4hjluotV98Q-OaH3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.67.97.0/24
45.130.202.0/23
45.133.4.0/22
82.197.200.0/23
84.245.26.0/23
89.34.126.0/23
185.165.45.0/24
185.245.7.0/24
188.213.202.0/24
194.5.82.0/23
194.61.40.0/23
203.25.124.0/24
204.75.229.0/24
217.19.27.0/24
220.158.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:18:fe:56:b6:4e:dd:e6:39:2c:76:be:05:b9:06:9d:39:aa:
6e:98:98:e6:a7:5a:eb:cb:6b:c5:e4:b5:97:4c:54:2c:d5:58:
5e:12:95:76:94:ff:bf:86:1f:8a:22:74:3f:b5:39:f5:4d:01:
6d:b0:80:7b:41:da:70:15:2a:38:d8:d8:1a:24:6e:d9:9a:60:
85:c0:6f:6a:43:35:19:fb:d8:2b:63:2a:e7:05:c1:06:51:0d:
6d:26:3d:db:5e:f9:f5:71:67:4a:5b:88:50:df:49:52:6b:93:
ed:91:09:5a:e7:e9:29:38:f2:ce:22:b4:71:3d:d0:11:f7:b1:
3e:7a:19:e3:3d:04:4a:aa:ff:55:40:25:e4:12:92:9e:ce:17:
e3:6e:e1:ec:62:56:b6:5a:d8:b3:17:0f:4f:07:0c:76:b0:be:
46:6d:a9:5b:6d:37:1e:54:d0:89:99:51:ae:89:6c:1b:80:ef:
a1:73:b1:72:1f:f6:01:ac:6f:26:38:86:84:d7:35:ea:0d:55:
26:4a:96:61:56:25:57:17:da:a0:b1:3e:83:0f:c8:4c:03:f2:
5b:09:dd:39:4c:90:1b:98:01:d7:ab:c3:bd:e4:ef:75:8f:a4:
f3:57:7f:d4:6e:b8:1d:e0:cf:05:bd:85:0a:c3:90:bc:8a:2a:
3f:7d:94:d0
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAaGM85INVQCyDiGlK02gqW4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYxMDMwMTMxNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGQ1NmI3ZjYwZDE0NDdlMjE4ZTViYThiNTVmN2M0M2UzOWExZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8QqLi6rsorfkWczi2TdEZOaFk+
y0V6u0i6AySJwY1j3/yQLUW63J9FMgnPHjGcRsAd08L8ev3NYTe6UxlXmmWuNHEn
d540mdJjlCm6xC1kC8ap//gIus63T3BXiHJqwphYk71kucWU/ySTAW5ohtmzq4vu
laH6szNTSR19vMj1W0fWH2aDNGQzFA/JQjJjgOtD4El1rIAtcwqHyF0VKhu2MA3u
F/nfh/Lsw4c4hjVSkjxbMb5N/Z5TN6RqY2TkpTrOQ47K1ebWExUx/Q8kbo5I0zNN
PxOUF2Ly55V30ejcKADwnFTz74GICxlwV1Bc5VoqDwQMn7LEkP9BSafLTQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFKTVa39g0UR+IY5bqLVffEPjmh9yMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcE5WcmYyRFJSSDRoamx1b3RWOThRLU9hSDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQALQhGAwQA
LUNhAwQBLYLKAwQCLYUEAwQBUsXIAwQBVPUaAwQBWSJ+AwQAuaUtAwQAufUHAwQA
vNXKAwQBwgVSAwQBwj0oAwQAyxl8AwQAzEvlAwQA2RMbAwQA3J7HMA0GCSqGSIb3
DQEBCwUAA4IBAQAcGP5Wtk7d5jksdr4FuQadOapumJjmp1rry2vF5LWXTFQs1Vhe
EpV2lP+/hh+KInQ/tTn1TQFtsIB7QdpwFSo42NgaJG7ZmmCFwG9qQzUZ+9grYyrn
BcEGUQ1tJj3bXvn1cWdKW4hQ30lSa5PtkQla5+kpOPLOIrRxPdAR97E+ehnjPQRK
qv9VQCXkEpKezhfjbuHsYla2WtizFw9PBwx2sL5GbalbbTceVNCJmVGuiWwbgO+h
c7FyH/YBrG8mOIaE1zXqDVUmSpZhViVXF9qgsT6DD8hMA/JbCd05TJAbmAHXq8O9
5O91j6TzV3/Ubrgd4M8FvYUKw5C8iio/fZTQ
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:52:10 2026 by rpki-client