Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/NJD3vCg8LdZrgIhkarwqZcVQWlY.roa
File: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (raw, json)
Hash identifier: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=
Subject key identifier: 34:90:F7:BC:28:3C:2D:D6:6B:80:88:64:6A:BC:2A:65:C5:50:5A:56
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019BFA55DC52DE8B58905A46CDB757C692AC
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/NJD3vCg8LdZrgIhkarwqZcVQWlY.roa
Signing time: Mon 26 Jan 2026 12:44:49 +0000
ROA not before: Mon 26 Jan 2026 12:44:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8437
IP address blocks: 46.57.0.0/17 maxlen: 17
46.57.72.0/22 maxlen: 22
46.57.80.0/21 maxlen: 21
46.57.88.0/21 maxlen: 21
46.57.96.0/21 maxlen: 21
46.57.104.0/22 maxlen: 22
46.57.112.0/21 maxlen: 21
46.57.120.0/22 maxlen: 22
46.57.124.0/22 maxlen: 22
62.116.0.0/19 maxlen: 19
62.116.64.0/18 maxlen: 18
62.218.0.0/16 maxlen: 16
62.218.4.0/24 maxlen: 24
62.218.35.0/24 maxlen: 24
62.218.52.0/24 maxlen: 24
62.218.100.0/24 maxlen: 24
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.169.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
62.218.205.0/24 maxlen: 24
77.118.0.0/16 maxlen: 16
77.118.14.0/24 maxlen: 24
77.118.17.0/24 maxlen: 24
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
77.118.56.0/21 maxlen: 21
77.118.104.0/22 maxlen: 22
77.118.108.0/22 maxlen: 22
77.118.112.0/20 maxlen: 20
77.118.128.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
77.118.160.0/20 maxlen: 20
77.118.176.0/20 maxlen: 20
77.118.192.0/20 maxlen: 20
77.118.208.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.118.240.0/20 maxlen: 20
77.119.32.0/19 maxlen: 19
77.119.64.0/18 maxlen: 18
77.119.80.0/21 maxlen: 21
77.119.88.0/21 maxlen: 21
77.119.96.0/22 maxlen: 22
77.119.112.0/22 maxlen: 22
78.142.128.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.213.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
86.59.0.0/17 maxlen: 17
91.186.128.0/19 maxlen: 19
178.114.0.0/16 maxlen: 16
178.114.92.0/22 maxlen: 22
178.114.96.0/20 maxlen: 20
178.114.112.0/20 maxlen: 20
178.114.128.0/21 maxlen: 21
178.114.144.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
178.114.160.0/20 maxlen: 20
178.114.176.0/20 maxlen: 20
178.114.192.0/21 maxlen: 21
178.114.208.0/21 maxlen: 21
178.114.216.0/21 maxlen: 21
178.114.224.0/20 maxlen: 20
178.114.240.0/20 maxlen: 20
178.115.96.0/19 maxlen: 19
178.115.96.0/24 maxlen: 24
178.115.98.0/24 maxlen: 24
188.118.192.0/18 maxlen: 18
195.70.224.0/19 maxlen: 19
195.96.0.0/19 maxlen: 19
195.248.32.0/19 maxlen: 19
212.27.64.0/18 maxlen: 18
212.152.128.0/17 maxlen: 17
213.90.0.0/17 maxlen: 17
213.129.224.0/19 maxlen: 19
213.235.192.0/18 maxlen: 18
213.235.196.0/24 maxlen: 24
213.235.234.0/24 maxlen: 24
2001:858::/32 maxlen: 32
2001:858:40::/45 maxlen: 45
2001:938::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:55:dc:52:de:8b:58:90:5a:46:cd:b7:57:c6:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 26 12:44:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3490f7bc283c2dd66b8088646abc2a65c5505a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:ee:20:b7:b3:52:8c:fc:98:7f:1d:f1:c0:
52:b8:0a:1d:58:86:ca:cd:20:e3:4c:b0:50:0c:d1:
13:c6:02:13:6a:db:b2:60:2a:bb:88:2b:33:c4:c9:
81:66:78:d0:64:ab:53:25:27:90:9b:14:a5:c2:91:
ea:10:5f:7c:ed:1f:27:f7:fc:db:cc:d7:10:ba:4f:
34:e5:19:55:06:36:6f:5e:06:e5:e5:c4:ce:20:fa:
53:b1:ef:01:b8:ff:eb:dc:10:63:39:c9:db:0d:0b:
59:68:db:3d:fd:41:8e:c5:21:c5:01:1e:28:ab:30:
71:2a:98:b4:24:ad:6e:27:e4:f7:bd:21:3d:d2:b8:
cd:66:d0:8d:db:af:69:69:83:7f:cf:e4:27:6c:3f:
4d:41:00:87:79:3c:26:d0:c2:22:70:9f:c9:d8:9a:
bd:be:63:cd:3e:05:89:07:42:25:3d:0f:92:4a:a4:
18:6f:c4:58:63:52:46:d7:cb:52:0c:e2:a1:52:f3:
ec:bb:d8:d5:4b:16:88:02:f8:78:06:32:d4:12:b1:
5c:cf:fe:86:44:d5:c3:9a:9d:be:d0:ec:97:80:f9:
ac:9c:e9:e7:e4:de:c9:ae:d1:bf:dd:3f:da:5f:71:
da:cb:3e:3e:5e:8b:33:51:25:ca:3d:22:82:7a:23:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:90:F7:BC:28:3C:2D:D6:6B:80:88:64:6A:BC:2A:65:C5:50:5A:56
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/NJD3vCg8LdZrgIhkarwqZcVQWlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
4d:ea:1d:ce:64:0b:c7:31:c7:d4:00:ce:04:0c:e7:d3:8f:98:
d1:53:4d:aa:b3:7c:4e:35:cd:8a:77:03:15:c3:23:08:67:22:
04:80:ad:7c:c2:52:9e:bb:a3:80:7b:92:06:bb:3f:64:76:07:
d6:70:db:38:96:e8:51:ca:85:a7:c8:85:99:f8:f5:20:1a:84:
e8:4a:a3:31:d6:84:88:5e:17:99:be:fb:d2:93:d0:16:e7:60:
cf:a5:c5:d5:39:a2:6e:4e:67:ef:08:9a:0d:f3:40:5e:39:ad:
eb:00:9b:8d:5f:ff:73:35:11:58:57:76:23:e1:0d:0a:75:0d:
ae:a4:ef:1a:e1:72:1a:be:8d:9e:c0:7d:2b:a3:26:e9:07:c2:
9d:88:bb:9b:2e:8a:9c:ca:90:b5:da:df:12:e2:2b:51:74:ad:
43:7e:68:19:bd:d6:67:80:73:92:55:0d:36:97:8f:55:13:14:
6a:42:75:b0:a4:27:8f:4b:c3:9b:f0:bd:b9:3d:f6:3f:3d:75:
52:53:26:c0:5c:e4:96:0d:6c:83:5c:b1:25:39:48:28:fa:3a:
9e:c3:db:80:c8:83:c0:2a:76:d1:0c:82:e4:5e:4d:4c:dd:a5:
f0:5c:50:f5:32:a4:e2:1f:f6:3d:e2:82:21:1c:2a:3b:17:da:
64:ab:d2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:04 2026 by rpki-client