Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/nltuA6nF3AnGb_5t0LkwbVL_F8g.roa
File: nltuA6nF3AnGb_5t0LkwbVL_F8g.roa (raw, json)
Hash identifier: aZHiurjYO5FfRYF8bJt1fIJHsdtiFBEhu82Wl5pUEMU=
Subject key identifier: 9E:5B:6E:03:A9:C5:DC:09:C6:6F:FE:6D:D0:B9:30:6D:52:FF:17:C8
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 01A03E2881400D5980DE39D6B5CA9386E2D4
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/nltuA6nF3AnGb_5t0LkwbVL_F8g.roa
Signing time: Wed 26 Aug 2026 13:00:36 +0000
ROA not before: Wed 26 Aug 2026 13:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60733
IP address blocks: 88.218.136.0/22 maxlen: 24
88.218.136.0/24 maxlen: 24
88.218.137.0/24 maxlen: 24
88.218.138.0/24 maxlen: 24
2a09:ab80::/29 maxlen: 60
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:28:81:40:0d:59:80:de:39:d6:b5:ca:93:86:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Aug 26 13:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e5b6e03a9c5dc09c66ffe6dd0b9306d52ff17c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:ec:47:c2:63:97:55:78:31:de:dd:4a:6d:
fc:0b:c8:c0:57:cb:bd:06:22:5b:57:9f:68:5b:2f:
5e:ff:43:c6:3d:4b:7d:7c:ac:e8:75:b0:11:4b:c2:
7c:1e:09:1c:d0:d5:94:4c:5b:b8:66:5a:64:7a:0e:
40:89:48:c5:d2:42:e0:5f:6f:fa:8a:e8:00:63:39:
05:f8:9f:4f:d2:00:47:dc:6e:e6:cb:32:bc:77:60:
5c:67:7a:18:06:a5:9f:69:ca:0e:84:a7:1b:05:23:
4c:14:bf:24:bf:42:ed:ca:73:a6:a1:4b:eb:ff:7a:
48:47:93:7d:d1:48:9b:d3:95:c6:61:43:c7:f5:49:
be:30:5a:94:56:22:91:80:90:a7:4a:d6:63:ec:d7:
03:8e:23:75:18:c3:88:0e:98:15:d7:53:06:2f:4a:
a3:7f:6a:fa:70:8e:ef:87:d0:df:58:13:77:47:f5:
83:97:4a:1a:de:e3:a8:a3:c8:a3:37:7f:de:19:be:
03:dd:31:35:de:ff:a0:28:57:94:fc:16:0f:5b:f7:
fe:f0:18:04:4e:1b:da:4f:b7:91:c5:3c:aa:c5:82:
0e:b9:7a:9c:72:13:04:89:fc:6e:43:76:ad:10:cd:
60:a3:86:c2:32:9f:6d:51:7f:bf:79:cf:91:31:7e:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:6E:03:A9:C5:DC:09:C6:6F:FE:6D:D0:B9:30:6D:52:FF:17:C8
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/nltuA6nF3AnGb_5t0LkwbVL_F8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.136.0/22
IPv6:
2a09:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
c8:c3:bc:87:1c:7e:f8:be:d3:85:19:8e:38:ec:14:16:75:4d:
88:54:37:6c:f4:95:ab:5f:78:67:68:49:7e:35:cf:d0:d4:a6:
23:9a:08:be:3a:c7:43:59:8d:ed:f3:2f:e4:dc:ec:07:28:3d:
1c:8c:a0:c1:32:54:99:64:31:2b:fe:c9:f5:9f:82:d3:bc:db:
5c:a1:9b:be:4b:e2:d6:75:9d:62:a0:10:28:e3:0e:ea:84:01:
3b:0f:4a:cc:cb:a0:22:b9:f8:4e:2a:6a:b1:48:4c:e6:6d:0d:
17:5c:20:c6:9a:cd:aa:27:49:12:68:24:6b:b9:46:00:2c:e2:
7c:65:48:d5:3f:21:b1:97:47:a5:e1:b5:6e:5e:cb:ad:e6:7a:
27:b9:01:83:56:3e:5b:ef:8e:fe:92:5b:90:77:42:35:6e:0b:
fe:53:4b:f2:16:fd:37:7b:e8:62:55:55:44:ff:d4:7a:01:ba:
c1:8d:a6:a2:69:59:d0:c8:70:14:b3:13:9b:4f:ec:98:b3:c1:
e4:b2:bd:ef:4c:65:4c:81:91:09:b7:33:58:e4:3a:c1:29:4e:
fd:83:95:a5:53:76:e8:74:df:30:4d:dd:e7:c7:1b:5f:ac:6b:
0b:6f:eb:a1:2a:5a:24:c5:e5:b8:2f:2e:39:e5:1b:aa:d7:ed:
80:b6:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:36 2026 by rpki-client