Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NDhng6MiZnIcuS6IyMy1Y4IOlSM.roa
File: NDhng6MiZnIcuS6IyMy1Y4IOlSM.roa (raw, json)
Hash identifier: rQS0qU/hw0jmWXqrPh32LDVx8R+elVAjIfvFgtQ/Tvs=
Subject key identifier: 34:38:67:83:A3:22:66:72:1C:B9:2E:88:C8:CC:B5:63:82:0E:95:23
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F4B093BD4CFB983E6C5E538F573ECC881
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NDhng6MiZnIcuS6IyMy1Y4IOlSM.roa
Signing time: Fri 10 Jul 2026 07:58:44 +0000
ROA not before: Fri 10 Jul 2026 07:58:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:09:3b:d4:cf:b9:83:e6:c5:e5:38:f5:73:ec:c8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 10 07:58:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34386783a32266721cb92e88c8ccb563820e9523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:eb:1b:57:d8:41:15:e0:8d:c1:e8:b7:0d:
cb:7b:75:55:83:97:52:3d:59:1a:bf:46:4a:f7:26:
00:ba:82:9f:f3:22:00:04:67:ac:13:fe:18:86:06:
79:f0:8f:37:48:4d:ad:8f:8e:43:69:72:0c:84:c6:
5d:38:89:c1:da:ac:74:b4:88:24:e4:15:81:96:8b:
05:1b:2f:1a:a1:80:83:f9:80:1c:db:a0:de:16:7a:
99:1d:47:fd:4b:67:3e:b8:5e:66:8f:ee:fa:b1:9c:
7f:33:61:c5:e9:ed:9a:89:f4:db:fb:90:ed:4d:59:
b1:72:f8:31:9f:1a:ed:ea:ea:31:ad:4c:d0:38:93:
84:6a:0b:e7:db:ae:5c:b3:34:d9:97:86:9c:3c:86:
6f:85:26:88:46:91:87:51:6a:c5:63:75:a9:61:3a:
90:8e:b4:4a:13:a1:84:37:7c:3a:d0:82:7d:7a:57:
d8:cb:b5:39:4c:74:d1:99:b7:01:f1:c6:1e:84:34:
dc:15:92:ab:8f:79:ef:f9:f2:b7:54:fa:de:2f:3a:
b0:85:8f:51:3f:dd:94:5e:3c:3e:59:d7:86:85:cf:
22:ca:1e:22:22:ed:b8:ef:73:38:ee:d3:6b:12:05:
24:71:ef:0c:ec:55:c8:55:e3:a6:d5:37:56:39:fd:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:67:83:A3:22:66:72:1C:B9:2E:88:C8:CC:B5:63:82:0E:95:23
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NDhng6MiZnIcuS6IyMy1Y4IOlSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
194.58.56.0/24
194.58.154.0/23
194.87.18.0/24
194.87.48.0/24
194.87.51.0/24
194.87.54.0/23
194.87.125.0/24
194.87.178.0/24
194.87.233.0/24
194.87.255.0/24
195.133.9.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cc:06:96:06:a6:72:5b:a3:f7:7f:0f:df:5e:a4:fe:ec:bb:
8a:07:2c:83:e9:27:f5:18:4a:8f:15:f1:c0:77:27:05:70:1a:
78:dd:d8:73:b1:f2:6a:c4:3a:a0:b1:9d:0e:01:3b:2f:af:69:
06:0e:50:c1:80:43:2b:4a:41:a0:6b:fd:57:cf:11:7a:88:c6:
60:47:c5:59:c9:73:09:61:47:fc:08:d9:6b:db:af:5c:1a:88:
2b:3c:42:d5:34:48:1d:99:f4:2b:59:f9:9e:05:4c:28:5c:8c:
cc:36:3b:75:ec:7f:2b:48:e8:8c:13:d4:26:69:21:48:e9:ce:
2d:e9:48:7d:d1:7c:6f:4b:54:2a:31:b4:5e:ec:d1:18:06:d6:
c7:b7:a2:d2:cb:f0:5e:16:ee:0d:d7:4c:03:28:c7:d1:bf:ce:
d2:72:1c:62:65:9a:f1:4b:0d:9d:65:10:6d:22:f2:95:a0:c2:
70:42:fe:b0:a1:17:7c:bf:d0:6b:ec:3d:29:6d:82:10:90:ee:
68:c1:c8:37:54:3d:79:6f:5e:69:0a:3b:e4:68:01:4b:51:a1:
e9:ec:77:c9:d8:92:66:20:0c:39:cf:3b:fd:8c:b8:8e:f1:a5:
15:ed:eb:0f:61:77:de:9d:61:6c:35:a6:e3:4a:ba:ac:17:7a:
26:f5:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:39 2026 by rpki-client