Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/NjPNLbddg7jy4Dd07bs-t0WERwU.roa
File: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (raw, json)
Hash identifier: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=
Subject key identifier: 36:33:CD:2D:B7:5D:83:B8:F2:E0:37:74:ED:BB:3E:B7:45:84:47:05
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 019F2368C905BCEF4B2FD99BEDB48E3BA477
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/NjPNLbddg7jy4Dd07bs-t0WERwU.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25575
IP address blocks: 213.145.224.0/19 maxlen: 22
2a03:1000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c9:05:bc:ef:4b:2f:d9:9b:ed:b4:8e:3b:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3633cd2db75d83b8f2e03774edbb3eb745844705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:10:c8:98:10:93:0d:d9:a1:8c:56:7d:36:
7e:dd:65:1e:bb:f2:2b:6a:25:19:5a:88:6a:9a:e8:
66:51:5b:59:c0:9a:a7:bd:7d:af:c1:34:fc:82:6c:
ad:fa:b7:97:df:64:6f:d0:b1:ab:5e:bd:b7:1b:ed:
ce:b4:e4:1c:6e:03:80:3c:6e:59:5e:7a:fb:12:27:
57:d8:ca:1a:c6:69:54:b7:1a:54:92:fe:b3:ac:8c:
d0:e2:ba:fd:4a:2a:52:57:73:57:c1:68:4c:44:e1:
8b:0a:1a:05:f2:7c:87:25:cc:cf:44:fb:6e:09:44:
dc:ad:ce:c7:1c:02:03:f5:90:b9:8a:88:2f:40:e5:
fb:0b:b1:5d:1c:9e:67:d2:ae:b5:c5:26:85:64:58:
5b:37:91:a4:71:4c:f5:50:d5:1a:de:e8:40:9f:f9:
f5:8a:4b:e4:f8:19:00:4e:1b:6f:97:e0:ad:0b:92:
1b:4d:95:79:9c:f4:1f:2b:a5:33:be:e9:aa:ec:6a:
a5:b7:85:51:78:28:4e:37:09:1f:29:c2:e2:35:85:
42:b1:95:12:01:0b:7c:a2:2f:0d:0f:33:1d:52:38:
a7:49:ee:90:f2:02:8a:8e:75:0e:d5:f6:82:e1:e5:
7c:d1:18:46:2d:cd:4a:1d:61:c1:87:18:84:b7:6e:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:33:CD:2D:B7:5D:83:B8:F2:E0:37:74:ED:BB:3E:B7:45:84:47:05
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/NjPNLbddg7jy4Dd07bs-t0WERwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.224.0/19
IPv6:
2a03:1000::/32
Signature Algorithm: sha256WithRSAEncryption
1e:9b:98:aa:dc:49:3a:bc:0e:83:11:fd:e4:da:4f:54:2a:ee:
d6:56:52:14:0d:16:e4:a0:11:8c:18:29:f6:82:be:e9:04:52:
de:9a:4b:9c:d0:a8:07:34:62:2e:73:f5:dd:05:fd:d9:3f:e7:
15:a5:77:d5:88:be:91:e0:64:df:f4:a4:b5:28:bd:1e:96:49:
da:77:f7:c8:b8:cc:b9:5f:02:a8:f8:57:29:9c:5a:87:c2:bd:
1c:e7:1b:42:b6:a9:a4:fc:a7:5d:ba:b2:d6:ad:3a:20:87:02:
b5:35:0e:42:1c:b2:d0:f9:e1:ab:6e:48:93:87:90:87:7c:23:
fc:93:6e:bc:c5:e4:ce:53:36:35:b7:d5:ca:c5:65:1e:df:0b:
61:d2:7c:a5:c8:dd:4e:6f:a9:96:27:ba:0b:ef:c7:fb:17:c3:
af:16:8e:3f:22:d9:56:8b:8f:9e:af:10:94:e7:48:6e:43:9e:
be:26:ab:c3:82:e1:50:f8:93:9f:4b:17:35:8d:19:cd:af:c1:
e7:7a:e0:58:d6:9d:f5:e8:d1:87:fc:f1:e6:ee:4b:c8:a5:d7:
dc:78:7d:c3:41:06:76:1b:94:39:8a:c0:1b:2e:31:53:89:32:
3c:91:11:78:67:55:a5:e6:bc:51:db:e4:7e:28:07:40:53:3b:
83:14:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 16:01:58 2026 by rpki-client