Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NazW0l3Majtlzw-WwBwwYQAYoqI.roa
File: NazW0l3Majtlzw-WwBwwYQAYoqI.roa (raw, json)
Hash identifier: qLuX4QQEb2DH4YCm/mubZNyd5JCE6SSCDfOiQ2z7i4g=
Subject key identifier: 35:AC:D6:D2:5D:CC:6A:3B:65:CF:0F:96:C0:1C:30:61:00:18:A2:A2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019D9CA214418ADE210DF032882CFA644712
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NazW0l3Majtlzw-WwBwwYQAYoqI.roa
Signing time: Fri 17 Apr 2026 18:09:20 +0000
ROA not before: Fri 17 Apr 2026 18:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.192.0/24 maxlen: 24
194.87.193.0/24 maxlen: 24
194.87.194.0/24 maxlen: 24
194.87.195.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:a2:14:41:8a:de:21:0d:f0:32:88:2c:fa:64:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 17 18:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35acd6d25dcc6a3b65cf0f96c01c30610018a2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:62:b2:48:3e:e2:ea:cf:cb:4a:eb:29:31:2a:
1e:11:bb:e0:02:98:78:18:b9:69:29:58:41:7e:96:
26:57:f8:4e:32:a3:e6:03:1a:c8:f8:4b:4f:65:93:
f2:fd:05:4c:17:1e:ec:11:68:64:b4:3e:2f:1b:19:
35:bf:33:cb:c2:82:c1:86:82:62:6e:20:ff:ae:ef:
b0:b3:77:89:28:38:4b:77:9d:a0:5e:19:11:05:ee:
8d:f6:09:eb:2b:df:24:84:59:3f:57:74:4f:6a:c8:
0d:c4:12:56:f7:ec:1e:c8:f0:07:c1:3c:f0:ca:33:
a7:b0:ba:d1:fa:a7:10:5f:99:0c:ec:3d:44:de:02:
6f:15:a2:0a:f1:73:b5:dd:72:c6:b7:0a:be:77:0b:
07:b8:4f:18:a8:d9:65:15:06:b0:56:32:a3:29:75:
a4:43:48:f1:22:56:04:74:fc:f9:70:a2:24:e0:03:
70:2f:ce:e5:2b:af:be:85:05:50:99:f5:5d:76:69:
02:c4:cf:27:16:46:ea:7f:a0:13:4b:2a:70:d1:0b:
5c:5a:cc:69:73:da:5e:fb:72:94:7a:8c:4f:2d:ae:
c9:4f:07:f0:78:b2:c6:b2:3c:4f:56:50:c8:8f:e2:
1a:32:79:a4:da:a8:eb:1a:f4:c8:ac:9d:a0:26:40:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:D6:D2:5D:CC:6A:3B:65:CF:0F:96:C0:1C:30:61:00:18:A2:A2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NazW0l3Majtlzw-WwBwwYQAYoqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.190.0/24
193.124.7.0/24
194.58.58.0/24
194.58.155.0/24
194.58.223.0/24
194.87.33.0/24
194.87.52.0/23
194.87.59.0/24
194.87.61.0/24
194.87.75.0/24
194.87.119.0/24
194.87.122.0/24
194.87.126.0/24
194.87.136.0/24
194.87.152.0/24
194.87.179.0/24
194.87.183.0/24
194.87.192.0/22
194.87.211.0-194.87.212.255
194.87.229.0/24
194.87.231.0/24
194.135.24.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.35.0/24
195.133.40.0/23
195.133.50.0/23
195.133.57.0-195.133.58.255
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.193.0.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
31:c1:0c:51:32:3c:b4:96:04:31:7b:9d:e2:f9:96:be:5d:f7:
e5:a7:46:c7:c6:89:8a:1c:cc:fa:dd:b6:19:06:be:30:16:94:
73:1c:6c:0b:60:e9:cb:d1:0d:f0:ac:95:93:26:fb:fe:98:30:
66:7f:58:9c:ca:da:b2:72:3b:18:a7:94:f2:d9:d8:13:3e:d0:
c2:58:ef:b2:e6:e2:ae:c2:3e:5e:d2:6d:ca:b6:66:c3:30:e1:
a4:f1:16:61:4f:9a:f1:55:02:5f:00:69:44:f5:38:5a:72:dd:
e4:4d:94:91:6d:f0:09:fd:85:86:72:f8:7d:81:04:e5:68:be:
b5:1a:90:e9:28:f6:09:1f:01:84:94:e5:d6:f6:71:69:db:2d:
3a:f9:d0:9f:fd:2c:fb:39:28:50:42:5c:c7:30:9a:05:5c:ca:
b6:1f:b4:a0:7a:06:8b:c0:7a:9d:b8:c2:2e:2f:2c:88:91:5a:
4c:a5:6b:d0:9c:49:98:da:f0:f3:68:cf:0c:21:d9:f2:07:fc:
16:41:b2:ad:73:4a:ce:48:22:1e:cf:a4:bb:63:d0:81:4d:c3:
af:ce:11:64:8e:70:43:1d:41:ee:9c:bf:03:9f:ce:ee:05:47:
a5:db:9f:9e:4b:27:99:11:d4:1d:d1:2b:93:6e:66:31:f0:3b:
e4:68:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:56 2026 by rpki-client