Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nthPxzu3ZrMmloZ5l3AW1P1eoUQ.roa
File: nthPxzu3ZrMmloZ5l3AW1P1eoUQ.roa (raw, json)
Hash identifier: yBELi/Venk7i7RBHbIOnYp4lMS5HNHqwls/jh5An6l0=
Subject key identifier: 9E:D8:4F:C7:3B:B7:66:B3:26:96:86:79:97:70:16:D4:FD:5E:A1:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FCD3B310082C8AE7BC0EB4A239FAA657B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nthPxzu3ZrMmloZ5l3AW1P1eoUQ.roa
Signing time: Tue 04 Aug 2026 14:43:56 +0000
ROA not before: Tue 04 Aug 2026 14:43:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 62.76.224.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:3b:31:00:82:c8:ae:7b:c0:eb:4a:23:9f:aa:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 4 14:43:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ed84fc73bb766b326968679977016d4fd5ea144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:1c:24:c9:60:ec:47:1e:98:91:0c:c7:85:
84:d9:05:ca:ba:83:c6:73:79:e6:7e:89:5f:02:70:
ae:59:70:90:fd:84:7c:32:86:78:bf:92:cf:90:60:
be:f2:18:36:f4:b6:77:61:3a:63:db:b1:3c:41:63:
dd:af:bf:fa:ec:76:d5:24:13:4b:28:2c:04:95:e2:
ac:3c:35:4a:fb:0b:53:46:76:3e:9c:c8:1f:18:1e:
20:f8:14:3a:11:9e:c1:c4:e9:ab:40:fe:32:bc:f0:
e8:14:8d:ab:2f:18:14:64:45:06:0c:cb:1b:d0:6d:
22:26:e8:9a:4f:96:69:2a:3c:2a:7e:38:fc:02:38:
d1:9e:61:90:76:ad:2a:e7:6b:ab:4b:50:a6:9b:12:
40:fb:0d:dc:4a:8c:07:b2:6d:c7:aa:ed:b0:34:f9:
10:fc:02:ba:9a:a4:f3:78:52:15:36:ce:c9:df:49:
0f:9d:b4:dd:cb:72:22:da:b1:d0:6c:97:fb:a3:c0:
a8:34:37:22:52:5c:3f:cc:f7:de:e1:2e:f4:28:79:
43:b1:8e:dd:e2:44:82:70:59:1f:28:c1:29:81:8f:
e1:08:55:d8:31:8a:d7:4a:86:66:ee:df:9b:17:94:
83:e1:6b:7c:08:6a:ab:ab:35:9e:9c:4a:b5:81:50:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:4F:C7:3B:B7:66:B3:26:96:86:79:97:70:16:D4:FD:5E:A1:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nthPxzu3ZrMmloZ5l3AW1P1eoUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
192.124.188.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
194.87.66.0/23
194.87.75.0/24
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.87.229.0/24
194.135.32.0/24
195.58.60.0/24
195.133.43.0/24
195.133.95.0/24
212.192.244.0/24
212.192.252.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
46:7c:dc:30:8b:3e:49:81:0c:06:48:fa:85:81:ce:84:2c:06:
e8:a1:54:29:45:6c:0d:6f:5d:a1:a8:64:d4:22:ad:b8:b2:25:
41:23:c1:3a:44:68:cc:7c:e9:5f:15:58:1d:48:55:27:2b:73:
35:8a:bf:6b:7d:0a:64:88:a6:5e:f6:3b:e3:b9:7a:3b:03:02:
4e:d8:17:da:8e:8e:55:cb:c7:26:64:6a:6e:fa:a6:32:6d:7b:
05:71:68:b9:80:86:51:1d:74:0f:cf:3a:21:fa:a2:c4:95:3a:
24:f5:cd:d9:bc:db:e2:d0:75:df:82:21:ed:68:15:82:72:b8:
16:26:bf:90:15:60:aa:62:10:2b:8b:2c:1a:30:ac:87:5c:f5:
87:3f:f5:22:c3:9e:69:e3:61:41:19:66:81:41:8d:a7:66:5e:
86:49:ba:31:5d:5a:9e:e1:a7:4f:d3:2b:af:39:7b:6a:7b:55:
d1:09:c7:13:e7:b8:f6:4b:0c:10:b0:ae:e0:4e:40:75:a8:4e:
3a:a3:a0:0e:5b:79:10:90:36:e4:bc:0c:98:91:77:99:8f:64:
09:9a:ae:bf:d4:be:90:ec:c4:3e:a3:c2:63:a3:56:70:52:ae:
4e:04:fe:7e:2f:e4:71:66:b8:27:f0:35:05:6d:0d:1d:eb:f1:
d6:51:42:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:50 2026 by rpki-client