Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NyYQUExZMFkHbgfcK_o-XJevXEc.roa
File: NyYQUExZMFkHbgfcK_o-XJevXEc.roa (raw, json)
Hash identifier: 9Y1YHiOUeBGV4oZY0PhONVFYROUvvKtn+gLnOxlvKAM=
Subject key identifier: 37:26:10:50:4C:59:30:59:07:6E:07:DC:2B:FA:3E:5C:97:AF:5C:47
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0674837EE3C54D7613340FDB68554C4ED
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NyYQUExZMFkHbgfcK_o-XJevXEc.roa
Signing time: Thu 03 Sep 2026 12:39:41 +0000
ROA not before: Thu 03 Sep 2026 12:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 62.105.195.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:48:37:ee:3c:54:d7:61:33:40:fd:b6:85:54:c4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 3 12:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=372610504c593059076e07dc2bfa3e5c97af5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:af:d2:73:04:8e:cc:21:c5:c5:c8:2e:92:
73:db:32:c2:99:d9:2f:26:be:0a:b1:90:51:12:dd:
0a:e8:a0:8a:60:16:d0:ec:de:68:5f:b1:2a:6d:0c:
40:7f:bd:8b:80:59:ed:d5:f1:87:ff:b3:c9:75:17:
44:5d:cf:fb:35:5b:8e:ac:fe:a1:f6:e8:1a:1e:14:
dc:df:8d:71:ba:d0:82:f2:33:cc:0c:e7:8b:8c:ab:
1a:52:2d:a3:40:56:e1:bb:f5:29:8f:7c:52:c0:50:
02:53:ff:2a:91:92:ba:09:2e:38:38:8b:b3:35:dc:
3b:3d:ec:4f:28:28:f6:8d:b4:cd:59:0d:82:9b:ac:
14:23:4c:b2:73:6b:dc:4b:96:bc:5d:7f:a2:90:3b:
af:1f:54:d8:c8:bc:eb:b1:99:a8:56:6f:66:66:43:
38:37:e0:65:a9:8b:fa:ca:8b:e8:ed:64:f9:72:ae:
93:6f:15:40:4d:5e:c3:c2:80:a4:d1:45:72:be:3d:
80:b5:fe:dd:7f:9e:5a:bd:ca:90:c7:4f:d1:61:b1:
75:9a:17:e2:6d:60:2d:9a:3b:cd:93:97:8b:f1:00:
b6:a8:5e:75:2a:7f:26:c7:e7:59:ba:84:61:3f:e6:
55:9b:b2:47:8a:e5:80:2e:d6:10:ce:b1:58:91:a5:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:10:50:4C:59:30:59:07:6E:07:DC:2B:FA:3E:5C:97:AF:5C:47
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NyYQUExZMFkHbgfcK_o-XJevXEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.195.0/24
194.122.80.0/24
194.231.136.0/23
212.189.75.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9d:16:23:4a:0d:a7:5a:26:fd:7a:84:c8:66:ee:0a:c9:da:
8b:57:4d:e1:be:df:e8:b2:d5:d0:5a:22:94:a9:fd:64:e4:35:
92:db:27:bd:7b:af:4f:94:9f:fa:60:22:29:76:c9:63:5c:5e:
c6:ff:79:59:a0:03:69:ab:de:4f:f4:a0:f8:a7:ad:c7:d4:7d:
41:db:15:f3:da:1f:6e:fc:57:d6:2b:bf:d1:38:c9:25:63:75:
a0:78:97:9b:34:a2:6c:01:0f:93:41:ad:e1:a3:1a:e4:18:54:
1d:5e:97:b3:e8:d5:1b:4a:62:06:9b:f0:50:ce:c0:91:35:03:
53:ce:06:77:01:9c:a7:d2:5f:c8:ef:88:4a:4b:07:35:97:e6:
31:49:61:bf:64:6d:24:68:5b:77:72:9b:53:8e:06:99:ca:1e:
d5:02:48:4d:8d:2c:d0:86:e3:9f:f8:17:e6:3a:30:3a:c0:cf:
88:2b:ed:7c:62:da:af:e0:77:fa:b0:6e:e9:fe:c8:a2:b8:11:
24:cf:20:b0:6b:91:9f:1c:86:db:0a:b9:20:fe:10:3a:2b:f6:
cc:7f:2a:5a:b4:96:e9:3d:f3:39:d4:1a:b1:8a:09:81:63:4b:
fe:db:92:18:ad:c8:8f:42:58:19:19:65:ff:4c:1d:ba:38:80:
91:ee:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:41 2026 by rpki-client