Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nrB70uwxr6I53CRZ_SJysRZLkNU.roa
File: nrB70uwxr6I53CRZ_SJysRZLkNU.roa (raw, json)
Hash identifier: tCZZOuZAHkhYThR3T1Hz4zYZ0klE1NhPj+ELKa5vQQE=
Subject key identifier: 9E:B0:7B:D2:EC:31:AF:A2:39:DC:24:59:FD:22:72:B1:16:4B:90:D5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F941FC4C8AEC808BF95B07F6C70BAD735
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nrB70uwxr6I53CRZ_SJysRZLkNU.roa
Signing time: Fri 24 Jul 2026 12:35:37 +0000
ROA not before: Fri 24 Jul 2026 12:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 195.21.133.0/24 maxlen: 24
195.21.135.0/24 maxlen: 24
195.162.249.0/24 maxlen: 24
195.162.250.0/24 maxlen: 24
195.162.251.0/24 maxlen: 24
195.162.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:1f:c4:c8:ae:c8:08:bf:95:b0:7f:6c:70:ba:d7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 24 12:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eb07bd2ec31afa239dc2459fd2272b1164b90d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:83:e3:f1:b0:cc:8f:99:db:fa:c9:cd:16:
29:e5:57:59:d4:0d:7e:28:38:3d:9b:d9:99:65:8a:
64:2c:af:ce:eb:4e:aa:84:ac:7c:2a:4d:1b:6a:6e:
85:7c:73:6c:3e:64:ec:b8:88:0d:02:55:80:3b:06:
9c:0f:0b:a5:a9:d6:d2:06:45:44:db:e3:9c:92:e6:
a6:5d:f6:18:d2:3d:0e:34:32:6b:60:9f:74:57:54:
a9:b7:60:0b:d6:5a:a5:1f:1c:9b:ba:36:2a:3b:84:
f5:f9:81:97:67:c7:d0:08:94:89:88:80:0e:a7:fe:
a3:23:2a:43:a7:c0:4c:37:75:5b:d7:e5:49:1e:b7:
39:d5:67:54:22:66:94:17:1b:22:ee:28:19:4c:01:
c1:23:a7:14:6b:dd:1f:b6:cd:c8:60:0e:b5:e5:ac:
67:a0:3e:66:af:ba:60:7b:b5:2f:09:1a:32:66:73:
42:a0:10:88:c5:53:46:27:d8:6d:3d:ba:e5:f1:0d:
f2:e5:60:ef:56:6c:b0:89:43:7f:a0:1a:00:9f:1b:
8c:b9:de:39:32:63:0d:d7:4b:ea:6f:06:dd:cf:e5:
46:7a:d7:74:7d:26:e4:0e:47:9d:f3:b7:03:01:f7:
03:b7:fa:05:4a:e1:19:c6:5e:ad:7f:2c:c8:79:b9:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:7B:D2:EC:31:AF:A2:39:DC:24:59:FD:22:72:B1:16:4B:90:D5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nrB70uwxr6I53CRZ_SJysRZLkNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.133.0/24
195.21.135.0/24
195.162.249.0-195.162.252.255
Signature Algorithm: sha256WithRSAEncryption
df:4b:7a:f4:a1:cd:b3:f4:38:c7:d2:6b:b0:1c:a3:89:50:09:
e3:24:db:58:f2:d2:cd:37:3a:d0:7f:b5:7e:98:2d:e4:89:5a:
51:23:b9:68:f0:46:60:43:3a:40:ed:d4:21:a1:30:9e:1d:42:
f5:0d:44:34:ed:5b:c4:d6:15:91:8d:07:81:10:a4:2a:08:1c:
74:d4:d8:91:f0:98:63:31:85:19:5c:45:20:13:84:e7:f0:ea:
bb:a7:ab:ed:df:03:c3:a2:a3:1c:f7:b2:50:f7:f4:0c:b4:dc:
26:57:3e:9d:9f:ff:21:a1:2a:88:bc:84:72:2b:d4:7f:e8:98:
64:49:58:c9:e7:34:77:7e:d8:cd:5c:f8:ae:e7:6c:17:08:2a:
a0:ba:4f:f9:5c:00:f2:e0:6b:f7:1b:7c:f4:53:66:39:9f:71:
73:ca:d3:39:17:82:20:bf:6f:62:98:bf:9f:ca:68:ed:2d:6b:
10:48:5f:ee:56:c0:26:2e:b5:09:c4:1e:95:57:57:0a:9d:ac:
f9:96:fa:38:1e:22:37:58:79:76:af:a7:a9:bb:9d:ba:a8:e3:
92:1d:7f:49:af:4e:2f:a5:68:32:53:06:e4:c5:13:18:05:b3:
be:3f:44:26:b4:c0:aa:54:d4:b2:e7:ec:db:ff:94:28:60:74:
5b:aa:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:56:09 2026 by rpki-client