Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NNEwic3Oz6Kz7LWBylx_wRf5Ff4.roa
File: NNEwic3Oz6Kz7LWBylx_wRf5Ff4.roa (raw, json)
Hash identifier: y+WbD4VfntLxGhNNcxAEZgeLjcJNJtq0gwRxWvL9HYo=
Subject key identifier: 34:D1:30:89:CD:CE:CF:A2:B3:EC:B5:81:CA:5C:7F:C1:17:F9:15:FE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019ED9A018A8F86290E9E4CC5E1EF94D1AF0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NNEwic3Oz6Kz7LWBylx_wRf5Ff4.roa
Signing time: Thu 18 Jun 2026 07:26:48 +0000
ROA not before: Thu 18 Jun 2026 07:26:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.85.191.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.25.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:a0:18:a8:f8:62:90:e9:e4:cc:5e:1e:f9:4d:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 18 07:26:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34d13089cdcecfa2b3ecb581ca5c7fc117f915fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:6b:5e:6c:46:95:ce:b9:fd:80:40:f2:5c:
19:ab:5c:54:fb:8c:8b:20:25:d6:bf:1d:3e:c6:8b:
17:87:f1:f0:a2:d7:d7:b3:d1:16:05:81:af:8e:46:
e8:34:92:39:7a:c6:ca:0b:7b:39:10:01:19:b5:c5:
2c:9d:31:d6:5f:a8:8a:fc:e6:2a:9d:fa:d1:66:52:
b9:17:4c:d7:33:0f:8a:45:be:08:3f:6c:ed:4c:48:
bb:6d:f4:22:60:3c:d5:a0:c1:da:1a:24:c4:f3:d8:
d3:90:e6:2e:1a:1f:e7:fd:60:ef:f7:ba:c1:84:35:
c6:75:bf:b9:7d:21:47:22:cb:e1:5c:39:51:27:9f:
9e:a9:93:59:a1:55:0c:32:82:3c:6e:01:d0:35:67:
f5:03:7c:66:43:ac:e3:18:f5:5c:f1:26:86:d7:b2:
9f:75:a5:4c:04:43:bc:27:af:82:e5:69:e2:17:ad:
49:c3:c2:1b:b1:a2:44:76:09:0c:da:5a:82:3a:6f:
71:b2:ea:b6:cd:67:9f:cb:ca:41:3d:84:74:59:85:
f9:78:f0:d8:cf:49:62:b1:43:47:2a:17:a1:48:64:
18:4e:46:99:8a:12:b8:f3:39:d2:e6:bd:ae:ef:04:
08:12:e0:f9:3b:09:fe:9a:a3:e5:71:f2:2f:68:b2:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:30:89:CD:CE:CF:A2:B3:EC:B5:81:CA:5C:7F:C1:17:F9:15:FE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NNEwic3Oz6Kz7LWBylx_wRf5Ff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.191.0/24
185.86.13.0/24
185.86.164.0/22
185.87.24.0/23
185.87.122.0/23
185.119.83.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5d:aa:6d:f3:97:77:72:87:05:fa:2c:8d:ae:1b:35:ef:04:
b5:b1:3d:80:69:e3:f2:54:e8:aa:45:03:51:8e:24:ee:76:c7:
cd:89:de:ac:8f:e5:b6:54:5e:14:f9:05:0a:0c:3a:6d:e6:b3:
32:af:dd:1f:e7:11:06:0f:1a:15:aa:46:f8:a2:9c:14:f2:57:
9b:7c:c2:1c:f4:37:e1:3d:2d:37:58:73:00:bf:60:14:81:3b:
e6:88:df:b6:ae:0e:08:04:7f:b8:4d:1b:e8:25:7d:f5:70:4a:
45:b1:55:21:bc:ba:74:cf:4b:75:ad:c1:92:08:03:28:2a:21:
15:ff:7c:00:69:4a:59:a8:59:6e:40:41:60:7b:e2:20:fe:c9:
a0:74:a8:22:41:de:8b:5e:dd:04:42:14:71:e2:f2:c8:98:e4:
28:52:53:0a:76:b3:18:f7:05:89:01:f4:82:ad:fb:f3:f7:de:
aa:0d:d8:62:fb:a2:23:66:31:f3:ac:17:74:50:38:c8:92:f9:
e9:1b:58:56:d5:b4:60:e2:16:5a:e9:f7:7d:23:55:c7:11:eb:
51:0f:84:c6:6e:e6:d7:62:17:90:eb:bb:af:7a:2b:34:14:05:
15:59:33:cd:1f:b7:c5:e5:a5:4d:56:33:f9:eb:ac:0b:e7:36:
6d:34:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 10:15:30 2026 by rpki-client