Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/NJmIrLuW3F1xzrQA80p3Jc3p0-4.roa
File: NJmIrLuW3F1xzrQA80p3Jc3p0-4.roa (raw, json)
Hash identifier: awtacVA1C8Oyf3wZvaBRHDbSqrMV+Fily6lvWQSoYE0=
Subject key identifier: 34:99:88:AC:BB:96:DC:5D:71:CE:B4:00:F3:4A:77:25:CD:E9:D3:EE
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019DB03E0154D3300CBDECB3B6F2B79C3018
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/NJmIrLuW3F1xzrQA80p3Jc3p0-4.roa
Signing time: Tue 21 Apr 2026 13:32:26 +0000
ROA not before: Tue 21 Apr 2026 13:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 189.81.64.0/23 maxlen: 23
189.81.72.0/23 maxlen: 23
189.81.76.0/23 maxlen: 23
205.188.6.0/23 maxlen: 23
205.188.62.0/23 maxlen: 23
205.188.148.0/22 maxlen: 22
205.188.152.0/22 maxlen: 22
205.188.228.0/22 maxlen: 22
205.188.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:3e:01:54:d3:30:0c:bd:ec:b3:b6:f2:b7:9c:30:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Apr 21 13:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=349988acbb96dc5d71ceb400f34a7725cde9d3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:3b:0a:91:ac:ac:40:ff:0d:b7:a8:21:65:
25:f2:b6:f3:58:ed:3b:95:d0:4a:09:72:a3:dc:f3:
09:1b:5f:8b:34:8a:17:6e:59:c9:81:bb:8c:63:7b:
71:23:77:f8:1a:51:d9:a6:c8:a3:85:43:26:54:9a:
f2:10:2f:cb:df:0c:5c:6a:8e:4c:f2:4d:48:7e:7e:
0c:4d:b8:4a:0d:ab:c8:e1:8c:b6:0a:53:88:b7:b3:
9a:37:94:f9:a4:a0:5d:7c:dc:a3:e8:cf:84:fe:37:
21:23:53:e0:71:04:7a:ac:6c:91:16:19:ea:65:a4:
7c:b9:57:05:db:9c:d9:dc:d3:99:98:bf:95:63:82:
33:7f:ed:14:e2:a8:ae:5f:2e:75:a2:65:45:0d:8e:
3d:f5:a1:9d:00:ea:36:8f:26:cf:03:4f:46:c7:b1:
5a:fe:33:e8:91:e0:c9:48:5d:ca:46:2b:d0:7a:78:
a0:87:ed:5b:2a:80:f2:e7:13:91:62:20:20:bc:6c:
9c:fc:21:b0:ea:d2:13:d0:42:7f:96:90:67:01:fc:
e0:e7:59:80:6d:26:eb:58:e6:2b:47:9f:ee:0e:1c:
d4:38:27:5d:ae:59:39:c5:9d:54:b5:64:7f:d6:4f:
14:ce:ff:35:9c:8e:97:8a:94:8c:9e:55:c9:3c:2d:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:88:AC:BB:96:DC:5D:71:CE:B4:00:F3:4A:77:25:CD:E9:D3:EE
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/NJmIrLuW3F1xzrQA80p3Jc3p0-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.64.0/23
189.81.72.0/23
189.81.76.0/23
205.188.6.0/23
205.188.62.0/23
205.188.148.0-205.188.155.255
205.188.228.0/22
205.188.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:65:b8:a6:48:68:d9:40:5e:7f:9f:8b:ba:c6:c0:23:c3:1d:
e2:fe:f9:1e:35:d6:9a:8d:54:11:c6:75:29:76:6e:a2:38:4c:
7e:3f:8c:61:49:82:39:28:98:1e:06:d5:3d:a3:89:4c:b1:a6:
a8:8b:94:9f:d2:c6:71:81:b9:2f:65:bf:b2:66:7a:0b:09:c7:
6b:ff:a0:3e:44:24:f1:21:74:c0:7c:1d:49:e8:4b:26:8d:b7:
2e:8b:2a:ca:47:4e:0b:e0:82:c1:25:d8:3e:8e:b0:32:4d:3b:
b7:91:ec:63:2a:e4:f5:8b:09:89:2c:f0:e7:0a:ed:f0:34:3f:
83:93:de:e7:b5:a6:a7:fd:19:e1:25:0c:57:2e:dc:8a:e9:28:
bc:92:70:ad:bd:ea:7e:aa:69:9c:8c:27:17:93:01:3e:bc:96:
4d:45:51:10:93:bf:d7:18:03:7d:c7:c4:56:f8:99:d2:07:f8:
13:b4:f1:9c:b0:6a:c3:95:8b:11:c8:28:2a:12:8e:3a:b5:55:
21:fb:63:ed:c8:49:85:ce:a6:86:0b:8a:8b:f2:52:a2:54:37:
f5:18:c1:07:bf:7d:f1:a3:92:2b:b1:d6:dc:be:e1:8b:56:ce:
27:92:76:24:67:33:2c:03:63:c8:de:2d:79:48:42:83:b4:39:
05:38:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:27 2026 by rpki-client