Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Nekk3PxF8fO-rhzaegHvfM_t41w.roa
File: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (raw, json)
Hash identifier: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=
Subject key identifier: 35:E9:24:DC:FC:45:F1:F3:BE:AE:1C:DA:7A:01:EF:7C:CF:ED:E3:5C
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019FEB1330A2E7DDCECB467CCD996CD2E1A5
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Nekk3PxF8fO-rhzaegHvfM_t41w.roa
Signing time: Mon 10 Aug 2026 09:48:51 +0000
ROA not before: Mon 10 Aug 2026 09:48:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42689
IP address blocks: 189.81.166.0/23 maxlen: 23
189.81.174.0/23 maxlen: 23
189.81.178.0/23 maxlen: 23
189.81.184.0/23 maxlen: 23
189.81.188.0/23 maxlen: 23
189.81.212.0/23 maxlen: 23
189.81.216.0/23 maxlen: 23
189.81.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:13:30:a2:e7:dd:ce:cb:46:7c:cd:99:6c:d2:e1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 10 09:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35e924dcfc45f1f3beae1cda7a01ef7ccfede35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:11:9e:8c:ce:e5:3c:ae:64:fd:7d:7f:40:
f9:f3:eb:13:ef:19:15:f3:65:25:56:a3:7c:5d:ee:
de:65:a4:0c:fd:cd:eb:a3:0c:8d:7a:29:52:57:87:
60:38:96:6d:94:d2:aa:b3:32:b1:b6:72:db:64:23:
a3:80:fc:3c:87:5b:73:dd:db:58:1a:d3:89:10:89:
2c:61:76:ca:5b:a4:bc:4c:39:54:04:6a:f2:2e:d4:
65:4e:c1:da:69:3e:37:3b:e1:93:ef:20:04:12:db:
86:d2:ec:e3:8b:66:8e:17:bb:76:73:69:0e:36:47:
9d:59:30:4b:88:a9:43:78:e4:20:f4:56:a6:94:ae:
85:4b:04:77:11:37:6a:75:83:61:ce:ef:6c:53:b9:
60:25:9d:5b:5f:1c:27:9a:68:bc:e1:92:fd:d0:98:
8a:6b:8e:2a:e5:5e:33:3c:cd:07:a5:fc:86:43:0a:
be:cb:15:27:04:ad:7e:e6:d0:66:15:e7:93:0c:f0:
c6:87:cb:bc:4c:d1:7f:25:d3:65:23:2b:a6:7e:79:
bb:46:33:04:a2:18:dd:e2:a0:5f:e0:68:d8:0d:77:
6b:60:5f:a4:ec:ea:2a:28:73:77:ff:db:eb:ff:65:
97:da:1d:ff:d6:c9:a1:21:f3:11:8e:3a:7e:64:b2:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:24:DC:FC:45:F1:F3:BE:AE:1C:DA:7A:01:EF:7C:CF:ED:E3:5C
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Nekk3PxF8fO-rhzaegHvfM_t41w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.166.0/23
189.81.174.0/23
189.81.178.0/23
189.81.184.0/23
189.81.188.0/23
189.81.212.0/23
189.81.216.0/23
189.81.248.0/23
Signature Algorithm: sha256WithRSAEncryption
44:73:1c:4d:c5:94:90:d6:f7:7a:a2:39:92:65:71:ba:be:62:
57:23:01:02:b0:b4:20:ec:3f:71:ff:0c:11:5f:7b:41:c7:7d:
9b:2f:a2:77:c4:ff:d9:d2:a1:45:e1:2c:41:01:70:e9:d6:cc:
ff:7a:0a:27:63:b9:07:a3:53:d4:f3:5c:0e:21:1a:18:9a:98:
11:bd:0f:67:a3:6e:21:64:97:8e:34:18:08:41:12:d1:62:31:
5f:e4:17:b6:c7:5b:d6:f8:20:1f:29:e2:15:cd:30:55:40:f9:
0b:7c:69:9e:2f:c6:02:0e:24:64:64:2a:ee:d5:0b:b0:ad:60:
f1:83:de:eb:ad:be:e2:02:39:b2:4b:41:f6:34:bd:1a:1d:0f:
fc:fd:9b:95:1e:98:e3:15:53:bb:ce:8d:7a:f3:20:32:b7:b1:
c5:e9:9c:2b:5b:f6:2f:3f:d8:ee:ee:91:be:ba:7f:a6:3f:1b:
ab:1b:2e:0b:1e:71:7e:fe:c0:86:0d:fa:3c:6e:31:dc:ca:38:
1b:49:d4:2c:cc:58:11:e9:11:d8:9a:f2:3e:4b:5c:9e:99:90:
7f:04:21:e9:cd:77:3f:5b:34:95:99:93:b4:1d:60:c1:aa:59:
78:0e:c9:cd:31:6d:10:1f:91:1b:40:cb:11:7e:5c:f4:d1:67:
28:db:79:87
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ/rEzCi593Oy0Z8zZls0uGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwODEwMDk0ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWU5MjRkY2ZjNDVmMWYzYmVhZTFjZGE3YTAxZWY3Y2NmZWRlMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYYRnozO5TyuZP19f0D58+sT7xkV
82UlVqN8Xe7eZaQM/c3rowyNeilSV4dgOJZtlNKqszKxtnLbZCOjgPw8h1tz3dtY
GtOJEIksYXbKW6S8TDlUBGryLtRlTsHaaT43O+GT7yAEEtuG0uzji2aOF7t2c2kO
NkedWTBLiKlDeOQg9FamlK6FSwR3ETdqdYNhzu9sU7lgJZ1bXxwnmmi84ZL90JiK
a44q5V4zPM0HpfyGQwq+yxUnBK1+5tBmFeeTDPDGh8u8TNF/JdNlIyumfnm7RjME
ohjd4qBf4GjYDXdrYF+k7OoqKHN3/9vr/2WX2h3/1smhIfMRjjp+ZLLnnQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDXpJNz8RfHzvq4c2noB73zP7eNcMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvTmVrazNQeEY4Zk8tcmh6YWVnSHZmTV90NDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBvVGmAwQB
vVGuAwQBvVGyAwQBvVG4AwQBvVG8AwQBvVHUAwQBvVHYAwQBvVH4MA0GCSqGSIb3
DQEBCwUAA4IBAQBEcxxNxZSQ1vd6ojmSZXG6vmJXIwECsLQg7D9x/wwRX3tBx32b
L6J3xP/Z0qFF4SxBAXDp1sz/egonY7kHo1PU81wOIRoYmpgRvQ9no24hZJeONBgI
QRLRYjFf5Be2x1vW+CAfKeIVzTBVQPkLfGmeL8YCDiRkZCru1QuwrWDxg97rrb7i
AjmyS0H2NL0aHQ/8/ZuVHpjjFVO7zo168yAyt7HF6ZwrW/YvP9ju7pG+un+mPxur
Gy4LHnF+/sCGDfo8bjHcyjgbSdQszFgR6RHYmvI+S1yemZB/BCHpzXc/WzSVmZO0
HWDBqll4DsnNMW0QH5EbQMsRflz00Wco23mH
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:32 2026 by rpki-client