Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/NJlkPEbvZj17oZnTPoUJnz4aYHU.roa
File: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (raw, json)
Hash identifier: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=
Subject key identifier: 34:99:64:3C:46:EF:66:3D:7B:A1:99:D3:3E:85:09:9F:3E:1A:60:75
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019E4ED8E137041724BC1C16415C5446BF90
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/NJlkPEbvZj17oZnTPoUJnz4aYHU.roa
Signing time: Fri 22 May 2026 08:41:36 +0000
ROA not before: Fri 22 May 2026 08:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 212.102.230.0/24 maxlen: 24
212.102.252.0/24 maxlen: 24
212.102.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:d8:e1:37:04:17:24:bc:1c:16:41:5c:54:46:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: May 22 08:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3499643c46ef663d7ba199d33e85099f3e1a6075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:98:32:f0:9a:c3:7f:3e:35:3b:7f:15:c4:
d0:be:2b:e6:70:61:1f:a9:93:c6:b9:4a:8f:b6:4a:
fc:58:a6:c2:e0:12:e5:02:70:c5:aa:90:a1:5b:3e:
ec:f3:4b:7b:af:7e:c1:cc:d3:6d:02:19:4c:4d:28:
84:2e:7c:fd:f4:de:70:a6:dc:4e:a8:b2:b2:58:5a:
33:bd:c6:e9:72:13:c7:5e:a7:ce:bb:dc:c6:72:ed:
77:f7:b0:a4:b3:04:e1:aa:1a:8b:15:f9:ef:05:22:
b8:00:7a:77:c3:c1:b3:fc:63:5d:17:f6:78:23:54:
b3:fa:63:d9:bf:2c:18:a0:0d:1f:ae:f0:c6:b8:a8:
86:ba:57:a5:35:1a:61:68:b2:58:f1:d8:00:5f:34:
d0:5d:bf:7a:a3:e9:73:eb:1c:04:f4:b4:17:6d:0f:
86:90:3a:40:54:be:10:61:91:dd:c4:58:24:c5:e9:
b0:b1:41:6d:03:9f:c6:d7:90:59:17:72:e3:2b:77:
cd:a0:c6:32:bb:c1:32:e1:bf:12:d4:9a:71:44:f9:
9b:05:e7:5f:e6:f0:af:eb:3d:68:5b:32:6b:c1:05:
15:ec:1c:32:1e:b3:b2:cb:d8:c3:6c:d0:b4:d2:fc:
cf:f4:43:ac:57:8f:12:53:94:1b:ef:19:2e:d0:4b:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:64:3C:46:EF:66:3D:7B:A1:99:D3:3E:85:09:9F:3E:1A:60:75
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/NJlkPEbvZj17oZnTPoUJnz4aYHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.230.0/24
212.102.252.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:a1:04:5e:a6:b8:4c:ca:de:30:00:e3:66:24:6d:ca:f5:0f:
a0:07:09:6a:10:32:ec:7d:75:c5:a1:28:66:28:c7:6c:bc:2f:
2d:1f:9a:e7:30:bf:28:b7:97:e4:ec:c2:3b:83:c8:0d:e6:40:
fd:69:f2:bd:88:78:f1:40:6f:8b:d2:77:b1:e7:bb:18:d0:1a:
53:aa:5d:b2:8d:4a:c1:d6:c3:08:35:c8:34:ad:6b:61:2e:63:
18:bb:ee:c0:70:24:94:fe:d1:78:1c:e8:4e:48:4f:1a:15:36:
e0:3f:3d:44:2f:94:3d:80:01:87:28:90:4f:3b:6e:d9:ad:13:
4d:e8:25:f3:52:88:cf:49:f9:e1:f9:1b:5d:53:fc:1d:28:e5:
52:48:f9:e0:aa:ed:4d:6a:c4:7d:71:77:22:d3:e1:08:2c:13:
c2:74:53:00:93:45:63:60:c4:8d:2d:49:4b:89:a4:ff:d5:4a:
58:f6:06:8a:0b:e3:3f:3b:ed:6f:8a:02:3a:ba:67:2a:7a:5a:
85:a0:de:ca:f7:ea:fd:ab:ae:8e:07:b6:b6:71:ab:1f:3b:36:
ef:a5:2e:34:f8:cf:9d:da:14:ee:06:42:34:01:62:78:25:f9:
7f:db:d5:2b:7a:d2:1a:07:6d:28:a7:f2:75:59:98:46:2e:36:
57:8e:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 19:10:31 2026 by rpki-client