Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa
File: NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa (raw, json)
Hash identifier: 3VMJ8FAcJtXYQQFiElHCi0MUd/IBCd2Oo6ayYD6ZuQI=
Subject key identifier: 34:43:74:2D:76:92:7D:16:35:2E:75:0B:76:42:6D:8F:A9:91:34:94
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019E8CAF1E26D37EE8EC069070AD1A2E8A38
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa
Signing time: Wed 03 Jun 2026 08:52:27 +0000
ROA not before: Wed 03 Jun 2026 08:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 64.119.64.0/20 maxlen: 24
70.40.160.0/20 maxlen: 24
80.224.254.0/24 maxlen: 24
85.136.0.0/20 maxlen: 24
85.136.32.0/20 maxlen: 24
85.136.64.0/20 maxlen: 24
86.105.104.0/22 maxlen: 24
89.36.236.0/22 maxlen: 24
89.37.128.0/24 maxlen: 24
89.37.188.0/22 maxlen: 24
89.40.43.0/24 maxlen: 24
89.184.208.0/20 maxlen: 32
91.232.136.0/22 maxlen: 24
93.114.169.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
94.177.65.0/24 maxlen: 24
94.190.248.0/22 maxlen: 24
135.132.48.0/20 maxlen: 24
176.223.190.0/24 maxlen: 24
185.64.100.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
185.210.40.0/22 maxlen: 24
185.215.220.0/22 maxlen: 24
185.217.24.0/22 maxlen: 24
185.223.40.0/22 maxlen: 24
185.224.140.0/22 maxlen: 24
185.249.236.0/22 maxlen: 24
185.252.168.0/22 maxlen: 24
188.211.252.0/22 maxlen: 24
188.212.104.0/22 maxlen: 24
193.46.204.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:af:1e:26:d3:7e:e8:ec:06:90:70:ad:1a:2e:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jun 3 08:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3443742d76927d16352e750b76426d8fa9913494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:ba:d8:99:d8:dd:e0:5c:04:42:aa:dd:7a:
c8:3b:61:a5:99:6f:07:0d:d2:c2:59:6b:c5:41:2c:
00:e1:03:29:af:bb:3a:f2:56:4d:9f:9b:4e:de:7f:
c1:26:4e:c2:79:2b:1a:2e:40:06:cb:3d:2c:30:86:
5e:e0:1b:ef:a2:7e:54:ee:01:c9:a2:d2:1b:27:2c:
68:a9:37:83:d2:45:91:84:90:81:b5:c5:5c:65:75:
e2:d5:87:c4:89:74:18:72:02:7e:51:7c:96:10:87:
55:5a:1a:67:9c:a1:d6:d3:62:dc:67:2b:5b:f5:99:
fc:ee:10:67:07:79:66:fd:87:b3:fb:5b:ab:fd:44:
f3:cf:1b:28:1e:66:e4:ab:b0:7f:62:1d:e7:15:c9:
b6:dd:cd:91:a5:81:2d:e6:29:27:4f:e7:4d:a2:a3:
f8:33:79:2e:ab:07:fc:06:23:c0:39:a3:e6:a9:a0:
78:55:bc:38:00:ba:7a:cc:c2:ab:09:ff:69:ed:6e:
7b:30:aa:87:53:ef:eb:a7:6c:d2:3f:c3:a6:92:75:
23:9e:dc:9b:08:de:e8:8c:60:09:40:1c:b5:73:96:
0d:ef:3c:d1:4c:5d:7f:8d:95:16:eb:3e:c8:09:9d:
58:4f:00:80:e6:51:6c:b1:8a:4d:bf:d4:09:ac:77:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:43:74:2D:76:92:7D:16:35:2E:75:0B:76:42:6D:8F:A9:91:34:94
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.119.64.0/20
70.40.160.0/20
80.224.254.0/24
85.136.0.0/20
85.136.32.0/20
85.136.64.0/20
86.105.104.0/22
89.36.236.0/22
89.37.128.0/24
89.37.188.0/22
89.40.43.0/24
89.184.208.0/20
91.232.136.0/22
93.114.169.0/24
93.115.155.0/24
94.177.65.0/24
94.190.248.0/22
135.132.48.0/20
176.223.190.0/24
185.64.100.0/22
185.172.20.0/22
185.210.40.0/22
185.215.220.0/22
185.217.24.0/22
185.223.40.0/22
185.224.140.0/22
185.249.236.0/22
185.252.168.0/22
188.211.252.0/22
188.212.104.0/22
193.46.204.0/24
193.46.211.0/24
194.213.10.0/24
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a3:a4:59:be:94:d3:74:b7:af:a8:c5:68:5b:b6:0a:ec:51:
81:58:06:a1:8f:30:1b:48:03:aa:18:6c:18:55:e0:24:36:e7:
15:d2:8a:80:c0:bc:77:c6:20:ca:dd:6b:b3:c3:72:34:cf:14:
95:80:5e:2d:ad:99:8c:15:f6:d8:b3:1a:83:36:78:3a:dd:8c:
1b:5a:7a:5c:59:4a:f1:c6:6f:44:fb:1a:06:a3:c9:4d:e1:d9:
05:e7:fa:bd:d0:4f:89:b9:81:b0:8f:8e:90:00:90:80:b8:08:
a9:96:d6:11:7c:f1:dd:cc:7d:41:c1:e6:05:09:4d:62:1f:64:
a8:39:5d:a2:93:f8:4d:29:1f:ba:03:a6:a7:b2:48:53:1a:b2:
39:c9:9b:7e:f5:8e:f7:a3:79:73:97:1f:09:f8:81:67:cc:c3:
12:78:b4:d2:f2:27:49:72:b4:33:a5:9e:cc:32:6e:dc:e0:e9:
2f:e8:fd:71:a4:ec:38:3b:4f:1a:88:a1:ea:0f:dc:03:65:a7:
c5:3e:16:cf:f2:25:54:12:da:3b:92:9b:54:22:c3:08:25:74:
18:3e:67:3d:44:19:65:30:5c:04:bf:d9:bb:2c:cf:a9:97:1b:
f5:32:27:3b:e4:d1:96:51:3b:0a:82:2f:29:14:2d:b5:d3:c2:
75:bc:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:31 2026 by rpki-client