Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/NN_M5XXnWkCmh6vokLB7v_qCgCE.roa
File: NN_M5XXnWkCmh6vokLB7v_qCgCE.roa (raw, json)
Hash identifier: fSLTWX8QP7uRT9K9w9UbhnW/7NpDslXCtNNC73VVI+g=
Subject key identifier: 34:DF:CC:E5:75:E7:5A:40:A6:87:AB:E8:90:B0:7B:BF:FA:82:80:21
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 019E8D9850AC253E513B6F6903AAACFF3C2E
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/NN_M5XXnWkCmh6vokLB7v_qCgCE.roa
Signing time: Wed 03 Jun 2026 13:07:10 +0000
ROA not before: Wed 03 Jun 2026 13:07:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 87.252.231.0/24 maxlen: 24
87.252.239.0/24 maxlen: 24
87.252.246.0/24 maxlen: 24
87.252.247.0/24 maxlen: 24
87.252.248.0/24 maxlen: 24
87.252.251.0/24 maxlen: 24
87.252.252.0/24 maxlen: 24
87.252.254.0/24 maxlen: 24
87.252.255.0/24 maxlen: 24
91.149.128.0/21 maxlen: 21
91.149.128.0/24 maxlen: 24
91.149.129.0/24 maxlen: 24
91.149.130.0/24 maxlen: 24
91.149.131.0/24 maxlen: 24
91.149.132.0/24 maxlen: 24
91.149.133.0/24 maxlen: 24
91.149.134.0/24 maxlen: 24
91.149.135.0/24 maxlen: 24
91.149.144.0/21 maxlen: 21
91.149.152.0/24 maxlen: 24
91.149.153.0/24 maxlen: 24
91.149.154.0/24 maxlen: 24
91.149.162.0/24 maxlen: 24
91.149.165.0/24 maxlen: 24
91.149.168.0/24 maxlen: 24
91.149.169.0/24 maxlen: 24
91.149.174.0/24 maxlen: 24
91.149.182.0/24 maxlen: 24
91.149.184.0/24 maxlen: 24
91.149.185.0/24 maxlen: 24
91.149.186.0/24 maxlen: 24
91.149.187.0/24 maxlen: 24
91.149.188.0/24 maxlen: 24
91.149.190.0/24 maxlen: 24
91.149.191.0/24 maxlen: 24
93.125.0.0/24 maxlen: 24
93.125.2.0/24 maxlen: 24
93.125.3.0/24 maxlen: 24
93.125.4.0/24 maxlen: 24
93.125.5.0/24 maxlen: 24
93.125.6.0/24 maxlen: 24
93.125.7.0/24 maxlen: 24
93.125.8.0/24 maxlen: 24
93.125.9.0/24 maxlen: 24
93.125.10.0/24 maxlen: 24
93.125.11.0/24 maxlen: 24
93.125.12.0/24 maxlen: 24
93.125.13.0/24 maxlen: 24
93.125.14.0/24 maxlen: 24
93.125.15.0/24 maxlen: 24
93.125.16.0/24 maxlen: 24
93.125.17.0/24 maxlen: 24
93.125.28.0/24 maxlen: 24
93.125.32.0/24 maxlen: 24
93.125.36.0/24 maxlen: 24
93.125.37.0/24 maxlen: 24
93.125.40.0/24 maxlen: 24
93.125.41.0/24 maxlen: 24
93.125.46.0/24 maxlen: 24
93.125.47.0/24 maxlen: 24
93.125.51.0/24 maxlen: 24
93.125.55.0/24 maxlen: 24
93.125.56.0/24 maxlen: 24
93.125.57.0/24 maxlen: 24
93.125.62.0/24 maxlen: 24
93.125.63.0/24 maxlen: 24
93.125.64.0/24 maxlen: 24
93.125.65.0/24 maxlen: 24
93.125.66.0/24 maxlen: 24
93.125.67.0/24 maxlen: 24
93.125.68.0/24 maxlen: 24
93.125.69.0/24 maxlen: 24
93.125.74.0/24 maxlen: 24
93.125.80.0/24 maxlen: 24
93.125.81.0/24 maxlen: 24
93.125.83.0/24 maxlen: 24
93.125.84.0/24 maxlen: 24
93.125.85.0/24 maxlen: 24
93.125.86.0/24 maxlen: 24
93.125.100.0/24 maxlen: 24
93.125.101.0/24 maxlen: 24
93.125.102.0/24 maxlen: 24
93.125.103.0/24 maxlen: 24
93.125.112.0/24 maxlen: 24
93.125.115.0/24 maxlen: 24
93.125.116.0/23 maxlen: 23
93.125.116.0/24 maxlen: 24
93.125.117.0/24 maxlen: 24
93.125.119.0/24 maxlen: 24
93.125.125.0/24 maxlen: 24
93.125.127.0/24 maxlen: 24
178.172.144.0/24 maxlen: 24
178.172.145.0/24 maxlen: 24
178.172.146.0/24 maxlen: 24
178.172.147.0/24 maxlen: 24
178.172.151.0/24 maxlen: 24
178.172.152.0/24 maxlen: 24
178.172.156.0/24 maxlen: 24
178.172.157.0/24 maxlen: 24
178.172.158.0/24 maxlen: 24
178.172.159.0/24 maxlen: 24
178.172.176.0/24 maxlen: 24
178.172.200.0/24 maxlen: 24
178.172.203.0/24 maxlen: 24
178.172.205.0/24 maxlen: 24
178.172.206.0/24 maxlen: 24
178.172.207.0/24 maxlen: 24
178.172.209.0/24 maxlen: 24
178.172.210.0/24 maxlen: 24
178.172.240.0/24 maxlen: 24
178.172.241.0/24 maxlen: 24
213.184.224.0/22 maxlen: 22
213.184.224.0/24 maxlen: 24
213.184.225.0/24 maxlen: 24
213.184.226.0/24 maxlen: 24
213.184.227.0/24 maxlen: 24
213.184.230.0/24 maxlen: 24
213.184.232.0/24 maxlen: 24
213.184.233.0/24 maxlen: 24
213.184.244.0/24 maxlen: 24
213.184.245.0/24 maxlen: 24
213.184.248.0/24 maxlen: 24
213.184.249.0/24 maxlen: 24
213.184.250.0/24 maxlen: 24
213.184.251.0/24 maxlen: 24
213.184.252.0/24 maxlen: 24
213.184.253.0/24 maxlen: 24
213.184.254.0/24 maxlen: 24
213.184.255.0/24 maxlen: 24
217.21.33.0/24 maxlen: 24
217.21.46.0/24 maxlen: 24
217.21.48.0/24 maxlen: 24
217.21.51.0/24 maxlen: 24
217.21.54.0/24 maxlen: 24
217.21.59.0/24 maxlen: 24
217.21.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:98:50:ac:25:3e:51:3b:6f:69:03:aa:ac:ff:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jun 3 13:07:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34dfcce575e75a40a687abe890b07bbffa828021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:4d:ab:f4:28:1b:65:e0:a9:45:82:77:12:
f8:2c:d8:1d:e8:89:83:03:e1:c1:05:ae:7f:a6:8d:
ca:ee:11:bf:fc:a0:89:d6:4a:b0:6b:eb:c0:21:56:
58:4b:4c:c8:48:9f:c5:5e:e8:2f:db:84:b1:8b:7c:
ea:55:ba:3c:d8:e9:93:d6:61:d4:1a:f0:2c:0e:33:
6c:2f:f8:13:53:de:a7:8d:a3:c9:f4:d7:26:22:5c:
5a:6e:3c:09:ce:8a:97:3f:11:ac:a2:12:28:5b:e7:
12:b5:b4:3e:9b:53:4b:60:ce:67:18:a4:55:b3:c0:
be:a6:77:bd:c7:d1:bc:ad:49:df:95:47:5f:28:74:
16:a0:ca:50:66:9f:64:91:3f:86:3a:f7:5e:2d:70:
17:c6:2a:b0:a8:99:c4:80:15:43:a3:8f:b8:e7:18:
9c:23:7b:af:a1:94:81:5c:d9:18:b5:75:cc:07:11:
d6:a9:4c:d8:0e:9e:ad:22:00:78:9b:cc:a4:e6:04:
a0:da:85:c9:a3:c4:1b:dc:f1:03:0d:43:bd:56:eb:
56:e2:94:26:ff:50:84:84:c0:0b:f7:90:d5:8f:fb:
02:7a:40:1d:b4:c7:16:1d:73:1b:c1:ed:f8:78:03:
65:ea:5e:3b:93:89:02:54:60:06:fa:48:eb:6d:ba:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:CC:E5:75:E7:5A:40:A6:87:AB:E8:90:B0:7B:BF:FA:82:80:21
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/NN_M5XXnWkCmh6vokLB7v_qCgCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.231.0/24
87.252.239.0/24
87.252.246.0-87.252.248.255
87.252.251.0-87.252.252.255
87.252.254.0/23
91.149.128.0/21
91.149.144.0-91.149.154.255
91.149.162.0/24
91.149.165.0/24
91.149.168.0/23
91.149.174.0/24
91.149.182.0/24
91.149.184.0-91.149.188.255
91.149.190.0/23
93.125.0.0/24
93.125.2.0-93.125.17.255
93.125.28.0/24
93.125.32.0/24
93.125.36.0/23
93.125.40.0/23
93.125.46.0/23
93.125.51.0/24
93.125.55.0-93.125.57.255
93.125.62.0-93.125.69.255
93.125.74.0/24
93.125.80.0/23
93.125.83.0-93.125.86.255
93.125.100.0/22
93.125.112.0/24
93.125.115.0-93.125.117.255
93.125.119.0/24
93.125.125.0/24
93.125.127.0/24
178.172.144.0/22
178.172.151.0-178.172.152.255
178.172.156.0/22
178.172.176.0/24
178.172.200.0/24
178.172.203.0/24
178.172.205.0-178.172.207.255
178.172.209.0-178.172.210.255
178.172.240.0/23
213.184.224.0/22
213.184.230.0/24
213.184.232.0/23
213.184.244.0/23
213.184.248.0/21
217.21.33.0/24
217.21.46.0/24
217.21.48.0/24
217.21.51.0/24
217.21.54.0/24
217.21.59.0-217.21.60.255
Signature Algorithm: sha256WithRSAEncryption
7b:8a:08:0c:65:51:28:39:da:c1:6d:13:ce:4a:a5:80:77:c7:
89:c3:e8:11:59:6a:c5:dc:8f:20:cf:86:57:bd:fe:f6:12:f2:
09:26:a8:f1:7a:89:8c:89:a7:73:9b:d5:18:11:1f:ec:36:14:
25:eb:c3:88:69:c3:9d:3b:bb:8a:09:a6:45:75:ce:57:bd:6e:
a4:1b:d7:87:d3:b8:71:ec:07:8b:e3:d3:6f:e8:f3:fc:81:d0:
15:47:58:44:38:71:19:89:bb:05:31:01:40:3a:23:9f:6c:91:
6e:41:d7:26:3a:30:e1:19:77:76:99:ea:94:d9:7a:84:38:25:
42:6a:4e:b0:74:d0:c1:43:79:6c:a3:0a:ba:81:72:f1:26:98:
eb:9d:38:7a:2c:bc:ec:4c:89:ef:5a:f6:fb:22:7d:b4:a2:85:
d0:dc:06:28:a6:49:ef:b6:79:f7:47:cc:d5:2d:ec:21:18:b4:
15:cc:9c:f0:c4:7f:63:1f:82:a7:81:7a:e6:c5:45:b3:23:37:
6c:f9:6b:b6:f8:39:79:43:4d:ff:b5:55:8b:f4:f2:96:7f:3d:
5b:12:34:17:c5:ff:86:00:33:d0:42:91:14:bb:d8:05:9d:41:
ba:26:23:5c:b2:23:38:93:ec:fd:56:f1:3a:6c:03:40:a1:a2:
f0:70:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:34 2026 by rpki-client