Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/NJ8Bqk8L3wqRQ3l0n0_fV41iH7Q.roa
File: NJ8Bqk8L3wqRQ3l0n0_fV41iH7Q.roa (raw, json)
Hash identifier: f6+Uh14KUYXnW7P9IoilQ4rcGTPzTyNRQ6v1ZlIA1QU=
Subject key identifier: 34:9F:01:AA:4F:0B:DF:0A:91:43:79:74:9F:4F:DF:57:8D:62:1F:B4
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019E7336C38EA46EF052F9A1CCD6E7C321A8
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/NJ8Bqk8L3wqRQ3l0n0_fV41iH7Q.roa
Signing time: Fri 29 May 2026 10:10:29 +0000
ROA not before: Fri 29 May 2026 10:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51032
IP address blocks: 31.128.128.0/19 maxlen: 24
31.130.0.0/19 maxlen: 24
85.159.224.0/24 maxlen: 24
85.159.227.0/24 maxlen: 24
89.23.128.0/19 maxlen: 20
89.23.128.0/21 maxlen: 24
89.23.144.0/20 maxlen: 24
89.23.146.0/24 maxlen: 24
89.23.147.0/24 maxlen: 24
89.23.160.0/19 maxlen: 19
89.23.168.0/21 maxlen: 21
89.23.176.0/21 maxlen: 21
91.123.80.0/20 maxlen: 20
91.202.204.0/22 maxlen: 24
93.157.160.0/21 maxlen: 21
93.157.162.0/24 maxlen: 24
93.157.163.0/24 maxlen: 24
178.216.176.0/21 maxlen: 24
2a13:2c80::/29 maxlen: 32
2a13:2c80::/32 maxlen: 48
2a13:2c81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:36:c3:8e:a4:6e:f0:52:f9:a1:cc:d6:e7:c3:21:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: May 29 10:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=349f01aa4f0bdf0a914379749f4fdf578d621fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:cf:2d:2c:8e:9d:0f:16:7b:86:27:85:cd:
9a:b2:5f:fc:81:05:38:a7:23:af:73:c5:be:35:0a:
ad:91:42:85:b5:f7:60:e1:1b:e6:ab:e7:c2:7f:be:
78:d6:63:12:71:28:0a:fd:dc:5c:45:6e:e5:af:3b:
56:08:2a:79:ae:d4:62:a9:a8:37:04:9a:c4:cf:15:
45:71:35:20:a2:67:52:49:d5:1b:ee:95:3e:be:d7:
f7:bc:e2:44:08:02:cf:fe:97:89:40:b0:16:8c:f1:
0d:0c:5d:89:02:11:6c:f0:9c:3c:22:b5:47:1a:9d:
fe:22:dd:f7:b9:f6:e2:63:d0:8d:6a:c0:d1:b4:c4:
a2:3f:9b:9f:95:d8:59:3b:b8:37:13:c2:9a:ce:66:
d0:cd:03:1c:f3:20:a5:1c:5c:c5:55:1f:7d:32:e0:
0e:f4:20:26:0b:3f:49:66:85:44:70:0e:d6:ed:1b:
6e:46:74:1f:33:af:93:c5:bd:ef:c3:90:58:0f:44:
03:90:8b:1c:21:d9:b3:3f:4a:57:0d:b5:39:08:9b:
f0:99:3a:a4:5c:54:3c:c8:1f:22:ed:2e:cb:c3:2c:
42:d4:58:6f:67:d4:e7:fd:66:ae:5e:f8:0b:1b:0a:
a5:4c:67:9f:42:01:f3:30:6b:35:71:2e:e3:73:c1:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:01:AA:4F:0B:DF:0A:91:43:79:74:9F:4F:DF:57:8D:62:1F:B4
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/NJ8Bqk8L3wqRQ3l0n0_fV41iH7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.128.0/19
31.130.0.0/19
85.159.224.0/24
85.159.227.0/24
89.23.128.0/18
91.123.80.0/20
91.202.204.0/22
93.157.160.0/21
178.216.176.0/21
IPv6:
2a13:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
a9:e4:7d:34:9a:8b:33:1e:d2:a4:49:92:92:2d:47:ce:a6:64:
54:21:4d:ab:16:73:bf:f4:99:7b:f5:07:fe:85:e3:aa:5a:0f:
a1:cf:4f:05:12:b2:10:38:c7:97:ef:f5:85:a6:f0:2b:62:47:
fe:cf:88:1f:4f:54:9d:d9:4e:fc:48:9f:40:8d:9e:d4:9e:ae:
df:6d:0d:d0:54:d6:8a:5b:32:bb:a8:93:24:57:52:bf:a8:17:
2c:62:fa:e7:39:07:23:54:42:7b:e9:5b:29:91:47:db:b7:53:
57:d3:f0:2f:3f:16:2a:b1:1f:8c:00:ef:f1:80:8a:87:92:e3:
50:16:90:0e:b9:ac:e1:9e:cc:7c:7c:8e:0b:e7:a8:76:23:f8:
d6:f7:e2:78:f2:c5:88:c2:42:83:0c:7f:ac:e8:f2:34:13:23:
61:6e:f8:03:63:66:da:16:36:8c:f5:10:a2:85:0c:ca:ba:66:
d0:f6:99:14:2e:87:28:01:30:f9:1b:3b:83:62:da:27:27:6d:
80:2f:83:72:57:04:c8:2b:0d:d8:79:96:a5:47:6d:52:9c:8e:
95:81:ea:26:0f:52:1c:88:ee:02:fe:b0:c0:63:e9:df:6d:a6:
a6:fc:b4:6b:bb:d2:b6:81:cd:ac:06:14:62:f4:c3:49:0a:d9:
54:19:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client