Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/NS4l1SYnesHIIXgiS7dfL8jiRWA.roa
File: NS4l1SYnesHIIXgiS7dfL8jiRWA.roa (raw, json)
Hash identifier: jxlU4IQdjMOAp7FY4ApIyNsciw+kjZLM08J+vmusjCY=
Subject key identifier: 35:2E:25:D5:26:27:7A:C1:C8:21:78:22:4B:B7:5F:2F:C8:E2:45:60
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 01A163DD427CAF378CF8EC2317034CF3DDF4
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/NS4l1SYnesHIIXgiS7dfL8jiRWA.roa
Signing time: Thu 22 Oct 2026 13:46:47 +0000
ROA not before: Thu 22 Oct 2026 13:46:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 185.129.18.0/24 maxlen: 24
185.129.19.0/24 maxlen: 24
185.165.76.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
194.99.74.0/24 maxlen: 24
2a14:e180:1::/48 maxlen: 48
2a14:e180:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:dd:42:7c:af:37:8c:f8:ec:23:17:03:4c:f3:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Oct 22 13:46:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=352e25d526277ac1c82178224bb75f2fc8e24560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:de:80:f7:be:d7:48:27:1e:4a:c4:11:50:
75:72:80:ef:8d:ce:d5:83:b3:82:69:98:9c:42:0a:
56:c1:12:fa:d2:05:5e:4f:c1:ff:b7:dd:f6:c3:05:
11:8f:be:bf:37:dd:c2:d2:0b:e2:9a:5f:c3:98:8f:
f8:c4:88:29:fa:fa:b1:ce:08:ac:0d:c5:45:ef:f3:
5d:c7:76:74:32:d6:7f:86:54:e6:06:8b:5b:bf:42:
03:69:84:1c:a1:2f:51:da:fa:14:1a:69:34:bb:5e:
bb:3c:a1:9c:31:f7:eb:f5:f6:32:c2:bb:4a:1e:ef:
cb:22:a8:08:12:1a:26:df:4b:b4:eb:63:19:47:45:
d4:5c:ca:24:b6:28:ea:17:be:d4:f5:fd:b8:46:ac:
6c:43:62:3d:f4:92:0c:d8:23:80:1a:06:33:14:87:
4b:e8:e9:d5:ed:69:f9:ef:70:e0:82:4d:6e:a5:7a:
9a:ca:3d:d6:3c:da:86:45:d0:5b:ae:f5:46:be:24:
14:fd:3e:e6:57:c3:6d:88:67:ce:0e:42:c5:5a:fa:
69:4d:b9:76:64:fe:8c:d9:2b:a6:62:ec:24:0a:29:
58:4f:b0:76:28:25:c1:aa:40:1f:95:12:ae:55:00:
bb:2f:14:7c:df:6d:2b:20:28:6a:c6:cc:00:6d:61:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:25:D5:26:27:7A:C1:C8:21:78:22:4B:B7:5F:2F:C8:E2:45:60
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/NS4l1SYnesHIIXgiS7dfL8jiRWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.18.0/23
185.165.76.0/24
185.231.109.0/24
194.99.74.0/24
IPv6:
2a14:e180:1::/48
2a14:e180:4::/48
Signature Algorithm: sha256WithRSAEncryption
71:b8:4f:e9:e5:0b:35:5b:e4:8f:02:97:bf:b6:cb:24:d7:7f:
6a:bc:fb:fd:43:e1:61:60:c7:70:94:31:1f:10:81:13:e3:86:
15:d9:a1:c4:e5:9c:0e:56:c7:d0:b8:c5:fd:60:fb:38:fb:db:
cc:ee:cd:65:92:f8:0d:c2:f5:fc:5d:1d:c9:d8:3f:32:e5:89:
c2:24:b7:f3:32:e3:f5:a7:1e:78:fb:e7:3f:a1:66:9f:4b:e4:
dc:32:95:c8:4b:02:76:76:36:33:6a:c8:17:f1:ff:20:56:05:
e5:91:fb:b2:25:b5:ad:f9:a3:05:2d:8f:9b:2b:72:04:5c:4b:
e3:ee:b0:e1:dc:56:86:15:4c:9e:d2:06:9b:f3:2b:19:db:2a:
49:0c:e5:4e:5f:fd:f7:94:ca:aa:a5:40:23:02:26:6f:fa:59:
54:01:17:f0:d4:64:b2:93:b5:b6:82:45:44:b1:6c:c3:b1:77:
b0:0d:f4:ce:ef:4e:6d:75:60:6c:4c:67:c5:92:50:05:e6:12:
5d:57:cb:68:ad:99:4f:73:b1:ca:fc:9c:14:1b:1f:59:df:a7:
84:d6:95:9e:7e:ab:24:57:0c:97:92:3c:ca:d0:d3:89:9c:87:
65:11:5a:47:d8:08:73:0a:ba:f0:bd:b3:d5:f7:4f:c5:a2:a5:
a7:ef:15:e3
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaFj3UJ8rzeM+OwjFwNM8930MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjYxMDIyMTM0NjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTJlMjVkNTI2Mjc3YWMxYzgyMTc4MjI0YmI3NWYyZmM4ZTI0NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN3egPe+10gnHkrEEVB1coDvjc7V
g7OCaZicQgpWwRL60gVeT8H/t932wwURj76/N93C0gviml/DmI/4xIgp+vqxzgis
DcVF7/Ndx3Z0MtZ/hlTmBotbv0IDaYQcoS9R2voUGmk0u167PKGcMffr9fYywrtK
Hu/LIqgIEhom30u062MZR0XUXMoktijqF77U9f24RqxsQ2I99JIM2COAGgYzFIdL
6OnV7Wn573Dggk1upXqayj3WPNqGRdBbrvVGviQU/T7mV8NtiGfODkLFWvppTbl2
ZP6M2SumYuwkCilYT7B2KCXBqkAflRKuVQC7LxR8320rIChqxswAbWHKTQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDUuJdUmJ3rByCF4Iku3Xy/I4kVgMB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvTlM0bDFTWW5lc0hJSVhnaVM3ZGZMOGppUldBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBuYESAwQA
uaVMAwQAuedtAwQAwmNKMBgEAgACMBIDBwAqFOGAAAEDBwAqFOGAAAQwDQYJKoZI
hvcNAQELBQADggEBAHG4T+nlCzVb5I8Cl7+2yyTXf2q8+/1D4WFgx3CUMR8QgRPj
hhXZocTlnA5Wx9C4xf1g+zj728zuzWWS+A3C9fxdHcnYPzLlicIkt/My4/WnHnj7
5z+hZp9L5NwylchLAnZ2NjNqyBfx/yBWBeWR+7Ilta35owUtj5srcgRcS+PusOHc
VoYVTJ7SBpvzKxnbKkkM5U5f/feUyqqlQCMCJm/6WVQBF/DUZLKTtbaCRUSxbMOx
d7AN9M7vTm11YGxMZ8WSUAXmEl1Xy2itmU9zscr8nBQbH1nfp4TWlZ5+qyRXDJeS
PMrQ04mch2URWkfYCHMKuvC9s9X3T8WipafvFeM=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:21 2026 by rpki-client