Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NWIUII75LCBRCdkBf5xO7v_AM1Y.roa
File: NWIUII75LCBRCdkBf5xO7v_AM1Y.roa (raw, json)
Hash identifier: V5TB18QzW+7MRbBNaax1XvktqRyfjApankwrGhyto7c=
Subject key identifier: 35:62:14:20:8E:F9:2C:20:51:09:D9:01:7F:9C:4E:EE:FF:C0:33:56
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1A22621118F4DDE4331A7A6C9FFA5BFF9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NWIUII75LCBRCdkBf5xO7v_AM1Y.roa
Signing time: Tue 03 Nov 2026 16:02:50 +0000
ROA not before: Tue 03 Nov 2026 16:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18779
IP address blocks: 212.74.4.0/24 maxlen: 24
212.74.22.0/24 maxlen: 24
217.207.10.0/23 maxlen: 24
217.207.12.0/22 maxlen: 24
217.207.16.0/20 maxlen: 24
217.207.66.0/23 maxlen: 23
217.207.84.0/22 maxlen: 22
217.207.96.0/22 maxlen: 22
217.207.102.0/23 maxlen: 23
217.207.117.0/24 maxlen: 24
217.207.118.0/23 maxlen: 23
217.207.120.0/21 maxlen: 21
217.207.128.0/22 maxlen: 22
217.207.136.0/21 maxlen: 24
217.207.144.0/20 maxlen: 24
217.207.176.0/22 maxlen: 24
217.207.182.0/23 maxlen: 24
217.207.188.0/22 maxlen: 22
217.207.212.0/22 maxlen: 22
217.207.216.0/22 maxlen: 24
217.207.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:26:21:11:8f:4d:de:43:31:a7:a6:c9:ff:a5:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 3 16:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=356214208ef92c205109d9017f9c4eeeffc03356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:63:8a:99:b7:34:86:f5:99:04:93:0f:80:
85:e8:34:35:b4:a1:98:c6:4a:00:1c:22:da:03:e8:
88:2d:94:45:75:30:3d:22:f6:6a:0e:c3:a2:aa:10:
f1:a3:1a:7a:ed:c6:86:3b:fd:78:fe:cc:42:c1:bf:
06:13:f6:39:f0:2c:37:c6:76:eb:e9:ae:46:b7:52:
a2:74:43:b4:07:7c:0c:43:43:f7:1e:bc:99:ba:f9:
f7:1e:c6:76:34:3b:d6:c4:b2:10:15:e3:97:94:40:
6a:cc:45:8f:0e:cb:74:97:76:9b:a0:36:f7:c1:c0:
12:af:93:bd:95:b4:0a:c7:1c:cf:07:7a:ef:00:17:
50:33:0f:77:57:dc:89:02:a8:f2:d7:13:21:e7:1c:
fd:ed:be:c8:75:af:98:a8:6b:7c:f8:e9:44:a8:13:
36:42:11:63:bf:cc:32:e7:82:fe:5b:e4:c1:03:6d:
25:b0:7d:75:ee:1e:88:d9:64:83:2b:d6:d9:de:36:
35:3a:d6:8d:17:dd:ff:01:6f:5c:a9:af:c9:96:79:
42:84:c4:3e:42:db:c7:8b:69:c2:76:5f:db:d6:ca:
e1:60:68:dd:52:c2:df:51:64:1c:87:82:dc:75:1e:
af:58:b4:2e:08:a7:ee:45:95:5b:f4:4a:b4:9a:fd:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:62:14:20:8E:F9:2C:20:51:09:D9:01:7F:9C:4E:EE:FF:C0:33:56
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NWIUII75LCBRCdkBf5xO7v_AM1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.4.0/24
212.74.22.0/24
217.207.10.0-217.207.31.255
217.207.66.0/23
217.207.84.0/22
217.207.96.0/22
217.207.102.0/23
217.207.117.0-217.207.131.255
217.207.136.0-217.207.159.255
217.207.176.0/22
217.207.182.0/23
217.207.188.0/22
217.207.212.0-217.207.221.255
Signature Algorithm: sha256WithRSAEncryption
2d:72:bd:f9:f4:d3:82:34:00:15:7c:1f:db:d0:dd:d6:60:ce:
2f:11:48:9c:4f:76:bb:7f:1e:12:93:c7:f3:af:e7:5f:18:29:
f8:77:69:fe:d1:ed:33:b1:f2:8c:32:ac:60:d3:1a:d1:90:80:
2a:61:ff:ab:cd:cf:62:50:80:a9:95:b4:22:e7:09:26:df:ec:
e5:91:5e:38:3a:71:7c:e7:67:68:12:57:b1:ba:ad:09:f1:9a:
41:c5:13:9d:35:52:b9:21:1b:69:50:c0:c8:fd:8f:e5:ac:1c:
c3:96:8e:8b:d1:74:0a:21:74:48:04:c5:20:e1:1b:db:c8:fe:
77:ce:c5:64:d1:b3:14:e2:bb:d1:a9:2a:05:b4:65:24:92:a6:
b9:f7:28:fa:16:84:0b:75:b1:ce:12:26:56:00:13:cc:69:8f:
7b:0a:b7:f5:26:70:72:9a:70:3a:a2:2b:fb:b9:5c:22:c8:a0:
71:73:92:f5:0e:28:26:ce:10:77:ec:01:76:dc:f9:1e:9d:8f:
17:4d:3a:f4:10:e0:e7:17:39:28:e5:da:0e:19:68:68:e7:16:
c5:61:12:8a:3b:da:5e:c6:cf:23:27:6a:33:38:bb:64:23:13:
57:d1:25:72:dc:14:a1:6d:0f:8a:e4:6b:01:0e:0c:3d:39:14:
6d:12:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:52 2026 by rpki-client