Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NklB14-VXLI3MM6lJe389quYPZU.roa
File: NklB14-VXLI3MM6lJe389quYPZU.roa (raw, json)
Hash identifier: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=
Subject key identifier: 36:49:41:D7:8F:95:5C:B2:37:30:CE:A5:25:ED:FC:F6:AB:98:3D:95
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F236914E4BC3F84283E35EE7268BC5942
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NklB14-VXLI3MM6lJe389quYPZU.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210712
IP address blocks: 5.39.200.0/22 maxlen: 24
46.29.224.0/21 maxlen: 24
78.111.112.0/20 maxlen: 24
91.192.32.0/22 maxlen: 24
93.91.144.0/20 maxlen: 24
109.235.0.0/21 maxlen: 24
185.15.108.0/22 maxlen: 24
185.40.80.0/22 maxlen: 24
185.94.4.0/22 maxlen: 24
213.109.172.0/22 maxlen: 24
217.75.208.0/20 maxlen: 24
2a02:17a0::/29 maxlen: 32
2a02:17a0::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:e4:bc:3f:84:28:3e:35:ee:72:68:bc:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=364941d78f955cb23730cea525edfcf6ab983d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:1e:6c:8f:2e:51:64:34:bd:09:30:24:dc:
26:a5:37:db:d0:f9:c8:b5:bb:57:3f:70:88:c3:93:
08:30:f5:71:f2:3a:a8:f4:db:a8:e8:0f:57:43:f9:
3c:b6:65:a4:15:90:9e:18:50:ef:89:bb:4b:c0:65:
9c:e6:cd:38:7c:b7:a4:7c:dd:20:a0:f7:b6:2b:92:
1b:54:02:10:eb:31:c7:de:e2:f1:72:ae:91:03:de:
86:fa:79:22:f6:41:fe:bd:47:ae:4f:7a:9e:bb:d9:
57:e6:cb:b6:ad:f3:95:9d:93:6c:70:5e:22:8e:e1:
15:e0:62:18:08:01:66:93:c4:da:8b:e3:09:a6:d9:
75:ad:d4:9e:0c:cf:8d:cc:a1:c1:a1:cf:54:89:be:
60:d9:19:e9:01:a8:e3:f8:83:ca:0b:69:75:6c:1a:
be:05:61:f5:54:ad:bb:2f:c5:32:17:0b:df:f6:cb:
df:39:48:ac:cb:b4:b6:b9:67:0e:cb:14:7b:da:9e:
8c:eb:21:62:72:ad:54:66:ff:85:69:9b:f6:d9:b6:
e4:6c:c7:3a:24:e9:42:c8:c5:aa:1a:1b:95:3d:39:
49:01:46:c8:11:d1:02:38:c1:10:0d:91:d2:bb:3d:
2b:df:9b:8f:ef:28:30:a4:a0:a8:a7:19:08:b9:47:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:41:D7:8F:95:5C:B2:37:30:CE:A5:25:ED:FC:F6:AB:98:3D:95
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NklB14-VXLI3MM6lJe389quYPZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.200.0/22
46.29.224.0/21
78.111.112.0/20
91.192.32.0/22
93.91.144.0/20
109.235.0.0/21
185.15.108.0/22
185.40.80.0/22
185.94.4.0/22
213.109.172.0/22
217.75.208.0/20
IPv6:
2a02:17a0::/29
Signature Algorithm: sha256WithRSAEncryption
81:df:c0:27:e9:0f:eb:de:ec:17:6e:aa:57:6c:fb:03:64:eb:
d3:5a:1f:0d:66:87:d0:71:12:f6:4f:e9:ca:84:8b:31:73:95:
a2:13:4f:fb:bd:00:f5:7d:93:ce:c0:63:44:a5:fd:8b:bd:c8:
9a:a2:c1:23:e2:60:e7:b8:9b:ec:f6:85:18:b5:56:72:c8:34:
63:58:bf:a2:36:d2:3b:12:73:ab:e3:fb:06:f8:27:b9:ba:da:
45:5d:8e:10:b6:d5:8a:a1:bd:ff:9e:ec:12:a1:fb:6e:a6:11:
83:1c:bb:3d:4f:62:2d:96:ab:cc:4c:66:86:25:01:12:bd:9f:
c7:0f:87:81:95:9e:bc:fa:88:17:2a:ba:c5:90:e3:94:ba:cc:
45:d9:b9:17:5c:93:c0:fe:36:02:c0:c3:d1:a9:0e:65:b5:9a:
dc:a8:e0:53:d8:96:04:a8:1e:10:ca:8f:bf:12:72:96:7e:c2:
7c:89:f2:f8:33:4b:4b:be:f6:06:98:4b:3e:e7:83:a3:66:76:
4d:c6:97:63:79:e2:d9:a6:96:f1:de:6e:fd:ed:75:72:8f:9c:
bb:ed:c3:fe:9b:dc:a1:62:fe:d5:fc:7f:1c:d1:10:5e:6d:ee:
47:44:17:e8:a8:b1:6f:46:07:10:d4:98:f3:14:74:83:2c:80:
52:1f:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:00 2026 by rpki-client