Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa
File: NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa (raw, json)
Hash identifier: 60B8Z6NMx31io1/yt+mCoe3AOI225aq1Qj6yflpDE9M=
Subject key identifier: 34:FE:83:FC:08:E8:42:B8:B3:81:0A:4B:3D:34:59:F0:AE:9E:5A:40
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 01A0CFBC5C913A114B5413F1429ECF9A5922
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa
Signing time: Wed 23 Sep 2026 19:27:03 +0000
ROA not before: Wed 23 Sep 2026 19:27:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 5.253.180.0/24 maxlen: 24
5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
5.253.183.0/24 maxlen: 24
82.102.7.0/24 maxlen: 24
94.46.12.0/22 maxlen: 22
94.46.12.0/24 maxlen: 24
94.46.13.0/24 maxlen: 24
94.46.14.0/24 maxlen: 24
94.46.15.0/24 maxlen: 24
94.46.16.0/22 maxlen: 22
94.46.16.0/24 maxlen: 24
94.46.20.0/22 maxlen: 22
94.46.20.0/24 maxlen: 24
94.46.21.0/24 maxlen: 24
94.46.22.0/24 maxlen: 24
94.46.23.0/24 maxlen: 24
94.46.25.0/24 maxlen: 24
94.46.26.0/24 maxlen: 24
94.46.27.0/24 maxlen: 24
94.46.28.0/22 maxlen: 22
94.46.28.0/24 maxlen: 24
94.46.29.0/24 maxlen: 24
94.46.30.0/24 maxlen: 24
94.46.31.0/24 maxlen: 24
94.46.128.0/21 maxlen: 21
94.46.132.0/24 maxlen: 24
94.46.133.0/24 maxlen: 24
94.46.160.0/20 maxlen: 24
94.46.176.0/21 maxlen: 21
94.46.179.0/24 maxlen: 24
94.46.182.0/24 maxlen: 24
109.71.40.0/21 maxlen: 21
109.71.40.0/24 maxlen: 24
109.71.41.0/24 maxlen: 24
109.71.42.0/24 maxlen: 24
109.71.43.0/24 maxlen: 24
109.71.44.0/24 maxlen: 24
109.71.45.0/24 maxlen: 24
109.71.46.0/24 maxlen: 24
109.71.47.0/24 maxlen: 24
130.185.80.0/21 maxlen: 21
130.185.81.0/24 maxlen: 24
130.185.82.0/24 maxlen: 24
130.185.83.0/24 maxlen: 24
130.185.84.0/24 maxlen: 24
130.185.85.0/24 maxlen: 24
130.185.86.0/24 maxlen: 24
130.185.87.0/24 maxlen: 24
185.15.20.0/22 maxlen: 22
185.15.20.0/24 maxlen: 24
185.15.22.0/24 maxlen: 24
185.15.23.0/24 maxlen: 24
2a00:1650::/33 maxlen: 33
2a00:1650:0:1000::/64 maxlen: 64
2a00:1650:8000::/33 maxlen: 33
2a00:1651::/33 maxlen: 33
2a09:58c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:bc:5c:91:3a:11:4b:54:13:f1:42:9e:cf:9a:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Sep 23 19:27:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34fe83fc08e842b8b3810a4b3d3459f0ae9e5a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:fe:9f:ed:2f:92:30:b8:e5:5c:46:db:5e:
cc:a5:8e:ec:81:70:2e:64:b0:21:43:9c:7d:4e:be:
80:14:4e:60:c6:90:16:45:04:d0:60:d7:cd:ac:cc:
38:30:6b:04:5c:a6:09:b9:a4:a8:e9:25:01:5e:a7:
a1:4d:e7:53:e2:4e:10:1d:97:1d:54:10:8d:02:1f:
33:4f:0d:4a:f8:1a:f1:9d:59:c8:86:d0:f1:d4:a3:
21:f1:ee:76:8f:a2:59:c2:1a:62:07:6c:45:cb:19:
1b:90:1c:9a:f5:77:74:bd:4b:48:07:0c:5a:8a:09:
00:c8:dc:9c:15:b4:6e:23:76:83:54:e3:56:82:9b:
94:ad:30:8c:68:3a:83:0c:7e:e5:79:8f:93:62:df:
1d:d2:bb:16:b7:01:fd:d0:18:8c:54:47:6c:78:cb:
cd:ae:bf:e7:28:aa:11:78:63:15:e2:67:92:8a:62:
01:b8:27:ea:9b:df:c2:05:90:84:3b:6d:a2:fa:01:
df:4c:b7:b5:ce:36:af:68:3a:a0:2a:76:d9:d9:ed:
ef:9b:ef:df:49:ce:df:15:34:af:3f:6b:99:c9:e3:
36:a6:15:81:94:c3:e3:f0:3b:06:2a:8b:78:8d:44:
70:68:e8:41:5f:38:20:41:c2:11:36:4e:cb:a2:d3:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:83:FC:08:E8:42:B8:B3:81:0A:4B:3D:34:59:F0:AE:9E:5A:40
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.180.0/22
82.102.7.0/24
94.46.12.0-94.46.23.255
94.46.25.0-94.46.31.255
94.46.128.0/21
94.46.160.0-94.46.183.255
109.71.40.0/21
130.185.80.0/21
185.15.20.0/22
IPv6:
2a00:1650::-2a00:1651:7fff:ffff:ffff:ffff:ffff:ffff
2a09:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:47:a5:33:36:64:a6:d8:0d:80:72:de:89:2e:f2:9b:91:7d:
fd:92:c6:c1:6a:8d:6a:c6:3a:e0:b9:bf:fa:97:9b:fe:e9:88:
53:76:73:f4:d7:79:0e:40:1e:5e:95:b7:04:ca:c4:43:5a:2b:
c4:0b:98:e6:f8:d3:3b:44:43:9b:86:7b:b5:d9:50:f3:9a:21:
35:c5:dc:87:c3:84:bc:f3:2d:c9:75:38:61:5f:13:af:59:02:
c3:63:1a:1c:92:98:a9:c4:44:94:ef:3d:5e:83:97:bc:50:93:
e9:3f:ff:47:ae:90:6d:48:65:00:bb:1c:12:48:42:79:53:fa:
89:63:f5:e3:48:0f:eb:53:b9:96:ea:2d:42:26:29:41:26:74:
3a:5f:dc:fb:32:d1:23:88:b2:fb:00:58:01:c5:ce:17:13:12:
6c:2f:c6:04:aa:c1:1f:30:c1:11:91:d0:e0:28:36:1f:3b:47:
69:6c:ad:2e:50:94:8d:48:0c:3c:44:00:81:bb:32:85:08:b0:
39:13:f8:5b:01:97:37:23:11:93:1a:2e:48:25:6a:31:32:af:
5a:3a:e3:7d:d6:70:e8:37:49:f4:db:e8:ab:b2:bb:43:bc:dd:
78:25:dd:7d:0f:bd:23:fd:b9:f1:76:00:5f:32:35:70:7e:15:
e6:f3:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:35:14 2026 by rpki-client