Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/NTVDCOcvwg_0-xojn7KdZcbwJAs.roa
File: NTVDCOcvwg_0-xojn7KdZcbwJAs.roa (raw, json)
Hash identifier: pHrfAzpDRM6islT2PP0ZYbhhyp+lERJOZo6wBiT3JqU=
Subject key identifier: 35:35:43:08:E7:2F:C2:0F:F4:FB:1A:23:9F:B2:9D:65:C6:F0:24:0B
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 019D863FC7F4C87A515A0D40B2223CE16D85
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/NTVDCOcvwg_0-xojn7KdZcbwJAs.roa
Signing time: Mon 13 Apr 2026 09:50:20 +0000
ROA not before: Mon 13 Apr 2026 09:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61098
IP address blocks: 85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
89.145.160.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
89.145.166.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
92.39.56.0/22 maxlen: 24
92.39.60.0/22 maxlen: 24
138.124.208.0/22 maxlen: 24
138.124.212.0/22 maxlen: 24
138.124.216.0/22 maxlen: 24
138.124.220.0/22 maxlen: 24
151.145.192.0/22 maxlen: 24
151.145.196.0/22 maxlen: 22
151.145.200.0/21 maxlen: 22
151.145.200.0/22 maxlen: 22
159.100.240.0/22 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.248.0/21 maxlen: 24
185.19.28.0/22 maxlen: 24
185.150.8.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.176.0/22 maxlen: 24
194.182.180.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
2a04:c41::/32 maxlen: 48
2a04:c42::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c45::/32 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a07:6cc0:70::/48 maxlen: 48
2a07:6cc0:71::/48 maxlen: 48
2a07:6cc0:80::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc2::/32 maxlen: 48
2a07:6cc2:f11::/48 maxlen: 48
2a07:6cc2:f12::/48 maxlen: 48
2a07:6cc3::/32 maxlen: 48
2a07:6cc3:f11::/48 maxlen: 48
2a07:6cc3:f12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:3f:c7:f4:c8:7a:51:5a:0d:40:b2:22:3c:e1:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Apr 13 09:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35354308e72fc20ff4fb1a239fb29d65c6f0240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:77:db:52:52:7f:dd:57:c0:b3:f0:53:9d:
a1:a5:16:14:31:e1:5a:9c:68:ab:b5:96:7e:84:69:
34:85:d9:53:ca:46:60:20:79:5c:a8:6b:31:4c:fd:
21:7f:33:a7:04:58:97:4e:8e:76:67:3c:03:52:1c:
49:32:c0:f1:66:3f:94:9c:a9:30:79:1c:f4:e9:37:
b2:1a:6a:34:48:3c:c8:16:00:b5:46:1b:49:da:97:
a1:59:ea:d6:d6:ff:ac:9c:12:d9:f3:f9:0e:d1:27:
e5:ba:c5:f1:b1:ca:67:db:5b:13:e1:ef:76:5b:ba:
b4:3c:ea:ef:29:73:bd:53:7a:0c:ad:45:4d:c9:72:
8f:32:2e:fa:13:c3:74:da:48:79:46:36:7e:ef:88:
d3:4b:2a:af:eb:11:82:ea:cf:8b:d5:2d:02:42:b6:
f1:5e:63:4b:18:19:e6:03:4c:b6:46:9c:ac:be:fe:
a4:a7:97:1b:b6:ba:a0:05:2b:ee:0a:74:81:92:61:
2d:6d:51:4e:7a:70:e1:30:5a:e9:1d:fd:28:1a:58:
16:14:78:07:80:d7:8f:1e:90:7e:5a:22:0f:25:74:
8a:68:20:a3:7b:dc:d8:1f:27:7f:e9:0c:0f:09:2b:
ef:7b:eb:5d:37:9b:c7:3e:4b:f6:97:eb:e0:91:23:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:43:08:E7:2F:C2:0F:F4:FB:1A:23:9F:B2:9D:65:C6:F0:24:0B
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/NTVDCOcvwg_0-xojn7KdZcbwJAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
92.39.56.0/21
138.124.208.0/20
151.145.192.0/20
159.100.240.0/20
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:20::/47
2a07:6cc0:30::/47
2a07:6cc0:40::/47
2a07:6cc0:50::/48
2a07:6cc0:60::/48
2a07:6cc0:70::/47
2a07:6cc0:80::/48
2a07:6cc1::-2a07:6cc3:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:a1:d9:16:7d:b0:c5:3b:c9:67:9e:3e:7a:53:67:40:70:5e:
1a:22:a1:f4:02:d4:19:52:3d:3b:48:70:ff:26:42:01:7c:d3:
ae:92:c7:c3:b5:b6:36:1c:71:ea:27:64:03:41:5d:d9:de:d6:
5a:ce:56:ba:63:c4:84:72:e5:e1:f3:c4:ac:41:46:c2:3d:2e:
bb:d0:ec:d9:b2:0f:5b:d7:36:23:02:3f:bd:f0:34:31:6b:3f:
96:b0:0a:71:40:87:9b:7e:58:15:5e:93:34:4c:47:1a:15:2c:
6d:f5:37:f7:28:38:05:ec:24:38:8f:45:a9:43:f5:40:a8:9c:
fd:07:20:2e:d0:71:b8:a8:d8:f0:ae:ad:71:fb:e4:e1:01:a0:
05:ea:bf:70:1a:be:5b:ec:eb:7a:27:d4:78:cc:ca:ca:dc:f1:
a0:2d:7f:7c:ae:37:03:99:59:27:9d:e5:88:70:82:c5:ab:a7:
a2:9d:fd:74:a6:37:f8:c2:3a:2a:b1:b8:4c:0d:37:c9:bf:cc:
7b:3b:b6:79:6e:9c:e1:74:dd:5e:2a:ec:56:0a:ff:51:81:db:
3d:61:02:da:3d:83:04:4a:b2:0d:48:0e:65:f7:2f:74:81:54:
e3:b5:04:94:9a:58:ab:a2:ad:0e:70:54:25:40:3f:ad:56:62:
17:fa:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:24:41 2026 by rpki-client