Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/NloTUsOLqpfTu8IkwsLGe53OKiM.roa
File: NloTUsOLqpfTu8IkwsLGe53OKiM.roa (raw, json)
Hash identifier: Txhri0SKfqPnlod2zhIYj6wgCSRlDYus6zsHb7gohlo=
Subject key identifier: 36:5A:13:52:C3:8B:AA:97:D3:BB:C2:24:C2:C2:C6:7B:9D:CE:2A:23
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019D9A6D31567EBFF03CB5D2EEA203B3ACD9
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/NloTUsOLqpfTu8IkwsLGe53OKiM.roa
Signing time: Fri 17 Apr 2026 07:52:20 +0000
ROA not before: Fri 17 Apr 2026 07:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202561
IP address blocks: 185.200.36.0/22 maxlen: 24
185.200.36.0/24 maxlen: 24
185.200.37.0/24 maxlen: 24
185.200.38.0/24 maxlen: 24
185.200.39.0/24 maxlen: 24
198.145.118.0/24 maxlen: 24
198.145.119.0/24 maxlen: 24
2a0c:13c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:6d:31:56:7e:bf:f0:3c:b5:d2:ee:a2:03:b3:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Apr 17 07:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=365a1352c38baa97d3bbc224c2c2c67b9dce2a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:c4:af:88:cb:ba:a5:44:ef:22:f9:32:59:
08:f5:1c:2c:0e:85:7c:e1:ae:1d:38:b2:b6:2f:f9:
9e:b1:24:d7:91:8d:c2:ad:23:52:03:fd:8b:e3:58:
7b:8b:fe:a1:a7:bc:46:0f:34:1c:00:fe:f2:1d:c0:
45:7b:59:2e:b5:d0:8a:e0:81:30:70:62:18:79:ce:
34:8f:ce:f1:53:45:3b:50:bd:f7:45:b6:93:59:64:
bf:0d:c7:a8:ea:5d:4d:69:d1:4e:2b:0d:b0:22:26:
9b:fa:68:21:77:9d:79:a8:f4:c7:d6:d7:42:a7:b0:
93:6c:71:fc:ee:42:99:84:76:ef:72:fb:e6:3e:84:
f0:0b:27:13:cc:1a:47:2a:c0:7b:7e:26:07:dc:7a:
7a:cc:46:ec:7f:77:80:45:ee:08:da:e0:bc:ff:80:
cc:f9:25:d7:3e:fe:06:0a:27:e5:63:9a:15:bb:31:
01:da:e0:13:f9:69:d0:d9:86:92:f3:25:af:b6:aa:
40:14:6f:72:36:58:ff:79:fc:5a:b7:e4:74:cb:83:
ef:4d:c3:04:c6:7b:24:d4:73:5c:8d:48:a8:ac:a1:
ed:2e:8a:85:1c:5e:45:2b:43:f8:08:51:62:0d:06:
e0:24:d2:e9:01:cc:82:d1:dc:fa:40:89:27:30:8e:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:13:52:C3:8B:AA:97:D3:BB:C2:24:C2:C2:C6:7B:9D:CE:2A:23
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/NloTUsOLqpfTu8IkwsLGe53OKiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.36.0/22
198.145.118.0/23
IPv6:
2a0c:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:2c:96:8f:00:87:4a:de:15:57:57:b3:5d:18:63:d5:4e:68:
99:16:56:ef:86:51:08:c6:f4:e0:20:48:fa:6f:5c:cb:24:bb:
92:a9:a6:a7:93:aa:e4:be:3b:43:fc:68:b2:0d:aa:46:34:54:
e7:00:d5:af:34:a2:a2:51:41:79:1a:a1:f7:58:a4:03:9a:68:
05:68:5b:fb:35:3f:fd:2d:c8:7e:cd:8d:7f:07:53:ba:be:da:
7a:ca:94:4b:cb:cd:0f:d9:4c:65:4c:c2:2d:8c:45:96:c8:b8:
2a:c5:9b:78:79:62:d6:4e:e5:54:a2:80:ee:ad:a5:78:e4:73:
34:d0:98:ac:1c:a6:3f:d4:9b:41:c3:c6:f6:9f:dd:14:7d:17:
e5:d8:11:3a:f9:50:62:52:13:0a:b1:70:98:fa:6f:53:af:3e:
3c:f9:1d:64:cc:0e:65:25:62:83:07:2e:14:49:90:6a:aa:5a:
d6:27:3c:ac:e5:98:fd:22:bf:0c:45:fa:58:b8:c5:1e:88:0a:
9a:31:4e:f5:19:22:2f:21:f7:cb:2a:85:6a:34:f2:42:72:84:
41:f2:d0:fc:fe:dd:4e:3b:24:ec:f8:25:bc:12:c9:c1:1f:63:
f6:76:5e:fd:a6:04:13:60:b4:14:d2:c9:28:6d:35:7c:86:dd:
b8:39:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:33 2026 by rpki-client