Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NYeo0y3nwg_7M_DEhDqK8E51duo.roa
File: NYeo0y3nwg_7M_DEhDqK8E51duo.roa (raw, json)
Hash identifier: dqbWTPTNkAZh42Jp/EPORHhSrUtxRGbdEuVP1bQyhRg=
Subject key identifier: 35:87:A8:D3:2D:E7:C2:0F:FB:33:F0:C4:84:3A:8A:F0:4E:75:76:EA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019D6E8C96499D370A0B8229E5E1681AD5D7
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NYeo0y3nwg_7M_DEhDqK8E51duo.roa
Signing time: Wed 08 Apr 2026 19:23:20 +0000
ROA not before: Wed 08 Apr 2026 19:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.200.0/24 maxlen: 24
45.86.202.0/24 maxlen: 24
45.92.229.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.157.112.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:8c:96:49:9d:37:0a:0b:82:29:e5:e1:68:1a:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 8 19:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3587a8d32de7c20ffb33f0c4843a8af04e7576ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:93:71:f6:eb:94:5a:58:88:8a:24:23:79:
85:72:f8:1f:c8:87:f0:c4:52:ae:6d:f7:c0:f1:ae:
ec:6d:eb:5b:b5:fa:c7:31:28:ed:fe:6b:60:e3:a5:
04:23:75:a5:8e:5b:89:95:10:70:bf:ea:c3:81:5b:
97:3e:d9:c2:dd:c7:2d:56:a8:7c:0f:79:82:51:49:
80:6d:4e:49:12:83:5a:36:94:4d:cb:68:dc:00:36:
36:9f:0b:3d:a3:02:4d:c8:6d:cb:6e:4f:63:24:b0:
13:0b:f0:6f:0e:fc:ff:22:59:7b:10:44:06:95:65:
55:29:7e:44:b0:0d:d2:64:cc:80:49:1c:4e:bc:8a:
e1:b7:5d:16:88:c3:45:63:59:00:e4:5e:84:f3:0f:
b6:c0:8f:87:f4:8b:5a:78:70:2c:98:85:84:aa:31:
b7:99:b2:91:69:3b:78:00:11:bd:01:21:fb:4f:5f:
93:d0:b7:7b:ef:8f:a5:42:f4:98:13:af:5e:bd:17:
6b:4d:46:51:7b:f1:bd:2c:91:fc:a1:62:ba:0f:c5:
dc:de:6a:bc:ef:35:09:80:0e:89:86:1b:46:20:44:
ce:29:fa:22:18:ad:82:0e:cb:fb:3c:27:53:d3:6b:
eb:76:46:88:2d:7e:16:ba:40:ba:32:03:ae:ff:16:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:A8:D3:2D:E7:C2:0F:FB:33:F0:C4:84:3A:8A:F0:4E:75:76:EA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NYeo0y3nwg_7M_DEhDqK8E51duo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.200.0/24
45.86.202.0/24
45.92.229.0/24
45.146.54.0/24
45.154.138.0/24
45.157.112.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/24
194.5.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ce:c9:70:9d:b6:bb:16:f0:27:d8:d3:db:66:43:8b:2b:38:
46:ac:53:55:95:70:f8:56:00:c6:dd:b8:84:e9:91:05:d1:46:
46:ad:fd:46:f1:41:28:27:fc:66:10:c7:a4:b4:6d:d4:a0:58:
63:e4:ae:41:ad:01:76:51:7d:a5:2b:20:cc:f7:ed:8c:15:49:
60:c2:c3:1b:1d:94:97:dd:05:8b:e5:7f:1e:aa:9b:86:00:45:
e4:1f:e4:14:1c:5b:22:04:eb:c4:3b:6d:14:7c:ae:50:d1:92:
93:5c:51:e8:84:45:2d:9c:46:19:85:ad:62:bf:70:94:d4:d0:
e9:48:b3:23:a4:d0:70:4d:28:25:b2:6e:45:42:05:cb:51:30:
82:d0:7b:72:a0:d9:04:05:dd:bf:7d:da:d2:9f:d1:93:d0:76:
16:83:99:6b:9d:eb:a9:fc:56:ea:d5:40:7f:de:84:69:16:42:
7d:21:7d:3d:2f:2c:07:49:79:a2:10:02:4e:4b:22:19:6a:d7:
82:75:a8:e5:dd:27:c8:86:fa:bc:ea:89:94:7e:f9:31:46:09:
81:6e:72:54:72:01:2f:a6:f8:c4:8e:e8:33:ed:27:b4:9c:6d:
3e:dd:75:82:cf:1b:fa:52:5a:c2:fd:b1:d9:a1:b5:84:9d:9c:
1b:66:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:38 2026 by rpki-client