Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/nED_N4Z5sMwFkHHvEi4m_tZ34qY.roa
File: nED_N4Z5sMwFkHHvEi4m_tZ34qY.roa (raw, json)
Hash identifier: rSNpNmuEFcV4WY8c8GVHoYC+wgLzVaYLe++ghwDQJig=
Subject key identifier: 9C:40:FF:37:86:79:B0:CC:05:90:71:EF:12:2E:26:FE:D6:77:E2:A6
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 019E2C6FAD13B51CAF0226EF495BCD56D2E3
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/nED_N4Z5sMwFkHHvEi4m_tZ34qY.roa
Signing time: Fri 15 May 2026 16:19:36 +0000
ROA not before: Fri 15 May 2026 16:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 85.137.18.0/24 maxlen: 24
85.137.19.0/24 maxlen: 24
85.217.170.0/24 maxlen: 24
85.217.171.0/24 maxlen: 24
88.80.145.0/24 maxlen: 24
88.80.146.0/24 maxlen: 24
88.80.147.0/24 maxlen: 24
88.80.148.0/24 maxlen: 24
88.80.149.0/24 maxlen: 24
88.80.150.0/24 maxlen: 24
88.80.151.0/24 maxlen: 24
91.92.108.0/24 maxlen: 24
91.92.111.0/24 maxlen: 24
91.92.120.0/24 maxlen: 24
91.92.128.0/24 maxlen: 24
91.92.136.0/24 maxlen: 24
91.92.137.0/24 maxlen: 24
91.92.144.0/24 maxlen: 24
94.156.35.0/24 maxlen: 24
94.156.144.0/24 maxlen: 24
94.156.189.0/24 maxlen: 24
185.141.61.0/24 maxlen: 24
185.141.62.0/24 maxlen: 24
185.141.63.0/24 maxlen: 24
185.203.116.0/24 maxlen: 24
185.203.117.0/24 maxlen: 24
185.203.118.0/24 maxlen: 24
185.203.119.0/24 maxlen: 24
185.205.209.0/24 maxlen: 24
185.205.210.0/24 maxlen: 24
185.206.144.0/24 maxlen: 24
185.206.145.0/24 maxlen: 24
185.206.146.0/24 maxlen: 24
185.206.147.0/24 maxlen: 24
193.37.212.0/24 maxlen: 24
193.37.213.0/24 maxlen: 24
193.37.214.0/24 maxlen: 24
193.37.215.0/24 maxlen: 24
212.73.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:6f:ad:13:b5:1c:af:02:26:ef:49:5b:cd:56:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: May 15 16:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c40ff378679b0cc059071ef122e26fed677e2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:4c:18:82:fe:b6:d2:f0:da:93:ce:23:d2:
14:90:36:1b:23:c2:4a:75:f6:68:94:44:22:d7:d4:
a3:88:29:41:09:9a:80:53:b0:f3:0a:95:26:f5:0c:
d9:a3:d1:e7:a5:29:41:44:1f:9c:13:5f:a4:45:44:
35:c6:55:bd:9e:1d:75:30:7c:f6:2a:b5:98:83:e7:
e1:01:e2:5b:3c:d6:c2:47:6b:a0:72:eb:34:a8:c6:
6a:5d:1d:10:e4:46:b5:cb:eb:f6:e8:04:0b:0f:32:
82:cd:1d:24:60:66:93:8c:d6:65:88:25:da:5f:a3:
d3:f8:10:d2:71:21:ec:85:fb:2d:f2:88:31:ef:c1:
10:92:19:a7:c3:a8:ee:90:7f:f5:ea:7e:bf:8c:d9:
e6:c6:c6:52:7c:b1:08:4a:ea:d9:44:07:e3:97:6a:
fe:a2:89:fb:06:26:78:92:0f:da:d8:1f:44:de:b8:
e2:a8:55:eb:50:4c:e6:a9:61:ef:81:84:64:34:31:
7b:c2:62:11:ca:3c:b7:f4:e8:91:ef:4b:77:a8:e5:
c3:b6:00:84:e6:84:b8:fa:cc:15:8f:9b:1a:c6:be:
9a:d8:f2:a4:a0:d9:60:30:74:3c:6f:b0:4b:15:b2:
2a:2c:a5:51:dd:47:bb:d6:27:8c:7c:05:4b:15:a6:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:FF:37:86:79:B0:CC:05:90:71:EF:12:2E:26:FE:D6:77:E2:A6
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/nED_N4Z5sMwFkHHvEi4m_tZ34qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.18.0/23
85.217.170.0/23
88.80.145.0-88.80.151.255
91.92.108.0/24
91.92.111.0/24
91.92.120.0/24
91.92.128.0/24
91.92.136.0/23
91.92.144.0/24
94.156.35.0/24
94.156.144.0/24
94.156.189.0/24
185.141.61.0-185.141.63.255
185.203.116.0/22
185.205.209.0-185.205.210.255
185.206.144.0/22
193.37.212.0/22
212.73.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:87:15:94:75:bd:79:93:cb:58:5e:75:7c:4a:b0:ad:49:49:
5e:45:03:bb:e3:57:26:80:94:56:9a:1a:16:bf:6f:cc:c0:bb:
0f:17:ca:57:20:6c:70:6e:c7:7f:f6:8d:2e:4a:aa:b3:57:60:
04:38:0c:96:8f:94:bd:fd:63:87:55:06:73:9f:de:e6:37:e7:
f2:bd:e1:fc:5c:02:28:3e:5c:46:8b:24:62:93:0b:6e:b9:28:
a4:ea:e1:72:9f:2e:3c:d2:b5:f9:68:3a:f3:95:ee:bc:65:26:
45:39:97:cf:9c:70:7c:fb:54:9b:ed:c7:7c:8d:b7:c7:2f:3e:
e4:60:40:c1:74:c5:cf:ca:fc:bb:74:2d:74:52:ce:1e:37:32:
ec:e7:45:b4:32:7c:69:6d:81:84:3e:67:02:53:72:2c:83:97:
5c:ac:bd:ee:6b:40:3b:c9:15:58:c2:dc:c0:47:0a:71:59:67:
ee:d4:d2:f5:ed:eb:aa:f5:ba:76:8e:35:0e:ec:8c:7a:ae:ce:
11:9f:13:ea:ce:d2:44:e5:87:a0:45:92:9a:49:8b:9d:49:4b:
05:0a:18:43:6a:9e:1d:bf:18:e8:7f:f7:08:c0:2e:b7:88:cd:
32:6a:9b:83:a2:e2:a3:9d:17:f5:01:35:df:41:45:e8:e6:c3:
1b:da:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:54 2026 by rpki-client