Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa
File: NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa (raw, json)
Hash identifier: PeV4K+XBlCAlY87jlA0oZLozJmq4/8N/ed2usUmq5JY=
Subject key identifier: 34:93:BF:63:C4:66:69:DE:E0:98:2A:10:97:81:05:75:E6:F4:A6:E2
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 019D6C464E93EC4A283D740BBFB2F45AA3D3
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa
Signing time: Wed 08 Apr 2026 08:47:20 +0000
ROA not before: Wed 08 Apr 2026 08:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50311
IP address blocks: 185.254.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:46:4e:93:ec:4a:28:3d:74:0b:bf:b2:f4:5a:a3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Apr 8 08:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3493bf63c46669dee0982a1097810575e6f4a6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:fc:8a:25:f8:23:cc:13:51:8b:1b:7f:1a:
c9:7e:a8:23:26:6c:40:84:ab:1e:1e:be:8b:32:ed:
93:0c:6a:88:dc:f8:2e:78:8d:e6:ee:bc:67:08:2b:
d2:c8:06:fe:02:d6:29:2f:68:33:1d:6c:1b:18:1c:
02:18:f1:f3:cf:60:e5:fe:62:6d:df:28:a9:82:06:
53:d5:dd:60:46:49:ae:f2:47:f2:0a:c5:a4:0e:46:
54:8c:4b:dd:59:81:e4:7a:a8:c7:83:d5:6a:c9:d8:
af:02:c9:c1:0d:f8:b8:6f:9d:14:7a:77:8b:ce:6b:
9a:18:49:75:1c:f4:2f:41:00:cb:18:fd:68:3f:3d:
f7:2f:ab:dc:2d:52:95:81:25:29:0f:69:a3:57:6a:
ce:ef:fc:77:69:43:e3:98:b6:4d:62:64:eb:b6:c0:
9f:d6:f9:dd:ea:65:2f:06:e6:bc:71:0b:84:2d:1d:
49:fd:50:b5:ad:b6:3e:3a:10:e0:9d:dd:ec:34:0e:
11:15:26:e5:1a:b5:d4:99:21:e3:bb:ff:10:9b:88:
a9:da:9c:c6:cb:93:8c:35:3f:e7:ae:e2:ee:c7:b3:
68:07:f9:1e:64:57:4b:00:0c:8b:e7:33:1d:52:1e:
5c:3a:ce:b0:ad:1d:8c:d7:68:4b:7b:f5:61:1a:25:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:93:BF:63:C4:66:69:DE:E0:98:2A:10:97:81:05:75:E6:F4:A6:E2
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/NJO_Y8Rmad7gmCoQl4EFdeb0puI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b0:ea:95:40:a5:3a:ad:1e:d4:4a:18:98:f0:ba:30:81:d7:
15:5c:dc:9b:87:f2:bc:7d:a2:1e:dc:72:5e:a6:a9:e4:08:0a:
a6:c1:00:2e:fe:e0:e7:bd:a8:de:e1:ba:1a:0e:bb:e2:17:24:
98:70:2a:4f:2e:b0:31:de:78:68:ca:a1:fe:32:5b:4c:8d:14:
89:ec:c5:24:d8:72:f3:5b:d4:47:5b:bf:2a:47:84:8d:14:9e:
98:c0:ae:32:85:68:09:49:17:9c:fb:96:e1:91:70:47:e6:48:
5d:9a:88:fe:f8:30:85:cc:70:4b:c0:05:0c:84:77:8b:f1:7c:
d1:f1:81:0a:48:41:b6:a5:8b:44:01:65:49:5e:97:ca:1c:ea:
4d:75:b6:c1:cb:c2:ec:d5:50:f5:7f:9a:fb:63:dc:0c:24:e9:
51:c0:18:25:cd:52:57:3b:e0:c2:a1:e2:f3:f7:87:e9:36:bc:
25:e8:36:00:13:77:de:46:95:c9:6e:94:85:b2:4a:36:e8:29:
33:66:da:4f:33:a0:05:4d:a0:6c:ef:d2:41:ea:b0:a7:fb:d4:
25:04:87:96:b6:5f:79:9d:bb:7c:4b:f3:42:bf:92:1d:0d:fd:
26:00:86:50:28:2f:94:96:3c:c7:19:9f:03:ec:30:5f:a6:49:
ec:f4:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:15 2026 by rpki-client