Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/NcTDxTnFozsxKavcnlSTx2-OZis.roa
File: NcTDxTnFozsxKavcnlSTx2-OZis.roa (raw, json)
Hash identifier: QbtIW3hggcu4VmQX0Ylc1F26SWBEg6eUZGBBTmAdKG4=
Subject key identifier: 35:C4:C3:C5:39:C5:A3:3B:31:29:AB:DC:9E:54:93:C7:6F:8E:66:2B
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F02965CD9AE2F505F0BE341842E352E7C
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/NcTDxTnFozsxKavcnlSTx2-OZis.roa
Signing time: Fri 26 Jun 2026 06:20:36 +0000
ROA not before: Fri 26 Jun 2026 06:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 89.28.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:96:5c:d9:ae:2f:50:5f:0b:e3:41:84:2e:35:2e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 26 06:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35c4c3c539c5a33b3129abdc9e5493c76f8e662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:88:09:b2:eb:35:16:25:ee:8f:4b:35:88:
a9:2b:a4:95:49:4a:36:87:02:20:54:05:0f:7f:69:
ca:fe:db:b2:fb:1e:d9:0a:d5:59:db:47:92:17:ab:
b1:c4:21:42:d7:05:02:84:e5:ba:d8:f6:fd:a8:4a:
97:b3:9f:d0:4e:d5:0e:2d:23:13:41:06:1f:94:c1:
d0:5a:ae:38:6a:b3:92:0f:e1:c7:c8:0e:69:70:e2:
17:bb:46:0a:ca:47:09:52:12:be:c6:d2:44:00:f2:
52:50:21:ec:fe:dd:ea:89:0a:c1:1b:25:8c:29:d9:
6e:7b:eb:05:79:4c:65:69:7e:67:45:fd:fa:d4:76:
1c:89:a5:51:8a:38:58:c6:1f:06:29:37:96:d8:73:
95:53:a2:b1:5a:74:22:73:42:f6:58:67:20:69:e0:
4d:80:06:37:e1:10:4c:45:f7:b4:57:59:a5:10:f4:
18:c9:ad:0f:ff:8d:85:b2:4f:28:6e:2e:0a:77:25:
db:13:1a:d6:2e:a6:df:6f:69:f6:d3:a1:9b:b7:91:
65:c0:28:f7:a2:db:6d:f9:38:65:61:67:bb:4c:e6:
eb:ea:a5:e8:e9:a2:d0:9a:4e:6c:9a:ba:66:47:9d:
00:ee:75:b1:80:02:41:b8:32:79:85:76:75:90:51:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:C3:C5:39:C5:A3:3B:31:29:AB:DC:9E:54:93:C7:6F:8E:66:2B
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/NcTDxTnFozsxKavcnlSTx2-OZis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bc:a6:2c:41:ef:73:84:51:c3:a9:3e:57:96:2a:20:2a:f0:
ee:69:9a:41:78:4d:9d:be:ac:08:91:44:dc:0a:66:e6:78:98:
c6:43:0e:96:73:c4:6d:7b:c5:b7:89:f7:06:88:7e:6a:c0:1b:
b8:fa:16:e8:52:81:b9:bb:fa:72:b3:fa:ee:bb:9f:37:94:f7:
15:34:76:0d:29:58:57:97:78:f0:c5:70:aa:58:bc:05:00:7d:
da:ca:9f:cb:43:d7:40:00:fc:a8:96:cf:ae:b3:f8:67:01:49:
12:af:82:42:bc:3b:bd:5b:a7:3d:a4:c1:9c:67:49:30:a8:62:
fc:87:d0:45:35:91:d0:10:89:9b:44:9a:7e:44:12:00:18:18:
ed:5f:97:99:23:4f:6d:59:b9:da:a8:b7:ef:be:5c:b4:5f:fa:
fc:9a:d9:6c:38:75:e4:e9:e4:d9:6c:aa:2f:7b:5f:08:a4:f6:
f5:4a:37:78:5c:73:51:f2:41:16:31:9e:77:70:4b:c5:3d:6a:
d5:d8:9a:e3:f3:75:64:97:a5:82:20:13:f2:1f:93:c5:34:41:
c9:8a:f4:6f:95:55:3c:16:99:69:bc:ec:72:73:47:0b:89:75:
af:61:f7:6d:25:be:8e:f8:d9:bd:1b:75:96:be:b4:ea:2a:3a:
fa:6f:0e:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8CllzZri9QXwvjQYQuNS58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwNjI2MDYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWM0YzNjNTM5YzVhMzNiMzEyOWFiZGM5ZTU0OTNjNzZmOGU2NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI2ICbLrNRYl7o9LNYipK6SVSUo2
hwIgVAUPf2nK/tuy+x7ZCtVZ20eSF6uxxCFC1wUChOW62Pb9qEqXs5/QTtUOLSMT
QQYflMHQWq44arOSD+HHyA5pcOIXu0YKykcJUhK+xtJEAPJSUCHs/t3qiQrBGyWM
Kdlue+sFeUxlaX5nRf361HYciaVRijhYxh8GKTeW2HOVU6KxWnQic0L2WGcgaeBN
gAY34RBMRfe0V1mlEPQYya0P/42Fsk8obi4KdyXbExrWLqbfb2n206Gbt5FlwCj3
ottt+ThlYWe7TObr6qXo6aLQmk5smrpmR50A7nWxgAJBuDJ5hXZ1kFH5JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXEw8U5xaM7MSmr3J5Uk8dvjmYrMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvTmNURHhUbkZvenN4S2F2Y25sU1R4Mi1PWmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzNMA0G
CSqGSIb3DQEBCwUAA4IBAQAtvKYsQe9zhFHDqT5XliogKvDuaZpBeE2dvqwIkUTc
CmbmeJjGQw6Wc8Rte8W3ifcGiH5qwBu4+hboUoG5u/pys/ruu583lPcVNHYNKVhX
l3jwxXCqWLwFAH3ayp/LQ9dAAPyols+us/hnAUkSr4JCvDu9W6c9pMGcZ0kwqGL8
h9BFNZHQEImbRJp+RBIAGBjtX5eZI09tWbnaqLfvvly0X/r8mtlsOHXk6eTZbKov
e18IpPb1Sjd4XHNR8kEWMZ53cEvFPWrV2Jrj83Vkl6WCIBPyH5PFNEHJivRvlVU8
FplpvOxyc0cLiXWvYfdtJb6O+Nm9G3WWvrTqKjr6bw4M
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:13:13 2026 by rpki-client