Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nvB0Gd3SkwKAVd8r7dWd9eoEYrA.roa
File: nvB0Gd3SkwKAVd8r7dWd9eoEYrA.roa (raw, json)
Hash identifier: rycVS54gmh1kts4PVdojTUvKmc8t+2nNFa2BPp66fKs=
Subject key identifier: 9E:F0:74:19:DD:D2:93:02:80:55:DF:2B:ED:D5:9D:F5:EA:04:62:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A08C044F0A88C60C5690B754A39DD3D94B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nvB0Gd3SkwKAVd8r7dWd9eoEYrA.roa
Signing time: Thu 10 Sep 2026 15:51:27 +0000
ROA not before: Thu 10 Sep 2026 15:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 194.87.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:04:4f:0a:88:c6:0c:56:90:b7:54:a3:9d:d3:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 10 15:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ef07419ddd293028055df2bedd59df5ea0462b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:fd:80:e8:91:78:8d:43:28:24:9d:79:16:
cc:76:7f:60:8e:a1:10:c4:ff:d1:67:43:6b:ca:c6:
fa:f0:3f:1a:20:2c:61:2b:4b:4f:d8:db:76:bd:b4:
34:af:89:e4:c1:6f:d0:4f:19:fb:da:37:19:67:fa:
f4:f7:78:70:fe:01:f4:81:40:15:d9:ce:59:25:6f:
9b:1d:6c:a7:41:8a:1d:b0:b9:9b:76:9f:87:14:1d:
84:18:20:af:6d:7d:af:ab:2d:b2:16:5f:37:08:8d:
6b:94:a4:c5:f1:77:01:88:f6:79:24:1b:e8:83:de:
e0:d8:44:78:57:0d:33:8d:b7:59:f3:88:ca:4e:b9:
72:d4:c8:a0:fd:e4:dd:e2:d4:5e:97:a4:9f:8d:ae:
de:69:ab:4b:b6:74:4e:8b:d1:95:1b:53:56:14:52:
03:e9:33:b6:3e:6d:7e:4f:a0:c2:ca:58:4b:ff:77:
ef:b1:72:63:06:68:2d:52:bb:da:6e:e6:f0:73:68:
a7:b5:30:87:2e:9b:d0:4d:9b:5a:cb:0b:10:51:60:
71:f9:86:19:6c:4d:f7:59:10:ac:18:71:02:bf:6e:
58:59:56:16:a7:d8:fa:b7:cc:96:4a:d5:e1:af:55:
6c:f4:65:1f:d6:b9:87:ee:b0:6e:c3:e9:f1:2c:5a:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:74:19:DD:D2:93:02:80:55:DF:2B:ED:D5:9D:F5:EA:04:62:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nvB0Gd3SkwKAVd8r7dWd9eoEYrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:df:1b:bc:9e:98:e7:f6:9a:b1:db:3d:24:bb:c6:73:a3:9d:
ae:62:ba:5f:e7:2a:af:1c:d7:d6:8e:ae:ff:8f:15:d7:01:78:
57:1a:15:2f:4f:17:e2:ff:d3:d0:ad:05:61:6a:fb:d5:fc:d4:
c0:cb:00:fc:36:6b:71:08:aa:29:54:7d:ce:44:13:af:56:48:
0b:52:5a:1b:c5:68:84:36:66:fa:23:2a:9e:54:a7:93:7b:f6:
0d:10:7a:5b:56:4d:3b:e1:b1:2c:3d:81:0a:f1:4f:74:6e:7a:
93:80:6b:09:77:27:91:5a:24:0d:a6:f2:9e:60:23:cd:47:a3:
9e:56:7b:77:c5:e9:3c:c5:32:47:50:20:ba:1a:5f:01:76:0c:
b8:80:45:d2:1d:8c:3f:48:30:ce:5f:69:89:5b:4f:e0:1b:25:
f6:64:6c:a0:9f:e5:15:4d:1d:d7:2b:78:cd:86:c8:f3:fa:f0:
4d:34:5d:c5:18:34:30:9f:82:4c:a9:ab:d8:54:51:cd:f2:80:
17:cd:17:5c:4e:0f:cf:fc:52:15:f0:82:c8:af:aa:69:26:28:
8a:03:3d:a4:e7:37:b8:f4:15:cf:19:56:1c:71:68:2c:6f:7d:
e2:87:cd:a3:41:ff:3a:27:ab:6c:a3:7c:38:4c:0c:12:5e:a3:
5d:57:b0:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCMBE8KiMYMVpC3VKOd09lLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTEwMTU1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWYwNzQxOWRkZDI5MzAyODA1NWRmMmJlZGQ1OWRmNWVhMDQ2MmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhf9gOiReI1DKCSdeRbMdn9gjqEQ
xP/RZ0Nrysb68D8aICxhK0tP2Nt2vbQ0r4nkwW/QTxn72jcZZ/r093hw/gH0gUAV
2c5ZJW+bHWynQYodsLmbdp+HFB2EGCCvbX2vqy2yFl83CI1rlKTF8XcBiPZ5JBvo
g97g2ER4Vw0zjbdZ84jKTrly1Mig/eTd4tRel6Sfja7eaatLtnROi9GVG1NWFFID
6TO2Pm1+T6DCylhL/3fvsXJjBmgtUrvabubwc2intTCHLpvQTZtaywsQUWBx+YYZ
bE33WRCsGHECv25YWVYWp9j6t8yWStXhr1Vs9GUf1rmH7rBuw+nxLFrmPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ7wdBnd0pMCgFXfK+3VnfXqBGKwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbnZCMEdkM1Nrd0tBVmQ4cjdkV2Q5ZW9FWXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlcYMA0G
CSqGSIb3DQEBCwUAA4IBAQB63xu8npjn9pqx2z0ku8Zzo52uYrpf5yqvHNfWjq7/
jxXXAXhXGhUvTxfi/9PQrQVhavvV/NTAywD8NmtxCKopVH3ORBOvVkgLUlobxWiE
Nmb6IyqeVKeTe/YNEHpbVk074bEsPYEK8U90bnqTgGsJdyeRWiQNpvKeYCPNR6Oe
Vnt3xek8xTJHUCC6Gl8Bdgy4gEXSHYw/SDDOX2mJW0/gGyX2ZGygn+UVTR3XK3jN
hsjz+vBNNF3FGDQwn4JMqavYVFHN8oAXzRdcTg/P/FIV8ILIr6ppJiiKAz2k5ze4
9BXPGVYccWgsb33ih82jQf86J6tso3w4TAwSXqNdV7Bx
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:35 2026 by rpki-client