Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ngx_58Gh_SAver5x4fAqSm0P5W4.roa
File: Ngx_58Gh_SAver5x4fAqSm0P5W4.roa (raw, json)
Hash identifier: fyz4BOxzQ8PSnQLVCSPSzwNcRmmLXifVLnhsGCjf1Nk=
Subject key identifier: 36:0C:7F:E7:C1:A1:FD:20:2F:7A:BE:71:E1:F0:2A:4A:6D:0F:E5:6E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C89A3F7B62DED3417B21C0691D4975DB0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ngx_58Gh_SAver5x4fAqSm0P5W4.roa
Signing time: Mon 23 Feb 2026 08:35:50 +0000
ROA not before: Mon 23 Feb 2026 08:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 45.128.235.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:a3:f7:b6:2d:ed:34:17:b2:1c:06:91:d4:97:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 23 08:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=360c7fe7c1a1fd202f7abe71e1f02a4a6d0fe56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:85:f4:9f:af:cd:95:74:03:b4:57:48:c0:
9a:e0:3e:15:1b:34:03:ee:46:9d:57:f3:a7:50:9f:
7d:b6:1c:4e:f4:85:75:80:fa:cd:f4:8b:2c:e9:a9:
d4:9c:e5:d4:8a:b5:8c:b7:38:8a:a8:53:d7:70:05:
b4:c8:e5:06:f1:26:c3:a4:7d:ad:df:36:5a:8d:95:
45:b5:ab:9e:59:67:07:18:a6:d3:54:20:b3:83:01:
ae:c8:ef:22:9f:ee:e4:00:ed:2a:d5:d7:88:07:63:
18:59:46:85:be:1a:02:fd:9b:12:7f:32:c1:ec:29:
4e:45:42:66:d2:a7:b7:b7:f9:a4:5b:d4:8b:ac:ae:
12:fc:43:7f:2b:ef:92:54:40:a3:25:90:2e:b8:fc:
7a:ce:ed:43:dd:f1:ef:16:6d:a9:bb:9f:c6:d5:ff:
93:67:a2:5e:46:7a:9b:56:66:12:86:e6:02:87:22:
ae:dc:3e:c5:8c:12:6e:b8:86:99:bc:e5:9a:e9:e9:
da:ea:90:88:8d:dd:b8:ac:6d:29:ad:bf:db:1a:73:
40:c6:73:ed:25:6d:a1:88:dc:fa:d7:51:9c:75:ea:
bb:4e:45:c9:82:07:ea:11:50:76:d4:11:2f:e5:89:
ad:bb:90:97:3c:d5:63:a4:6f:b6:2a:d8:4a:15:de:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:7F:E7:C1:A1:FD:20:2F:7A:BE:71:E1:F0:2A:4A:6D:0F:E5:6E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ngx_58Gh_SAver5x4fAqSm0P5W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.235.0/24
85.31.46.0/24
85.208.136.0/24
178.215.239.0/24
194.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
34:60:75:fa:3d:b2:9e:d3:23:ec:fc:a4:a4:7f:39:65:60:c7:
3b:aa:f0:d4:25:29:8d:8a:f4:b2:e6:c5:5a:0d:aa:c0:7d:a9:
d1:93:d7:31:65:58:b0:aa:3f:39:4f:3b:b4:2c:ff:d5:14:04:
6d:81:44:39:33:40:a9:94:b0:bd:e1:d8:a1:30:5c:56:2f:10:
c5:0d:35:3a:6b:bc:4a:1c:78:d2:72:a1:82:09:b7:8f:45:90:
86:61:7f:6a:1c:74:41:63:3e:4e:ff:03:31:41:93:df:ac:0a:
4f:c5:d1:5b:67:17:98:06:83:14:cb:4d:a5:3c:0d:0b:67:ec:
a0:3f:87:61:57:5f:54:8c:00:fa:5f:db:32:c0:b0:bc:7c:92:
49:5a:5a:6e:27:24:18:d6:c3:55:49:0b:66:00:17:07:e4:1e:
2b:76:0d:8e:89:68:c5:cc:19:b8:fa:3c:61:20:a1:60:44:7d:
82:a3:8b:5a:e0:fe:d3:7a:d0:de:60:7d:ca:a7:d3:f3:fe:db:
04:82:25:b6:54:be:47:78:5b:10:95:26:81:ce:ae:b2:38:bd:
62:df:74:50:b3:5b:a5:83:ad:c3:a6:52:d1:d2:11:e7:ff:1e:
19:bd:58:0a:0e:a8:f9:1a:2c:ab:89:bc:c5:1a:91:09:0d:58:
73:66:37:ea
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZyJo/e2Le00F7IcBpHUl12wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMjIzMDgzNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjBjN2ZlN2MxYTFmZDIwMmY3YWJlNzFlMWYwMmE0YTZkMGZlNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w6F9J+vzZV0A7RXSMCa4D4VGzQD
7kadV/OnUJ99thxO9IV1gPrN9Iss6anUnOXUirWMtziKqFPXcAW0yOUG8SbDpH2t
3zZajZVFtaueWWcHGKbTVCCzgwGuyO8in+7kAO0q1deIB2MYWUaFvhoC/ZsSfzLB
7ClORUJm0qe3t/mkW9SLrK4S/EN/K++SVECjJZAuuPx6zu1D3fHvFm2pu5/G1f+T
Z6JeRnqbVmYShuYChyKu3D7FjBJuuIaZvOWa6ena6pCIjd24rG0prb/bGnNAxnPt
JW2hiNz611Gcdeq7TkXJggfqEVB21BEv5Ymtu5CXPNVjpG+2KthKFd6FpwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDYMf+fBof0gL3q+ceHwKkptD+VuMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTmd4XzU4R2hfU0F2ZXI1eDRmQXFTbTBQNVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYDrAwQA
VR8uAwQAVdCIAwQAstfvAwQAwnEnMA0GCSqGSIb3DQEBCwUAA4IBAQA0YHX6PbKe
0yPs/KSkfzllYMc7qvDUJSmNivSy5sVaDarAfanRk9cxZViwqj85Tzu0LP/VFARt
gUQ5M0CplLC94dihMFxWLxDFDTU6a7xKHHjScqGCCbePRZCGYX9qHHRBYz5O/wMx
QZPfrApPxdFbZxeYBoMUy02lPA0LZ+ygP4dhV19UjAD6X9sywLC8fJJJWlpuJyQY
1sNVSQtmABcH5B4rdg2OiWjFzBm4+jxhIKFgRH2Co4ta4P7TetDeYH3Kp9Pz/tsE
giW2VL5HeFsQlSaBzq6yOL1i33RQs1ulg63DplLR0hHn/x4ZvVgKDqj5GiyribzF
GpEJDVhzZjfq
-----END CERTIFICATE-----
Generated at Wed Feb 25 15:14:13 2026 by rpki-client