Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/NBgJvOKTjl9BCb8sIbiBRojgbBI.roa
File: NBgJvOKTjl9BCb8sIbiBRojgbBI.roa (raw, json)
Hash identifier: 6IQveFL+/pDqbbhFvukOROlbI2KgluMKdiwn/C7I24I=
Subject key identifier: 34:18:09:BC:E2:93:8E:5F:41:09:BF:2C:21:B8:81:46:88:E0:6C:12
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019FFF46A63FF8152FA5BA4981A7B91ECB93
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/NBgJvOKTjl9BCb8sIbiBRojgbBI.roa
Signing time: Fri 14 Aug 2026 07:57:27 +0000
ROA not before: Fri 14 Aug 2026 07:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205406
IP address blocks: 45.151.156.0/24 maxlen: 24
45.151.157.0/24 maxlen: 24
45.151.158.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:7::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:14::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:19::/48 maxlen: 48
2a0b:3c40:f1::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:46:a6:3f:f8:15:2f:a5:ba:49:81:a7:b9:1e:cb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 14 07:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=341809bce2938e5f4109bf2c21b8814688e06c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:8d:69:1b:5d:4f:a8:01:2a:db:7e:36:67:
98:93:9a:f1:33:a5:6c:f8:5a:f5:a1:eb:8f:78:0d:
05:0d:44:64:e2:d7:37:14:ea:fa:d8:ef:17:b7:cb:
35:a0:c3:bd:9a:0d:7c:f1:2e:3a:f1:81:93:44:c2:
2f:f1:8e:b9:c6:0e:ae:48:e3:25:ce:95:97:f0:1c:
67:bf:ef:f4:40:90:05:02:4f:9b:7b:76:e4:23:05:
f6:bc:75:fb:31:2d:c6:a7:ba:5a:86:cc:cf:c3:df:
93:c3:10:79:6d:5c:22:98:35:a7:70:aa:01:59:94:
31:c4:fa:53:c2:c7:02:66:d9:ca:00:75:92:07:3f:
3e:bc:bb:8e:34:11:f3:50:11:f2:31:97:c2:41:c7:
09:d2:67:d9:a7:bb:26:a8:b6:9f:30:ca:14:51:8b:
74:42:eb:23:fb:bb:5c:cc:11:2f:e4:99:fe:db:03:
96:03:d6:43:0b:06:08:4c:0e:16:1a:a7:67:d1:b2:
43:42:b9:41:13:9f:3b:d9:bb:f6:30:15:27:9e:45:
cc:fa:79:55:bf:db:6e:c2:e9:44:70:51:25:40:a2:
f9:78:d2:ea:a3:c6:25:0f:3c:68:05:6f:9d:20:ef:
f2:b4:6c:ac:e7:f7:5d:f4:31:7f:04:b6:d1:53:db:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:09:BC:E2:93:8E:5F:41:09:BF:2C:21:B8:81:46:88:E0:6C:12
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/NBgJvOKTjl9BCb8sIbiBRojgbBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.156.0-45.151.158.255
45.154.238.0/24
185.208.209.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/24
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:7::/48
2a0b:3c40:11::/48
2a0b:3c40:14::-2a0b:3c40:16:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:19::/48
2a0b:3c40:f1::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:ec:d4:ff:e0:9c:36:c0:93:94:a6:d6:a9:a0:5d:d1:e7:92:
38:50:da:24:5d:ff:49:c8:34:bf:d6:b2:8a:04:94:ee:b1:17:
56:5c:eb:09:7e:4f:fc:dc:ad:a2:46:7a:07:3b:be:a7:2c:62:
df:15:a9:73:01:24:2c:15:9a:9a:c0:99:b6:25:9b:79:74:44:
59:9c:11:7e:f0:f3:48:1a:15:be:a9:62:07:c1:67:3e:b1:bc:
1c:bb:ed:57:fa:4a:4c:f3:7d:63:08:f6:8f:82:c1:3b:51:d4:
3c:69:83:59:7d:98:df:a3:ce:b6:bc:3a:1f:bf:80:1c:c0:9f:
53:58:f1:87:cb:f3:b6:1b:b4:03:54:d5:f2:0f:12:37:09:ea:
c7:77:ad:6b:7f:e5:80:a6:c5:ee:9d:0b:dd:19:31:c7:14:b6:
ea:eb:cf:42:38:9e:fd:aa:45:33:bd:af:ed:5e:ac:e4:46:58:
b6:3f:7b:5c:12:56:57:59:8b:6d:5b:02:28:4e:72:9b:83:5e:
5a:3c:a7:83:ea:01:79:b4:a4:d9:ca:ca:e2:6c:0e:6a:23:29:
51:3f:b0:47:b3:d2:d9:74:d9:f8:29:38:62:c1:89:99:09:42:
f2:a2:83:43:6f:d6:b8:ff:e1:54:e4:b3:af:33:55:a4:a1:b5:
74:48:02:4d
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZ//RqY/+BUvpbpJgae5HsuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjYwODE0MDc1NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDE4MDliY2UyOTM4ZTVmNDEwOWJmMmMyMWI4ODE0Njg4ZTA2YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnGNaRtdT6gBKtt+NmeYk5rxM6Vs
+Fr1oeuPeA0FDURk4tc3FOr62O8Xt8s1oMO9mg188S468YGTRMIv8Y65xg6uSOMl
zpWX8Bxnv+/0QJAFAk+be3bkIwX2vHX7MS3Gp7pahszPw9+TwxB5bVwimDWncKoB
WZQxxPpTwscCZtnKAHWSBz8+vLuONBHzUBHyMZfCQccJ0mfZp7smqLafMMoUUYt0
Qusj+7tczBEv5Jn+2wOWA9ZDCwYITA4WGqdn0bJDQrlBE5872bv2MBUnnkXM+nlV
v9tuwulEcFElQKL5eNLqo8YlDzxoBW+dIO/ytGys5/dd9DF/BLbRU9u0ywIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFDQYCbzik45fQQm/LCG4gUaI4GwSMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvTkJnSnZPS1RqbDlCQ2I4c0liaUJSb2pnYkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG4BggrBgEFBQcBBwEB/wSBqDCBpTBGBAIAATBAMAwDBAIt
l5wDBAAtl54DBAAtmu4wDAMEALnQ0QMEALnQ0gMEALnjUgMEALnkUwMEAbnzcAME
AMKSMAMEAMMaBjBbBAIAAjBVAwcAKgs8QAABAwcAKgs8QAAHAwcAKgs8QAARMBID
BwIqCzxAABQDBwAqCzxAABYDBwAqCzxAABkDBwAqCzxAAPEwEgMHBCoOVUAAEAMH
ACoOVUAAEjANBgkqhkiG9w0BAQsFAAOCAQEAnuzU/+CcNsCTlKbWqaBd0eeSOFDa
JF3/Scg0v9ayigSU7rEXVlzrCX5P/NytokZ6Bzu+pyxi3xWpcwEkLBWamsCZtiWb
eXREWZwRfvDzSBoVvqliB8FnPrG8HLvtV/pKTPN9Ywj2j4LBO1HUPGmDWX2Y36PO
trw6H7+AHMCfU1jxh8vzthu0A1TV8g8SNwnqx3eta3/lgKbF7p0L3RkxxxS26uvP
Qjie/apFM72v7V6s5EZYtj97XBJWV1mLbVsCKE5ym4NeWjyng+oBebSk2crK4mwO
aiMpUT+wR7PS2XTZ+Ck4YsGJmQlC8qKDQ2/WuP/hVOSzrzNVpKG1dEgCTQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:59 2026 by rpki-client