Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NvT1IzT3BnClQgOrfFUSnnkBQi8.roa
File: NvT1IzT3BnClQgOrfFUSnnkBQi8.roa (raw, json)
Hash identifier: DW7/NDcQlJ2R2asfXTyagTDA0+TK7mzBNIf7ndARe7M=
Subject key identifier: 36:F4:F5:23:34:F7:06:70:A5:42:03:AB:7C:55:12:9E:79:01:42:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0ECEFD7A2901ADBD04325C6391DDBA51F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NvT1IzT3BnClQgOrfFUSnnkBQi8.roa
Signing time: Tue 29 Sep 2026 11:32:16 +0000
ROA not before: Tue 29 Sep 2026 11:32:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210881
IP address blocks: 85.93.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:ef:d7:a2:90:1a:db:d0:43:25:c6:39:1d:db:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 29 11:32:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f4f52334f70670a54203ab7c55129e7901422f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:18:60:46:52:4f:75:30:6c:cb:14:5b:28:
bd:4b:44:2b:e5:f6:ca:e2:a7:2c:a2:91:17:4a:7a:
17:2b:c8:0b:80:32:6e:51:08:2a:48:07:68:84:fe:
c4:72:2f:8c:a5:0b:01:c3:11:49:64:b7:ec:90:ae:
98:ca:b9:8f:58:a5:95:24:25:08:0b:e8:39:33:dc:
c6:fd:65:8f:48:9d:e5:d5:24:8c:02:1d:48:df:67:
d7:53:02:a5:42:21:a5:d3:6c:0a:9e:f0:bc:d6:44:
e2:16:9d:ec:fd:09:8e:a2:84:a4:b6:03:00:1b:1b:
c1:55:c3:ca:7a:5e:ad:09:e8:83:db:1f:ce:80:39:
6d:2f:9d:6d:13:aa:bd:72:d5:5b:56:97:3d:a0:f6:
16:81:6f:71:5e:7f:ec:80:81:ef:1b:0e:3d:10:f7:
42:a6:60:b2:ff:13:d3:47:a4:e3:e6:d6:49:64:8d:
c8:c9:e4:f9:4a:01:61:47:df:f8:c1:c5:5d:c9:37:
41:33:bb:f5:b8:99:46:ee:6a:e5:ac:14:50:9e:cd:
29:c1:54:d6:90:f6:d8:57:cd:be:9b:0b:e4:a6:12:
64:7c:37:c7:21:bb:3f:56:33:84:15:76:2a:29:20:
20:c4:e2:eb:6c:7a:48:6d:27:46:6f:a5:fb:2e:bd:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:F5:23:34:F7:06:70:A5:42:03:AB:7C:55:12:9E:79:01:42:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NvT1IzT3BnClQgOrfFUSnnkBQi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e8:47:9e:20:5f:a0:22:20:63:76:9d:46:b6:e5:c2:2d:01:
a2:3d:11:22:ed:18:04:f3:4a:48:88:81:4d:27:9b:1b:50:2e:
0a:58:25:d8:8c:cd:be:c6:13:4a:d8:27:9c:45:c2:02:c5:3e:
0e:85:31:cb:43:ca:e8:46:f2:dd:61:41:07:c0:88:a7:30:7a:
04:72:aa:0d:ec:b0:61:ee:38:63:f1:4d:af:a6:4b:53:6c:2c:
f9:39:c9:07:6e:d8:a5:41:fd:5e:de:db:d6:fc:fd:2f:ba:54:
03:4d:e5:99:be:09:a3:8f:8c:e6:a2:db:1c:73:c6:ef:95:d1:
dd:7b:48:57:55:74:4b:69:4b:d8:87:81:ad:93:8d:3f:65:d5:
49:f0:2c:a5:eb:40:e4:0f:99:14:38:8b:95:42:70:45:83:9a:
73:d2:55:43:ca:fe:b2:a0:a0:4f:80:5f:38:f4:fb:e3:5d:ee:
4c:f6:dc:77:7a:34:bd:97:1a:7f:31:0d:89:6a:c1:8c:b5:50:
42:f9:a7:43:15:aa:b7:8a:e9:4e:63:a0:12:b0:43:f1:e1:62:
b6:3e:b7:4e:78:b2:dd:eb:c0:35:24:47:18:94:53:e4:c3:df:
6a:78:a6:7d:3e:bb:fb:4c:57:9b:17:1b:88:fa:52:04:42:c7:
43:80:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:00 2026 by rpki-client