Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/NKWHCYzNepWbSsW4Fdxn7US24kg.roa
File: NKWHCYzNepWbSsW4Fdxn7US24kg.roa (raw, json)
Hash identifier: GmLgFf+CDpdyG1pPKSxadcb5exdWjVthfa2WpFffGps=
Subject key identifier: 34:A5:87:09:8C:CD:7A:95:9B:4A:C5:B8:15:DC:67:ED:44:B6:E2:48
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FEFB3E2C21F75130E1E0842A65C86E228
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/NKWHCYzNepWbSsW4Fdxn7US24kg.roa
Signing time: Tue 11 Aug 2026 07:22:51 +0000
ROA not before: Tue 11 Aug 2026 07:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 213.189.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:b3:e2:c2:1f:75:13:0e:1e:08:42:a6:5c:86:e2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 11 07:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34a587098ccd7a959b4ac5b815dc67ed44b6e248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:6d:5b:24:a0:d3:22:85:75:74:3d:bd:f4:
6e:ab:b7:e1:d1:d8:64:bf:17:c6:f5:fc:e5:23:3a:
96:91:cb:95:73:d8:9a:bc:77:20:51:a1:f8:bf:0b:
28:54:8e:e7:60:90:28:10:52:66:23:d9:77:81:46:
c9:f2:3b:63:9f:a9:19:bc:ba:32:a9:8f:be:a4:1a:
ee:a7:63:fd:ed:c1:24:15:38:4b:fb:a5:88:6f:14:
f2:fe:40:6f:88:59:12:00:22:ad:12:d1:92:05:06:
8c:7b:83:1c:f7:e9:5c:98:bb:2a:bf:1c:26:8a:a8:
48:84:0a:2c:49:57:04:7f:96:98:bf:05:ed:14:6e:
77:ef:a1:12:29:18:98:5f:40:02:5f:1a:b3:6d:15:
fe:ca:cf:ac:52:85:c8:fd:66:4c:77:1b:f6:8a:03:
bb:b1:b7:9d:c0:7c:46:9d:54:ab:69:f1:52:d4:a0:
28:a6:3e:49:ee:e3:61:f5:cd:94:1d:f2:3a:bd:f2:
a3:ba:10:c8:8f:6e:c2:f4:05:38:b9:97:09:f5:19:
c9:cd:64:f5:51:ed:bd:d5:f8:5c:0b:05:7d:fd:2f:
39:38:29:3f:99:48:c8:fd:09:bc:4c:8a:ad:7a:4d:
36:6a:c9:47:27:a3:09:fc:0f:b5:f7:c2:1c:e5:8a:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:87:09:8C:CD:7A:95:9B:4A:C5:B8:15:DC:67:ED:44:B6:E2:48
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/NKWHCYzNepWbSsW4Fdxn7US24kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a0:cb:31:ea:7d:e6:09:b3:fc:ac:25:f5:ab:2e:7a:f3:06:
2f:bd:95:f3:2a:1d:04:76:b5:38:88:aa:44:61:6d:92:e5:2d:
0e:8b:3f:ce:40:de:c5:33:7c:ce:de:53:a3:ec:4d:7b:19:1f:
e7:50:db:4f:04:50:54:7a:bc:94:3b:0c:5f:87:b8:8e:d4:92:
08:41:71:0d:05:24:38:2b:f9:ff:18:a8:29:36:bf:c4:f2:9f:
67:ee:b1:3d:1a:d0:02:04:d9:46:08:6d:18:5c:95:a3:7b:42:
e3:1b:bd:69:e4:2c:af:f7:31:37:f5:d4:cd:15:a7:87:7e:6a:
4b:e0:78:7d:b7:de:8c:e4:85:c5:62:f3:db:ea:aa:22:f4:30:
4d:e7:01:18:43:f8:9d:ac:65:fa:a8:61:53:1e:44:87:67:54:
e6:50:06:49:8f:23:96:5b:42:0d:68:cb:a4:59:f7:0c:ce:99:
41:45:9c:b7:97:e9:5b:1b:5b:7b:0c:32:2f:04:73:12:8e:5b:
d4:70:92:55:25:a7:c2:12:0a:5b:90:ee:db:89:eb:7a:55:60:
5f:bb:ac:cd:c9:44:f6:a0:e7:3d:5c:82:5e:30:08:e6:f7:2b:
ad:da:8d:5e:af:9e:ba:f8:e5:b8:8f:1f:06:4b:4b:c2:17:4a:
71:8a:8a:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/vs+LCH3UTDh4IQqZchuIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwODExMDcyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGE1ODcwOThjY2Q3YTk1OWI0YWM1YjgxNWRjNjdlZDQ0YjZlMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSdtWySg0yKFdXQ9vfRuq7fh0dhk
vxfG9fzlIzqWkcuVc9iavHcgUaH4vwsoVI7nYJAoEFJmI9l3gUbJ8jtjn6kZvLoy
qY++pBrup2P97cEkFThL+6WIbxTy/kBviFkSACKtEtGSBQaMe4Mc9+lcmLsqvxwm
iqhIhAosSVcEf5aYvwXtFG5376ESKRiYX0ACXxqzbRX+ys+sUoXI/WZMdxv2igO7
sbedwHxGnVSrafFS1KAopj5J7uNh9c2UHfI6vfKjuhDIj27C9AU4uZcJ9RnJzWT1
Ue291fhcCwV9/S85OCk/mUjI/Qm8TIqtek02aslHJ6MJ/A+198Ic5Yp5/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDSlhwmMzXqVm0rFuBXcZ+1EtuJIMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvTktXSENZek5lcFdiU3NXNEZkeG43VVMyNGtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0VMA0G
CSqGSIb3DQEBCwUAA4IBAQCnoMsx6n3mCbP8rCX1qy568wYvvZXzKh0EdrU4iKpE
YW2S5S0Oiz/OQN7FM3zO3lOj7E17GR/nUNtPBFBUeryUOwxfh7iO1JIIQXENBSQ4
K/n/GKgpNr/E8p9n7rE9GtACBNlGCG0YXJWje0LjG71p5Cyv9zE39dTNFaeHfmpL
4Hh9t96M5IXFYvPb6qoi9DBN5wEYQ/idrGX6qGFTHkSHZ1TmUAZJjyOWW0INaMuk
WfcMzplBRZy3l+lbG1t7DDIvBHMSjlvUcJJVJafCEgpbkO7biet6VWBfu6zNyUT2
oOc9XIJeMAjm9yut2o1er566+OW4jx8GS0vCF0pxiori
-----END CERTIFICATE-----
Generated at Mon Aug 31 16:51:46 2026 by rpki-client