Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NBW5bNxGYhQtRJ4-PyBNyPtpXEA.roa
File: NBW5bNxGYhQtRJ4-PyBNyPtpXEA.roa (raw, json)
Hash identifier: zHLDi8hJ7O8zh/04Ug3B5iyiYlYd1Dml5fBCH+abpNo=
Subject key identifier: 34:15:B9:6C:DC:46:62:14:2D:44:9E:3E:3F:20:4D:C8:FB:69:5C:40
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0FB424601B3D2FCE680BB11ECBE4016C7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NBW5bNxGYhQtRJ4-PyBNyPtpXEA.roa
Signing time: Fri 02 Oct 2026 06:16:59 +0000
ROA not before: Fri 02 Oct 2026 06:16:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207459
IP address blocks: 92.249.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:42:46:01:b3:d2:fc:e6:80:bb:11:ec:be:40:16:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 2 06:16:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3415b96cdc4662142d449e3e3f204dc8fb695c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:8d:3b:8a:25:ea:c8:fa:3c:6e:9f:e8:2a:
59:b0:19:98:f9:56:bf:a1:30:31:31:22:a2:a0:98:
dc:bd:04:dd:bc:1e:d2:29:42:c3:06:2d:96:33:9a:
90:90:58:ad:4d:b6:19:5f:21:21:9f:a0:bf:4d:a3:
b8:4c:33:af:e2:f9:c3:6c:c6:8f:09:66:9d:ad:bf:
1a:f1:e3:da:ef:9e:2a:fe:f7:24:14:13:49:8f:02:
69:3d:28:95:26:4a:0f:75:e2:a5:c1:61:e3:28:7c:
27:ec:63:ec:13:09:c4:c2:64:28:7a:07:f2:7a:2f:
32:ee:87:28:d3:f0:71:b4:33:28:b5:e8:1e:d0:f4:
00:46:0d:60:a5:90:3e:c1:6b:98:57:6e:31:e0:48:
dd:e4:15:23:63:48:fe:1b:ee:e7:90:59:b3:4c:0e:
aa:fe:97:e1:aa:dc:e9:2f:30:60:9b:a1:e5:a8:41:
d4:f8:2e:1f:8c:c7:26:71:31:dc:a0:8f:8d:01:38:
f0:73:9a:2e:44:0b:fa:34:dd:93:ce:5d:b7:7a:63:
9b:c4:ac:de:2c:0a:7f:1e:5c:01:5a:62:81:33:fa:
95:d3:0c:98:69:8e:02:43:2f:55:73:17:52:8f:47:
09:e1:bf:cd:5a:db:48:d8:11:9b:6f:3c:8c:e3:7f:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:B9:6C:DC:46:62:14:2D:44:9E:3E:3F:20:4D:C8:FB:69:5C:40
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NBW5bNxGYhQtRJ4-PyBNyPtpXEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ca:2d:36:07:bc:9f:8b:0d:d6:ca:fb:cb:a7:d4:45:de:54:
0b:bf:53:d3:9f:d2:a6:c5:c7:b2:07:fa:6c:6e:63:10:87:58:
3e:c3:23:44:cd:04:36:53:c6:35:dd:ad:b1:f1:7c:61:9f:00:
46:c8:2f:62:27:3a:db:f9:6c:66:58:16:08:1f:a7:7b:8a:a4:
99:a0:7f:5f:15:70:f8:96:bb:a7:57:ca:8c:28:d3:e9:d4:22:
0d:d3:a6:24:da:13:59:af:08:fb:78:5f:7d:f3:89:98:e0:06:
d5:2d:c9:ea:9b:ab:0b:cc:15:5b:b8:07:e1:58:ba:9c:29:cc:
6d:11:47:b9:35:62:80:85:7f:c8:a0:3a:2c:98:29:a0:69:6d:
c2:35:b0:7a:15:a0:21:06:66:57:dd:99:6d:d0:48:ec:98:c1:
f1:ad:6e:1c:dc:01:cf:ca:23:20:24:c3:82:1b:4e:26:ee:e0:
06:04:19:39:5c:50:54:d0:71:cb:78:cd:14:a3:b2:79:d9:33:
f5:7f:86:0a:58:c3:60:19:d0:96:66:a2:e8:e7:b0:70:6a:09:
65:af:0c:40:9f:58:c5:fb:a7:0f:33:4e:0d:af:a7:e7:ca:87:
c9:2c:f2:82:29:e0:bd:ce:9b:91:f7:af:db:76:72:3d:be:3c:
64:42:35:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD7QkYBs9L85oC7Eey+QBbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYxMDAyMDYxNjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDE1Yjk2Y2RjNDY2MjE0MmQ0NDllM2UzZjIwNGRjOGZiNjk1YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+mNO4ol6sj6PG6f6CpZsBmY+Va/
oTAxMSKioJjcvQTdvB7SKULDBi2WM5qQkFitTbYZXyEhn6C/TaO4TDOv4vnDbMaP
CWadrb8a8ePa754q/vckFBNJjwJpPSiVJkoPdeKlwWHjKHwn7GPsEwnEwmQoegfy
ei8y7oco0/BxtDMotege0PQARg1gpZA+wWuYV24x4Ejd5BUjY0j+G+7nkFmzTA6q
/pfhqtzpLzBgm6HlqEHU+C4fjMcmcTHcoI+NATjwc5ouRAv6NN2Tzl23emObxKze
LAp/HlwBWmKBM/qV0wyYaY4CQy9VcxdSj0cJ4b/NWttI2BGbbzyM43+keQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQVuWzcRmIULUSePj8gTcj7aVxAMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvTkJXNWJOeEdZaFF0Uko0LVB5Qk55UHRwWEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPk/MA0G
CSqGSIb3DQEBCwUAA4IBAQCNyi02B7yfiw3WyvvLp9RF3lQLv1PTn9KmxceyB/ps
bmMQh1g+wyNEzQQ2U8Y13a2x8XxhnwBGyC9iJzrb+WxmWBYIH6d7iqSZoH9fFXD4
lrunV8qMKNPp1CIN06Yk2hNZrwj7eF9984mY4AbVLcnqm6sLzBVbuAfhWLqcKcxt
EUe5NWKAhX/IoDosmCmgaW3CNbB6FaAhBmZX3Zlt0EjsmMHxrW4c3AHPyiMgJMOC
G04m7uAGBBk5XFBU0HHLeM0Uo7J52TP1f4YKWMNgGdCWZqLo57BwagllrwxAn1jF
+6cPM04Nr6fnyofJLPKCKeC9zpuR96/bdnI9vjxkQjXa
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:48:55 2026 by rpki-client