Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NUGPN3swy6h5dHQ_7_bacbc4U8E.roa
File: NUGPN3swy6h5dHQ_7_bacbc4U8E.roa (raw, json)
Hash identifier: QVojiHjKWmnQhvXYwO+ZYJa3MBZWIJONBnzdJBKgrdM=
Subject key identifier: 35:41:8F:37:7B:30:CB:A8:79:74:74:3F:EF:F6:DA:71:B7:38:53:C1
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03E6236C27EEBEFF6684D938FD6C3ABDC
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NUGPN3swy6h5dHQ_7_bacbc4U8E.roa
Signing time: Wed 26 Aug 2026 14:03:39 +0000
ROA not before: Wed 26 Aug 2026 14:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
193.32.184.0/24 maxlen: 24
193.32.185.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:62:36:c2:7e:eb:ef:f6:68:4d:93:8f:d6:c3:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 26 14:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35418f377b30cba87974743feff6da71b73853c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:71:b0:34:ee:e8:00:f7:de:fa:57:26:39:
28:b9:60:e3:00:6b:98:a2:30:60:af:18:be:17:5c:
67:c6:a5:e6:8a:7e:78:90:27:0c:65:64:d4:a1:da:
75:8a:6a:4a:fb:71:c9:e4:dd:8e:52:d2:b1:21:7b:
9d:54:e2:50:31:8c:23:ef:57:98:8c:67:f3:50:01:
c9:35:ac:74:8b:b8:79:15:af:7d:12:0c:fd:66:47:
6b:df:6a:9e:d1:1f:44:a1:e3:13:a9:8a:35:64:6f:
6f:7b:60:be:5e:ab:0d:d2:c3:e2:71:94:81:ff:e3:
fb:94:ff:89:af:6f:ab:20:c3:8c:20:e2:5e:8d:c4:
2e:e4:46:fd:f0:7b:2f:4c:94:08:d4:6a:55:4e:91:
2f:ed:75:78:e5:71:e6:05:3f:01:0c:7f:17:62:6e:
dc:0f:0c:df:1f:e9:75:b7:61:47:c1:2b:4f:6d:93:
27:8e:d1:27:f4:e6:3c:2f:6f:19:44:c4:15:8e:f1:
b4:71:95:9a:ac:71:25:53:31:e0:24:dc:b1:a7:59:
9c:d6:f2:d2:4c:57:0b:1e:0e:35:2d:a8:2f:4b:44:
24:35:a9:fc:2e:22:56:f9:c6:89:4e:a4:79:d2:64:
de:6f:42:d2:15:4f:aa:c1:20:ef:22:33:5b:ac:1e:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:8F:37:7B:30:CB:A8:79:74:74:3F:EF:F6:DA:71:B7:38:53:C1
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NUGPN3swy6h5dHQ_7_bacbc4U8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
176.96.128.0/24
193.32.184.0/23
193.111.79.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
70:83:02:af:40:53:00:a9:3f:4e:23:c6:35:dd:6a:4e:81:62:
8a:03:bd:f7:d8:52:d7:9e:4b:23:31:b1:96:f2:ff:14:ba:84:
17:27:50:58:70:ca:b5:59:d8:ae:af:9d:1e:5f:e8:87:92:b5:
46:52:5c:bd:98:bb:da:72:bf:1f:82:30:df:9e:c5:54:8c:c9:
2e:8f:aa:95:4f:32:43:d4:db:1f:e9:0c:57:d0:21:7a:2f:16:
73:f8:13:3c:cb:32:28:a7:e6:3b:ce:4a:dc:17:61:01:2e:a3:
81:6d:c6:c7:a1:38:01:3f:c9:a3:7d:8e:dc:f3:58:5d:66:c0:
7a:a5:aa:eb:fc:d6:6b:1d:c2:8c:d1:c4:60:84:ca:71:1b:13:
35:53:c3:23:67:54:2f:32:16:29:46:5b:2e:08:e3:b0:b6:fa:
24:38:46:d8:18:87:7a:92:c1:51:65:9b:4e:8c:c5:f8:19:c5:
8a:df:7b:82:09:a7:1c:d0:73:ba:7d:82:5e:87:63:08:69:a1:
4a:05:ed:74:9a:5e:90:aa:d9:d2:6c:60:01:f8:2b:5d:7e:0d:
25:d0:cc:2a:0b:42:28:e7:2a:1f:69:a9:4b:42:e5:a5:4a:07:
b8:85:56:99:cd:22:96:1e:e4:79:05:e3:8a:79:98:90:f0:85:
d8:75:0c:74
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAaA+YjbCfuvv9mhNk4/Ww6vcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI2MTQwMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTQxOGYzNzdiMzBjYmE4Nzk3NDc0M2ZlZmY2ZGE3MWI3Mzg1M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lBxsDTu6AD33vpXJjkouWDjAGuY
ojBgrxi+F1xnxqXmin54kCcMZWTUodp1impK+3HJ5N2OUtKxIXudVOJQMYwj71eY
jGfzUAHJNax0i7h5Fa99Egz9Zkdr32qe0R9EoeMTqYo1ZG9ve2C+XqsN0sPicZSB
/+P7lP+Jr2+rIMOMIOJejcQu5Eb98HsvTJQI1GpVTpEv7XV45XHmBT8BDH8XYm7c
DwzfH+l1t2FHwStPbZMnjtEn9OY8L28ZRMQVjvG0cZWarHElUzHgJNyxp1mc1vLS
TFcLHg41LagvS0QkNan8LiJW+caJTqR50mTeb0LSFU+qwSDvIjNbrB5vNwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFDVBjzd7MMuoeXR0P+/22nG3OFPBMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvTlVHUE4zc3d5Nmg1ZEhRXzdfYmFjYmM0VThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAHyjNMAwD
BABV60kDBABV60oDBACwYIADBAHBILgDBADBb08DBADZEtAwDQYJKoZIhvcNAQEL
BQADggEBAHCDAq9AUwCpP04jxjXdak6BYooDvffYUteeSyMxsZby/xS6hBcnUFhw
yrVZ2K6vnR5f6IeStUZSXL2Yu9pyvx+CMN+exVSMyS6PqpVPMkPU2x/pDFfQIXov
FnP4EzzLMiin5jvOStwXYQEuo4FtxsehOAE/yaN9jtzzWF1mwHqlquv81msdwozR
xGCEynEbEzVTwyNnVC8yFilGWy4I47C2+iQ4RtgYh3qSwVFlm06MxfgZxYrfe4IJ
pxzQc7p9gl6HYwhpoUoF7XSaXpCq2dJsYAH4K11+DSXQzCoLQijnKh9pqUtC5aVK
B7iFVpnNIpYe5HkF44p5mJDwhdh1DHQ=
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:32 2026 by rpki-client