Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/nlzsv5_4ztHk87YIpIDNp8kA-LY.roa
File: nlzsv5_4ztHk87YIpIDNp8kA-LY.roa (raw, json)
Hash identifier: I+evjHY278SDlMs7AgnRI/W35THgRR/EtPMQ/T244gg=
Subject key identifier: 9E:5C:EC:BF:9F:F8:CE:D1:E4:F3:B6:08:A4:80:CD:A7:C9:00:F8:B6
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A01A232BD484291CC319533AA08F454A69
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/nlzsv5_4ztHk87YIpIDNp8kA-LY.roa
Signing time: Wed 19 Aug 2026 13:08:27 +0000
ROA not before: Wed 19 Aug 2026 13:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42962
IP address blocks: 5.181.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:23:2b:d4:84:29:1c:c3:19:53:3a:a0:8f:45:4a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Aug 19 13:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e5cecbf9ff8ced1e4f3b608a480cda7c900f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:b5:69:94:ba:a4:6b:60:4e:7b:e1:9e:8a:
e5:b0:0c:32:af:15:62:d3:eb:e9:da:c8:78:1d:50:
72:af:fc:cc:14:d5:83:e8:63:a7:7b:f5:df:5b:bc:
4f:c7:23:80:58:9f:6e:29:d0:a5:a3:dc:51:e2:ed:
84:f4:c0:57:d3:14:5a:20:13:9b:e0:7f:2a:84:92:
17:a6:19:a3:14:e2:52:36:61:34:56:5a:cb:6d:35:
15:28:79:0b:21:d3:aa:59:31:1d:b1:92:6f:b0:3a:
53:20:27:81:bc:a1:bf:a2:b5:74:e2:d2:7b:42:d8:
fd:55:b1:59:30:2c:2e:bc:37:be:34:20:84:c7:bf:
40:c5:49:13:25:a3:cf:c6:cb:14:cf:27:5f:95:61:
34:4b:cc:69:33:78:10:45:ab:60:fd:9e:6e:36:1f:
4f:83:e5:6c:cd:81:44:cf:76:d7:8a:a4:55:f8:43:
df:e6:8c:8d:4a:28:6e:ad:58:82:b8:79:90:ca:21:
c5:94:1d:5c:fd:96:33:34:ea:0b:22:c3:2e:a0:a6:
d3:ef:c1:54:cd:76:3e:a1:72:f8:5d:22:db:3c:7d:
cc:3e:bf:e0:b8:9e:69:36:de:51:e6:e8:74:ee:bc:
3d:88:b3:db:b0:fc:ed:7b:d6:3d:ea:38:27:b9:33:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:EC:BF:9F:F8:CE:D1:E4:F3:B6:08:A4:80:CD:A7:C9:00:F8:B6
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/nlzsv5_4ztHk87YIpIDNp8kA-LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:66:00:de:3e:2a:33:fd:a6:54:34:2c:c9:20:2b:1d:dd:19:
2c:7a:63:94:87:eb:11:b7:0a:d7:78:30:d2:59:c9:8e:3c:70:
eb:70:9a:a5:a2:e9:9c:ac:7d:49:04:8e:8d:ff:4c:81:a2:78:
d0:f1:4f:c5:f3:e2:03:52:32:7f:7f:b6:70:19:ff:c1:d0:75:
18:d0:46:7f:ee:71:9a:5c:73:80:44:56:bc:c1:54:68:f7:bb:
e7:1e:ff:15:50:68:7d:a5:cb:11:5a:d6:f2:1a:97:ed:96:26:
ff:a7:eb:c0:2b:0e:09:0c:f2:e7:45:42:27:6b:ee:0f:d1:58:
b2:4d:f2:40:c3:c4:57:8c:ca:9d:ee:98:2d:b9:86:5c:83:dd:
8f:75:9e:d8:a7:3d:ca:84:d2:03:c6:67:96:dc:d2:ae:91:ab:
1c:d8:f2:52:b3:ec:96:02:dc:e6:59:0c:2c:07:76:3e:88:62:
87:36:7d:68:60:a9:d5:12:6e:1c:f1:4d:76:1d:c6:e4:ea:36:
8b:63:bb:17:a3:b0:79:0a:56:45:0e:ff:79:79:6c:ce:aa:05:
e8:b9:74:02:1f:62:b2:b5:63:f0:25:70:78:e5:ab:67:92:99:
26:ff:ee:87:bf:ad:32:9e:9b:e3:7c:d5:a8:3f:85:06:25:2d:
e5:61:e7:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAaIyvUhCkcwxlTOqCPRUppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5
MjU4ZjEwHhcNMjYwODE5MTMwODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTVjZWNiZjlmZjhjZWQxZTRmM2I2MDhhNDgwY2RhN2M5MDBmOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSe1aZS6pGtgTnvhnorlsAwyrxVi
0+vp2sh4HVByr/zMFNWD6GOne/XfW7xPxyOAWJ9uKdClo9xR4u2E9MBX0xRaIBOb
4H8qhJIXphmjFOJSNmE0VlrLbTUVKHkLIdOqWTEdsZJvsDpTICeBvKG/orV04tJ7
Qtj9VbFZMCwuvDe+NCCEx79AxUkTJaPPxssUzydflWE0S8xpM3gQRatg/Z5uNh9P
g+VszYFEz3bXiqRV+EPf5oyNSihurViCuHmQyiHFlB1c/ZYzNOoLIsMuoKbT78FU
zXY+oXL4XSLbPH3MPr/guJ5pNt5R5uh07rw9iLPbsPzte9Y96jgnuTMf7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5c7L+f+M7R5PO2CKSAzafJAPi2MB8GA1UdIwQY
MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt
Njk3OTQ4ZWE3MWY1LzEvbmx6c3Y1XzR6dEhrODdZSXBJRE5wOGtBLUxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1
LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbXgMA0G
CSqGSIb3DQEBCwUAA4IBAQBbZgDePioz/aZUNCzJICsd3RksemOUh+sRtwrXeDDS
WcmOPHDrcJqloumcrH1JBI6N/0yBonjQ8U/F8+IDUjJ/f7ZwGf/B0HUY0EZ/7nGa
XHOARFa8wVRo97vnHv8VUGh9pcsRWtbyGpftlib/p+vAKw4JDPLnRUIna+4P0Viy
TfJAw8RXjMqd7pgtuYZcg92PdZ7Ypz3KhNIDxmeW3NKukasc2PJSs+yWAtzmWQws
B3Y+iGKHNn1oYKnVEm4c8U12Hcbk6jaLY7sXo7B5ClZFDv95eWzOqgXouXQCH2Ky
tWPwJXB45atnkpkm/+6Hv60ynpvjfNWoP4UGJS3lYec1
-----END CERTIFICATE-----
Generated at Sat Aug 22 23:04:14 2026 by rpki-client