Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NVzxwzm4YkLOsq1ExPE9cOLLypY.roa
File: NVzxwzm4YkLOsq1ExPE9cOLLypY.roa (raw, json)
Hash identifier: X8lGnJ+z437vfdgtUinxsBffCLA+YCDYtYBPxXi70as=
Subject key identifier: 35:5C:F1:C3:39:B8:62:42:CE:B2:AD:44:C4:F1:3D:70:E2:CB:CA:96
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0443D1AEB891D05B0DEF93E7C05226097
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NVzxwzm4YkLOsq1ExPE9cOLLypY.roa
Signing time: Thu 27 Aug 2026 17:20:50 +0000
ROA not before: Thu 27 Aug 2026 17:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27729
IP address blocks: 185.244.228.0/22 maxlen: 22
213.236.16.0/22 maxlen: 22
213.236.16.0/24 maxlen: 24
213.236.17.0/24 maxlen: 24
213.236.18.0/24 maxlen: 24
213.236.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:3d:1a:eb:89:1d:05:b0:de:f9:3e:7c:05:22:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 27 17:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=355cf1c339b86242ceb2ad44c4f13d70e2cbca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:ce:4e:68:aa:e6:1c:3a:c7:00:c3:21:4e:
f5:f8:a6:95:ec:fb:84:3b:7a:cf:b1:96:06:4f:13:
6a:34:c3:01:a2:1c:ae:cf:b0:f3:70:74:6d:83:75:
d9:ef:84:9b:41:d9:9a:7f:e8:51:63:b0:d1:2b:65:
0c:2c:e9:d3:07:c5:58:e1:01:e8:18:28:b1:99:c9:
e4:38:52:43:86:e3:9c:d7:10:c5:11:5f:df:9a:a6:
c7:bc:9c:ef:db:5e:46:85:0d:65:c7:bf:25:6a:ad:
9f:ee:8d:11:d2:6c:97:60:9e:e1:47:57:90:4e:07:
a2:58:38:7a:35:fc:62:04:1d:85:1b:81:df:ba:2d:
12:d1:09:a6:3f:b2:42:fd:69:b5:b5:7c:8e:a7:3d:
64:83:30:55:1f:e7:45:22:17:a4:e1:03:04:ab:c5:
11:3b:07:c0:70:7b:8b:5d:00:9b:0c:7b:65:fe:7d:
86:50:fc:86:8f:5f:c5:cf:e1:05:34:68:22:c0:81:
a7:7d:3c:7d:81:22:18:71:c5:44:d6:5a:38:c2:b8:
f3:c8:1f:29:23:71:83:55:b8:e0:46:a8:e1:43:34:
12:27:7a:fd:5b:9c:1c:b7:d0:4f:07:19:84:1c:9e:
2d:9a:b8:6c:29:cc:d4:47:f9:11:70:db:af:a7:94:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:F1:C3:39:B8:62:42:CE:B2:AD:44:C4:F1:3D:70:E2:CB:CA:96
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NVzxwzm4YkLOsq1ExPE9cOLLypY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.228.0/22
213.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:58:78:bb:d0:04:2c:e2:c3:d9:96:5b:70:2a:53:56:44:c0:
bf:71:c1:31:30:8b:64:1a:e9:b7:4c:73:e7:f8:44:67:8e:a4:
bf:8f:02:a9:73:2e:c8:a2:79:d7:d5:ef:85:18:df:19:52:09:
70:05:14:6c:14:47:2a:88:c2:34:2f:30:4c:91:9f:e9:2a:44:
ab:fe:ab:81:b5:7b:13:0b:3a:17:6f:11:c2:8a:63:b9:22:22:
90:32:73:92:7f:c2:7f:00:1b:66:fe:c2:7d:f7:0e:c4:6a:09:
c4:c3:fe:d6:b0:4c:47:5a:6e:4f:b0:6c:94:21:84:32:4b:0a:
07:71:70:32:a5:a3:ea:1b:ac:c9:7c:7b:c5:62:5c:30:7c:e0:
21:c0:99:5e:4d:0e:c9:b8:6d:21:50:a3:f2:6b:2c:bd:b5:09:
cc:eb:97:45:a5:d3:66:c7:c0:04:38:0e:e8:3a:bc:f5:77:a0:
89:75:e0:c1:b4:00:7f:d8:b9:ea:81:15:d6:7e:06:0e:63:f2:
c8:a3:1e:25:ce:dd:27:6b:89:30:ff:02:f8:77:be:5c:ef:ee:
d2:7e:c9:c7:63:66:cf:de:33:f9:6b:ea:6c:b7:4c:fb:ac:c0:
b3:bc:4d:23:e6:fd:d3:c0:85:26:42:7a:fb:41:03:8c:c4:7b:
6f:1d:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:03 2026 by rpki-client