Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/naTbwBDRz0BGI0fmFJVJxl1Kv7g.roa
File: naTbwBDRz0BGI0fmFJVJxl1Kv7g.roa (raw, json)
Hash identifier: WViKtS5evfjY+W5z8EF3ejZa8Jd1yib1tdn805Q3FGI=
Subject key identifier: 9D:A4:DB:C0:10:D1:CF:40:46:23:47:E6:14:95:49:C6:5D:4A:BF:B8
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E35BB2A74A6897E00253E8C3D84B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/naTbwBDRz0BGI0fmFJVJxl1Kv7g.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214614
IP address blocks: 193.124.186.0/23 maxlen: 23
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:5b:b2:a7:4a:68:97:e0:02:53:e8:c3:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9da4dbc010d1cf40462347e6149549c65d4abfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:72:13:ef:8e:d5:43:5e:e4:d9:5f:c5:1f:
06:23:7f:f9:7a:a2:d7:25:7b:2e:73:74:3b:ff:bf:
dc:f8:c2:45:23:a2:34:33:46:83:0c:ca:1a:ad:a2:
59:cc:9b:2f:f9:10:83:a2:29:38:b9:e1:95:48:f6:
14:34:67:de:27:8e:fc:ae:03:db:3d:be:ea:be:b1:
0c:d0:e2:84:d1:d1:35:0f:dc:bb:e5:1f:60:56:8f:
f6:bb:95:2c:f4:be:8f:bc:8c:43:2c:d3:03:c9:75:
0c:0a:6d:56:64:2b:ff:d2:47:8e:78:61:ee:ae:16:
14:ad:39:33:f4:85:4f:32:ff:89:2e:8b:02:c7:d0:
c9:6e:5b:2f:32:d1:ac:97:4f:75:69:97:0d:1b:36:
1b:12:25:b1:38:aa:6b:d9:b9:e4:ad:a2:d0:a2:f8:
67:35:a9:3e:1d:11:95:82:88:f9:b2:b8:d3:82:da:
23:73:de:ac:d8:0a:db:9d:8e:a0:39:57:3b:ac:75:
44:2d:79:04:d2:25:96:f9:c2:3e:74:f9:0f:2c:17:
75:88:a9:42:dd:56:b4:ee:0c:e9:ec:3a:a9:36:1f:
43:93:f7:a9:a7:dc:ad:59:03:6a:99:fa:29:73:21:
95:ce:75:f0:fa:7c:03:67:a5:c3:b3:79:c9:1c:b6:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:DB:C0:10:D1:CF:40:46:23:47:E6:14:95:49:C6:5D:4A:BF:B8
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/naTbwBDRz0BGI0fmFJVJxl1Kv7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.186.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:8d:e3:43:7b:98:9a:55:3c:26:3d:56:85:93:c0:3f:a9:c0:
16:3f:c4:6e:97:00:0c:2e:98:4d:15:08:ba:e2:62:99:9d:e0:
65:3f:46:14:d9:18:57:a5:32:6f:95:c6:3a:69:93:92:95:2f:
61:fc:74:a3:3c:d7:60:40:83:67:e8:a3:6c:6e:64:30:78:d7:
53:56:5e:2f:c2:e4:8a:df:53:10:18:41:a4:73:9d:e9:c0:ab:
2a:56:f7:55:52:25:e1:fc:0c:df:b1:58:0d:93:a2:19:61:dc:
f3:a1:23:c2:71:b6:ca:a4:36:3c:78:03:e8:ee:ab:3c:ae:be:
5f:be:20:c7:65:29:ad:e4:cb:25:e1:9e:d2:e7:c6:dc:4b:e9:
a2:13:db:ae:d3:d2:c2:6f:ab:cc:3e:7e:e4:03:9e:2e:c8:60:
2d:9f:e0:38:7f:95:8d:08:4e:e7:60:1a:45:4b:12:6c:55:42:
11:0e:06:ce:e2:55:e6:5d:d4:19:51:7a:a8:ba:f6:5f:ee:09:
ed:5a:db:f9:f3:a9:8b:ff:5a:8b:2b:f2:9f:cd:1e:e4:37:9e:
bc:e7:ec:0e:e9:65:7b:37:0a:0a:1d:05:8f:c8:d7:11:e0:71:
1d:fb:ac:30:e7:0b:10:4e:1c:d9:45:f0:4d:54:a3:39:86:fc:
28:7d:bb:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaONbsqdKaJfgAlPow9hLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGE0ZGJjMDEwZDFjZjQwNDYyMzQ3ZTYxNDk1NDljNjVkNGFiZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nFyE++O1UNe5NlfxR8GI3/5eqLX
JXsuc3Q7/7/c+MJFI6I0M0aDDMoaraJZzJsv+RCDoik4ueGVSPYUNGfeJ478rgPb
Pb7qvrEM0OKE0dE1D9y75R9gVo/2u5Us9L6PvIxDLNMDyXUMCm1WZCv/0keOeGHu
rhYUrTkz9IVPMv+JLosCx9DJblsvMtGsl091aZcNGzYbEiWxOKpr2bnkraLQovhn
Nak+HRGVgoj5srjTgtojc96s2ArbnY6gOVc7rHVELXkE0iWW+cI+dPkPLBd1iKlC
3Va07gzp7DqpNh9Dk/epp9ytWQNqmfopcyGVznXw+nwDZ6XDs3nJHLYYmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2k28AQ0c9ARiNH5hSVScZdSr+4MB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvbmFUYndCRFJ6MEJHSTBmbUZKVkp4bDFLdjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwXy6MA0G
CSqGSIb3DQEBCwUAA4IBAQCjjeNDe5iaVTwmPVaFk8A/qcAWP8RulwAMLphNFQi6
4mKZneBlP0YU2RhXpTJvlcY6aZOSlS9h/HSjPNdgQINn6KNsbmQweNdTVl4vwuSK
31MQGEGkc53pwKsqVvdVUiXh/AzfsVgNk6IZYdzzoSPCcbbKpDY8eAPo7qs8rr5f
viDHZSmt5Msl4Z7S58bcS+miE9uu09LCb6vMPn7kA54uyGAtn+A4f5WNCE7nYBpF
SxJsVUIRDgbO4lXmXdQZUXqouvZf7gntWtv586mL/1qLK/KfzR7kN5685+wO6WV7
NwoKHQWPyNcR4HEd+6ww5wsQThzZRfBNVKM5hvwofbvW
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client