Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/nRBo528tP43KmAQk4RnVYbDzWU0.roa
File: nRBo528tP43KmAQk4RnVYbDzWU0.roa (raw, json)
Hash identifier: ERhWqSONU8VMSUZjvA4OcBhlxRgbgXHAnBJ/a2qEElc=
Subject key identifier: 9D:10:68:E7:6F:2D:3F:8D:CA:98:04:24:E1:19:D5:61:B0:F3:59:4D
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 019EF73AA2970CDCD07EDF25AD743E4A08AA
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/nRBo528tP43KmAQk4RnVYbDzWU0.roa
Signing time: Wed 24 Jun 2026 01:24:35 +0000
ROA not before: Wed 24 Jun 2026 01:24:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142002
IP address blocks: 134.168.224.0/21 maxlen: 24
134.168.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 16:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:3a:a2:97:0c:dc:d0:7e:df:25:ad:74:3e:4a:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Jun 24 01:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d1068e76f2d3f8dca980424e119d561b0f3594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:93:d2:6e:8d:6c:91:95:a9:a1:89:06:24:
4c:a5:7a:4d:b8:74:6b:e3:ba:20:57:4b:2b:e5:79:
75:eb:12:44:b4:92:11:04:d2:a8:80:81:90:72:42:
51:84:77:70:41:6f:71:0d:19:30:71:e5:35:78:d5:
d8:58:6f:ac:39:51:81:82:89:2c:f7:3e:ca:bf:34:
23:ef:f5:34:5e:0d:a3:b0:c8:68:42:1e:c3:93:04:
25:62:1f:d6:40:23:83:ba:84:84:6b:5d:cf:43:cd:
21:a4:9d:67:47:ba:15:4e:4f:c9:cb:26:25:10:d2:
dc:48:6a:07:c4:a7:2a:ac:9a:e5:66:65:08:a6:45:
7e:ed:dc:4f:09:7f:8f:ce:87:58:b0:17:62:ee:25:
0c:01:44:b9:6c:a8:77:ae:8b:5a:c8:68:82:56:df:
6c:46:eb:ca:1a:bf:22:b8:bf:7f:58:69:59:72:8d:
13:d7:2a:86:c1:d3:44:8f:e5:fc:5b:fd:c7:c7:fd:
a0:5f:77:11:b5:7b:eb:f8:43:da:42:10:1e:0d:c9:
8e:d4:2b:99:2b:30:74:d1:a1:bb:90:2e:18:84:27:
74:8d:77:ae:af:26:05:81:91:da:c8:d3:b8:ba:bc:
c3:25:3d:5f:bb:39:9a:dc:7b:9b:f3:56:83:64:d7:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:68:E7:6F:2D:3F:8D:CA:98:04:24:E1:19:D5:61:B0:F3:59:4D
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/nRBo528tP43KmAQk4RnVYbDzWU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.224.0/21
134.168.240.0/20
Signature Algorithm: sha256WithRSAEncryption
00:42:66:bd:30:8b:df:ca:51:b8:28:db:6a:e6:01:81:71:ab:
78:d5:2b:af:c5:0c:60:9d:3f:af:66:e9:39:67:80:ee:1f:78:
9a:78:ec:58:ff:da:a1:16:88:e3:4e:ad:ee:6b:9d:a9:dd:c6:
14:79:fa:68:7a:5c:cc:5a:58:8e:59:2d:fa:91:ae:a4:c8:13:
71:ec:8f:40:77:e8:ab:3d:0a:87:da:5d:a1:95:fb:07:80:ce:
7d:e3:b7:f9:0a:44:03:ed:11:b5:99:42:25:21:3d:05:ff:ae:
eb:1d:41:5d:5f:3f:10:92:e4:cb:f6:62:0d:af:a3:cd:2d:25:
db:c0:84:c0:79:49:63:35:c0:b9:36:92:15:9d:ce:a6:34:23:
ed:56:f2:21:7f:10:4e:ad:0e:86:62:74:ae:08:58:a2:6a:cc:
c6:68:38:0b:2a:b2:03:77:87:59:7d:17:57:12:4e:68:11:97:
7d:22:44:4c:6c:be:5f:4b:62:3b:b7:cc:d1:90:82:f5:3d:ee:
c6:b5:f2:8f:ef:a8:56:6a:47:24:34:8f:fa:08:34:74:5d:73:
5c:f9:82:f0:e0:30:fa:6c:2b:d8:5f:ce:dd:84:28:83:6b:9b:
d3:d0:b2:0e:76:27:e7:b4:74:66:2b:dc:f5:61:07:3d:ac:d3:
18:e6:d5:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ73OqKXDNzQft8lrXQ+SgiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDYwNDQ5NjZjNTc0MzlhYWY1MjAzMTA4ODVmODFkNDUy
NzViMmEwHhcNMjYwNjI0MDEyNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDEwNjhlNzZmMmQzZjhkY2E5ODA0MjRlMTE5ZDU2MWIwZjM1OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2CT0m6NbJGVqaGJBiRMpXpNuHRr
47ogV0sr5Xl16xJEtJIRBNKogIGQckJRhHdwQW9xDRkwceU1eNXYWG+sOVGBgoks
9z7KvzQj7/U0Xg2jsMhoQh7DkwQlYh/WQCODuoSEa13PQ80hpJ1nR7oVTk/JyyYl
ENLcSGoHxKcqrJrlZmUIpkV+7dxPCX+PzodYsBdi7iUMAUS5bKh3rotayGiCVt9s
RuvKGr8iuL9/WGlZco0T1yqGwdNEj+X8W/3Hx/2gX3cRtXvr+EPaQhAeDcmO1CuZ
KzB00aG7kC4YhCd0jXeuryYFgZHayNO4urzDJT1fuzma3Hub81aDZNfIUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ0QaOdvLT+NypgEJOEZ1WGw81lNMB8GA1UdIwQY
MBaAFDbWBElmxXQ5qvUgMQiF+B1FJ1sqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUt
YTFkNjA1NDM1MGQyLzEvblJCbzUyOHRQNDNLbUFRazRSblZZYkR6V1UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUtYTFkNjA1NDM1MGQy
LzEvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDhqjgAwQE
hqjwMA0GCSqGSIb3DQEBCwUAA4IBAQAAQma9MIvfylG4KNtq5gGBcat41SuvxQxg
nT+vZuk5Z4DuH3iaeOxY/9qhFojjTq3ua52p3cYUefpoelzMWliOWS36ka6kyBNx
7I9Ad+irPQqH2l2hlfsHgM5947f5CkQD7RG1mUIlIT0F/67rHUFdXz8QkuTL9mIN
r6PNLSXbwITAeUljNcC5NpIVnc6mNCPtVvIhfxBOrQ6GYnSuCFiiaszGaDgLKrID
d4dZfRdXEk5oEZd9IkRMbL5fS2I7t8zRkIL1Pe7GtfKP76hWakckNI/6CDR0XXNc
+YLw4DD6bCvYX87dhCiDa5vT0LIOdifntHRmK9z1YQc9rNMY5tUa
-----END CERTIFICATE-----
Generated at Fri Jul 17 00:56:37 2026 by rpki-client