Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa
File: NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa (raw, json)
Hash identifier: 9SKp96P9zUqo/VKiBAf/OZS4gFdHPgagZHjvDhYmLNs=
Subject key identifier: 37:0C:5E:79:0E:AF:58:B3:6F:EB:FE:7A:59:E7:A4:5A:79:C8:B3:D4
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 01A05786E194F5C17139CA4EE14BD4A7C67F
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa
Signing time: Mon 31 Aug 2026 11:14:12 +0000
ROA not before: Mon 31 Aug 2026 11:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61021
IP address blocks: 185.15.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:86:e1:94:f5:c1:71:39:ca:4e:e1:4b:d4:a7:c6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Aug 31 11:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=370c5e790eaf58b36febfe7a59e7a45a79c8b3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:64:d4:5f:d4:f3:9e:bd:f2:66:00:df:91:
d1:5e:c8:04:8c:14:07:bd:ed:be:e7:6f:d1:da:28:
64:ab:b7:82:6b:24:7b:d5:7b:24:55:b6:6a:13:7a:
67:0a:b5:b8:63:56:03:7a:7e:df:da:ba:f0:ae:90:
fe:80:d9:3b:a6:8c:c2:6b:03:29:ef:65:ed:c7:3d:
5f:0b:59:d3:79:a1:db:e3:4e:cd:05:41:5e:45:fa:
b8:13:2f:7c:ff:29:e1:b9:28:47:66:f5:50:b2:fa:
b3:3b:8c:12:11:57:bb:c2:a7:b0:5c:a9:c1:f9:0e:
47:41:c1:8c:ea:50:28:bb:0b:93:74:d7:94:3d:c5:
b3:0d:f0:76:a6:7d:c8:02:6d:70:7a:3f:97:33:4b:
55:15:d2:df:6c:5c:7c:f1:d5:88:72:50:c7:a4:24:
dc:25:a0:0e:c5:15:44:3b:f6:75:a6:db:f6:f7:76:
17:ae:a7:13:42:f2:7d:91:9d:67:a5:29:5d:43:f9:
96:6d:dc:1b:1a:2a:85:66:43:81:c0:2f:fc:90:a9:
4b:b2:03:65:89:3a:82:cf:c4:88:e3:c8:ed:9b:fb:
23:de:8c:c9:14:e1:fe:c9:3b:0c:a5:f6:62:bd:b4:
79:c3:af:dd:da:ac:dd:eb:4e:bb:45:9e:4e:9b:15:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:5E:79:0E:AF:58:B3:6F:EB:FE:7A:59:E7:A4:5A:79:C8:B3:D4
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.188.0/22
Signature Algorithm: sha256WithRSAEncryption
72:83:19:c5:04:08:f2:be:be:ac:44:73:e5:9f:fb:e4:90:f4:
d5:ed:e1:ec:35:a9:a9:3e:5e:0d:e8:2a:f3:a4:4a:4f:94:d0:
38:6b:eb:18:f6:53:c0:60:3e:d1:2c:f5:b9:0b:74:1b:71:3b:
e1:1e:8b:dd:10:ef:54:05:14:75:5d:de:e9:37:28:cc:89:9a:
b5:a5:83:6e:a5:d3:5f:5d:af:d3:b0:74:10:ed:99:4c:17:77:
75:14:88:90:ef:37:d7:f4:4a:3b:06:b4:46:74:65:b7:f5:ff:
96:f8:2f:d0:90:3a:24:b6:07:c5:5c:ed:f6:45:7c:2f:ef:11:
e1:6f:d0:29:b3:40:a0:44:ba:1b:be:a7:1c:40:b9:a4:31:a2:
fa:12:a0:c6:2e:f4:4b:d1:bc:f6:bb:d1:40:67:9e:da:c3:b8:
fa:c3:19:cd:49:1d:85:f4:8e:e9:d8:dc:f3:84:28:f4:87:8d:
bc:32:c5:eb:ca:cd:95:20:91:e6:db:9c:df:38:29:7c:ba:9f:
3c:d5:7e:a3:ee:8b:cc:cf:a2:a5:da:5f:ab:9f:04:ff:e4:e3:
bf:43:29:19:90:bd:4c:9e:e8:e4:58:fc:3b:d8:3f:98:95:f8:
11:8e:fd:6d:4b:10:ea:03:85:d9:cc:24:44:6d:92:1a:ac:26:
77:ef:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:37 2026 by rpki-client