Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Nvc-QrPDzmXyxPAU5dscWo_ymGo.roa
File: Nvc-QrPDzmXyxPAU5dscWo_ymGo.roa (raw, json)
Hash identifier: AQDKNlK/bIbPWHOUCBJl/0ALc5UaKj1NOkWDe3MnyS0=
Subject key identifier: 36:F7:3E:42:B3:C3:CE:65:F2:C4:F0:14:E5:DB:1C:5A:8F:F2:98:6A
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A1716F1E453A4213AB98156CF418908108
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Nvc-QrPDzmXyxPAU5dscWo_ymGo.roa
Signing time: Sun 25 Oct 2026 05:01:09 +0000
ROA not before: Sun 25 Oct 2026 05:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 94.184.27.0/24 maxlen: 24
94.184.28.0/24 maxlen: 24
94.184.32.0/24 maxlen: 24
94.184.36.0/24 maxlen: 24
94.184.41.0/24 maxlen: 24
94.184.43.0/24 maxlen: 24
94.184.45.0/24 maxlen: 24
94.184.46.0/24 maxlen: 24
94.184.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:6f:1e:45:3a:42:13:ab:98:15:6c:f4:18:90:81:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 25 05:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f73e42b3c3ce65f2c4f014e5db1c5a8ff2986a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:21:f7:bf:67:e0:d8:0c:c3:08:53:b7:e9:
2a:e8:a7:ab:9e:9f:fd:e9:df:38:42:c9:ed:59:6e:
4a:e7:03:52:71:88:3d:80:b0:94:6a:d8:34:c1:ea:
59:07:5c:dd:fc:58:f9:34:13:45:2c:ee:2a:d8:21:
3c:df:1a:1d:b5:66:de:18:87:ca:a3:65:79:c8:9c:
a0:21:ae:27:69:19:12:bb:c3:be:d6:1c:d0:dc:29:
38:c1:d6:53:c0:6b:30:4c:9c:66:4a:fa:aa:b0:7e:
39:24:b2:7e:d2:2f:23:dd:4a:6c:1c:5f:27:9a:e9:
0f:f3:d7:bf:fd:4c:43:1a:cd:63:df:49:bc:2b:58:
4c:50:a4:35:6a:99:63:c9:9c:3a:1e:fc:2f:fd:f8:
73:92:1a:b2:c8:e4:e3:1a:e5:ea:50:5a:41:bc:ef:
48:de:26:ef:12:6c:e5:97:9d:6b:c5:2b:dd:de:65:
70:6b:58:12:99:32:76:f4:c2:54:42:b8:65:56:f5:
18:56:01:72:51:79:4a:39:a5:ca:73:da:02:a5:1d:
45:93:f7:d0:07:79:2e:76:53:04:4f:0f:54:2a:5a:
94:cf:bc:53:9b:10:c3:4f:5b:75:4f:9e:69:16:b0:
9a:ca:5c:2e:bc:fa:8d:e1:89:93:47:be:16:5c:f3:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:3E:42:B3:C3:CE:65:F2:C4:F0:14:E5:DB:1C:5A:8F:F2:98:6A
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Nvc-QrPDzmXyxPAU5dscWo_ymGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.27.0-94.184.28.255
94.184.32.0/24
94.184.36.0/24
94.184.41.0/24
94.184.43.0/24
94.184.45.0-94.184.47.255
Signature Algorithm: sha256WithRSAEncryption
54:18:3a:04:67:5f:c8:fb:dc:ae:ab:45:d2:55:32:d5:5e:fd:
64:af:bd:b3:e0:9c:ef:84:ce:b6:b6:b8:bb:85:72:32:72:b0:
ee:76:ec:57:26:5b:a7:67:2c:24:7c:91:59:e3:4e:43:c8:34:
71:7b:e8:90:e7:7b:59:63:c7:69:e3:d2:81:2c:48:33:68:57:
cd:69:e4:f7:53:3a:91:a3:7f:99:a0:a5:79:73:52:a4:7a:1f:
ec:9c:44:82:c2:9e:54:5c:f3:af:3c:35:73:c2:64:3c:9e:f7:
d1:65:55:5b:07:04:9f:6c:14:f8:96:af:cb:7e:3f:b3:86:11:
ca:79:8e:15:9d:77:ae:85:f7:37:23:27:95:67:05:38:94:74:
90:46:66:b2:6f:dc:5b:e7:57:a7:12:6c:8a:de:ef:a4:f7:ba:
e8:4b:be:94:3a:53:40:4c:ed:24:f7:17:6c:7c:19:52:23:07:
7e:6d:e9:79:48:5d:43:d1:3f:d1:6e:f4:27:93:ec:da:d4:bc:
ef:dc:0d:cd:d5:eb:40:a8:12:23:4b:3f:b8:b6:ce:ca:30:26:
31:5a:9a:d5:0a:ac:76:ec:d1:95:4d:79:b1:aa:3b:c8:98:1a:
d3:70:5f:2b:22:fe:5e:fb:a8:2d:bb:8a:83:2e:3b:4f:c1:62:
a3:01:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:42 2026 by rpki-client