Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Nv4VxMtDC1hP79hsbbbm9GKck4U.roa
File: Nv4VxMtDC1hP79hsbbbm9GKck4U.roa (raw, json)
Hash identifier: ljOhK674qCmXYB+uXJEFnP5DXPhaP4PgHD939/zzWH8=
Subject key identifier: 36:FE:15:C4:CB:43:0B:58:4F:EF:D8:6C:6D:B6:E6:F4:62:9C:93:85
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E4964B7EE32333EE6D75080ED0DF24E3A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Nv4VxMtDC1hP79hsbbbm9GKck4U.roa
Signing time: Thu 21 May 2026 07:16:37 +0000
ROA not before: Thu 21 May 2026 07:16:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 82.153.148.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:64:b7:ee:32:33:3e:e6:d7:50:80:ed:0d:f2:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 21 07:16:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36fe15c4cb430b584fefd86c6db6e6f4629c9385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:16:31:81:89:43:89:64:f9:9b:d7:4e:01:
e6:ac:cc:0f:09:74:4d:21:68:a6:ae:04:ec:c4:af:
f2:c2:d2:c5:6b:a6:72:79:33:8f:04:b1:a9:70:83:
9a:89:09:60:ae:33:18:d9:2a:6f:8b:44:3e:87:d5:
34:ed:71:34:a7:86:78:bc:54:d0:d7:db:e9:11:07:
0b:7f:20:66:e3:02:1d:e5:0a:7f:2f:c7:0d:fb:5f:
4b:81:a0:79:45:fd:28:55:2c:db:b8:92:3e:14:ee:
93:21:df:ec:72:02:91:33:1e:60:cd:74:84:cd:22:
01:e2:40:9b:24:20:5c:1f:1e:cc:03:b3:ab:5b:ff:
da:8f:0d:9a:12:30:8a:df:01:3f:d0:d4:24:c1:f1:
fb:d8:ae:b0:5a:2c:f2:96:f3:ab:48:29:0c:d7:e1:
e5:59:4f:22:c9:7e:74:3e:5d:5e:84:e3:00:d4:2b:
6d:97:42:32:da:55:d8:74:64:ee:8b:37:29:8e:2f:
9a:14:28:b1:6a:df:55:8d:10:46:9d:2f:1e:93:35:
f3:a5:a0:ed:ab:e9:96:15:9b:0b:a3:1f:a8:96:6b:
b2:a7:07:f0:4c:64:7e:02:9a:4a:e0:92:c3:9f:0c:
c0:b2:cd:a7:16:1f:9e:ef:e5:1a:d2:26:ea:d3:7e:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:15:C4:CB:43:0B:58:4F:EF:D8:6C:6D:B6:E6:F4:62:9C:93:85
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Nv4VxMtDC1hP79hsbbbm9GKck4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.148.0/24
89.213.63.0/24
109.176.208.0/24
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
13:12:41:7b:45:fc:a5:9a:18:a2:8c:78:99:16:93:12:dc:11:
73:f1:79:97:8f:33:96:c5:47:05:b7:7f:3a:9c:19:bf:b8:43:
51:15:b0:cb:ae:71:19:64:ee:77:25:c8:c6:15:92:f3:1a:e1:
f3:30:b2:b3:ec:87:b9:30:61:c4:fd:d7:94:ee:c5:39:3d:12:
09:ae:b0:9b:c8:7b:a9:0d:d6:f6:b1:d8:be:ea:45:20:0c:11:
3c:4f:37:1b:82:c0:75:a0:f5:c0:65:d1:36:a7:fb:22:5e:d6:
84:30:0d:7e:73:92:35:34:dc:d5:3d:42:c3:12:aa:9e:2d:02:
1a:16:59:01:ad:6f:91:f4:0e:c1:fd:48:3b:7f:c1:a0:92:92:
85:72:56:7d:8f:f0:f4:24:be:7c:ed:db:dd:cc:22:c2:cd:c9:
26:bf:a0:58:3e:09:ec:a9:4d:44:5e:63:ff:d8:c6:89:c1:1c:
50:7f:25:1b:2e:fe:f5:6d:23:5e:14:2f:b7:a4:75:85:98:0a:
ab:f6:7e:be:72:7d:b9:29:c6:57:26:5a:2b:86:a4:4e:ec:14:
d2:7e:7c:e5:81:3c:93:7e:ac:c6:2f:fd:88:dd:b7:0d:20:5c:
37:5b:30:c4:79:53:6a:8d:0a:a2:f0:11:bb:3e:0e:ca:2c:b7:
1c:30:2f:ee
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ5JZLfuMjM+5tdQgO0N8k46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNTIxMDcxNjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmZlMTVjNGNiNDMwYjU4NGZlZmQ4NmM2ZGI2ZTZmNDYyOWM5Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDwWMYGJQ4lk+ZvXTgHmrMwPCXRN
IWimrgTsxK/ywtLFa6ZyeTOPBLGpcIOaiQlgrjMY2Spvi0Q+h9U07XE0p4Z4vFTQ
19vpEQcLfyBm4wId5Qp/L8cN+19LgaB5Rf0oVSzbuJI+FO6TId/scgKRMx5gzXSE
zSIB4kCbJCBcHx7MA7OrW//ajw2aEjCK3wE/0NQkwfH72K6wWizylvOrSCkM1+Hl
WU8iyX50Pl1ehOMA1Cttl0Iy2lXYdGTuizcpji+aFCixat9VjRBGnS8ekzXzpaDt
q+mWFZsLox+olmuypwfwTGR+AppK4JLDnwzAss2nFh+e7+Ua0ibq035WPQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDb+FcTLQwtYT+/YbG225vRinJOFMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTnY0VnhNdERDMWhQNzloc2JiYm05R0tjazRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUpmUAwQA
WdU/AwQAbbDQAwQA1YKJMA0GCSqGSIb3DQEBCwUAA4IBAQATEkF7RfylmhiijHiZ
FpMS3BFz8XmXjzOWxUcFt386nBm/uENRFbDLrnEZZO53JcjGFZLzGuHzMLKz7Ie5
MGHE/deU7sU5PRIJrrCbyHupDdb2sdi+6kUgDBE8TzcbgsB1oPXAZdE2p/siXtaE
MA1+c5I1NNzVPULDEqqeLQIaFlkBrW+R9A7B/Ug7f8GgkpKFclZ9j/D0JL587dvd
zCLCzckmv6BYPgnsqU1EXmP/2MaJwRxQfyUbLv71bSNeFC+3pHWFmAqr9n6+cn25
KcZXJlorhqRO7BTSfnzlgTyTfqzGL/2I3bcNIFw3WzDEeVNqjQqi8BG7Pg7KLLcc
MC/u
-----END CERTIFICATE-----
Generated at Sun May 24 11:40:23 2026 by rpki-client