Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa
File: NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa (raw, json)
Hash identifier: YfrSwZsx1POCSy8VLN9vekskBNjs6p4NHoLWulpvdx4=
Subject key identifier: 37:05:31:66:74:7A:8A:5A:85:F4:27:D0:74:6E:AB:33:3B:0F:AB:1E
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 019E69AC1AD096B1B16B659DF1902E60B125
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa
Signing time: Wed 27 May 2026 13:42:27 +0000
ROA not before: Wed 27 May 2026 13:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.144.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:ac:1a:d0:96:b1:b1:6b:65:9d:f1:90:2e:60:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: May 27 13:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37053166747a8a5a85f427d0746eab333b0fab1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:7d:3a:bb:80:f6:11:89:d0:8c:ca:e6:04:
ae:a6:88:40:fb:7d:0a:37:07:c9:27:20:ef:82:31:
e4:af:df:3c:a8:d3:74:cf:e4:14:18:dc:be:0a:c6:
10:5f:e2:3d:9f:93:a4:1a:0e:85:eb:5f:a3:e9:c6:
2e:ee:6e:7d:40:f9:90:70:20:ba:6f:7f:1a:3c:5f:
d9:02:1a:57:fe:f5:6c:00:3c:40:70:d7:bc:53:25:
10:ad:c4:44:7e:77:31:4c:7e:cb:d8:34:02:53:55:
24:7e:d7:fd:86:02:2f:21:ba:33:d2:0f:bf:d9:af:
71:d0:28:b6:dd:01:d9:92:e4:56:3c:9d:1b:60:47:
2c:cb:ce:8f:1e:a5:83:02:00:f0:9d:d6:5b:29:ed:
a6:58:08:ba:db:10:5e:bb:16:4a:b6:d8:11:a4:be:
b6:ff:93:b7:de:d7:34:fe:27:87:cb:9f:44:43:a8:
4a:f8:f4:79:03:2a:0b:97:a6:57:38:f7:d7:51:0b:
f3:b5:34:aa:8b:23:c0:bd:57:67:72:ae:94:ad:34:
1c:3c:04:99:09:aa:9b:67:ca:89:6b:14:b1:a9:6d:
b9:eb:3b:e1:99:d0:81:7b:3d:c8:75:4a:57:e4:9b:
3d:c9:4b:57:fe:9e:94:30:3a:3b:78:2c:ec:fa:22:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:31:66:74:7A:8A:5A:85:F4:27:D0:74:6E:AB:33:3B:0F:AB:1E
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:22:27:a6:55:1d:65:0d:23:9d:ba:0a:c1:67:23:b2:13:b1:
98:f7:fe:e5:a3:81:8f:26:3b:1c:98:1a:d8:12:63:f6:0c:96:
e3:44:e2:d0:0c:06:64:fa:f5:f5:8b:ad:5a:2a:ce:7a:62:65:
58:37:e2:83:cd:a6:8d:b1:93:23:f5:79:03:42:1e:a4:ac:bc:
c1:b1:4b:bd:cf:60:fa:8e:08:30:9c:dc:b4:cf:3a:ac:e3:d9:
1f:60:0c:cc:c2:83:d2:db:92:ff:c3:6f:cc:51:c6:e3:d9:9a:
b0:17:ea:31:d2:40:e0:00:b0:8e:b0:3d:f3:05:12:d3:53:96:
34:72:3e:2f:44:b7:0d:02:8a:e8:87:0b:72:2d:18:a0:d5:f2:
ea:1d:27:eb:97:37:1e:40:19:b9:17:37:96:c6:57:8b:51:9d:
e9:77:4e:e0:d4:4c:1a:1b:c0:18:05:46:42:d1:47:c0:c4:d9:
7a:cb:7b:ab:9c:dd:1f:ac:70:1d:80:89:dd:0e:1a:97:91:c9:
b1:0a:77:c3:b2:49:fc:3f:85:f3:03:7e:7b:09:b3:df:37:c1:
19:f8:f3:e7:ce:ff:09:b5:28:12:ee:2a:c4:3e:5d:22:91:e6:
12:14:2b:a8:21:dd:eb:84:2c:7e:62:8f:11:bf:11:5c:0d:a8:
2a:4a:f7:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5prBrQlrGxa2Wd8ZAuYLElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OGJhNWQ5OGQ0OGNlYmQ1YWQwNGMwOGJmMDkwODJiMTJh
N2UzYWIwHhcNMjYwNTI3MTM0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzA1MzE2Njc0N2E4YTVhODVmNDI3ZDA3NDZlYWIzMzNiMGZhYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuV9OruA9hGJ0IzK5gSupohA+30K
NwfJJyDvgjHkr988qNN0z+QUGNy+CsYQX+I9n5OkGg6F61+j6cYu7m59QPmQcCC6
b38aPF/ZAhpX/vVsADxAcNe8UyUQrcREfncxTH7L2DQCU1Ukftf9hgIvIboz0g+/
2a9x0Ci23QHZkuRWPJ0bYEcsy86PHqWDAgDwndZbKe2mWAi62xBeuxZKttgRpL62
/5O33tc0/ieHy59EQ6hK+PR5AyoLl6ZXOPfXUQvztTSqiyPAvVdncq6UrTQcPASZ
CaqbZ8qJaxSxqW256zvhmdCBez3IdUpX5Js9yUtX/p6UMDo7eCzs+iIF/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcFMWZ0eopahfQn0HRuqzM7D6seMB8GA1UdIwQY
MBaAFOeLpdmNSM69WtBMCL8JCCsSp+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNTIyOTMtMDY3OC00YjQyLThhZTAt
NDg5MTY1M2VlYjY3LzEvTndVeFpuUjZpbHFGOUNmUWRHNnJNenNQcXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNTIyOTMtMDY3OC00YjQyLThhZTAtNDg5MTY1M2VlYjY3
LzEvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5AFMA0G
CSqGSIb3DQEBCwUAA4IBAQBsIiemVR1lDSOdugrBZyOyE7GY9/7lo4GPJjscmBrY
EmP2DJbjROLQDAZk+vX1i61aKs56YmVYN+KDzaaNsZMj9XkDQh6krLzBsUu9z2D6
jggwnNy0zzqs49kfYAzMwoPS25L/w2/MUcbj2ZqwF+ox0kDgALCOsD3zBRLTU5Y0
cj4vRLcNAorohwtyLRig1fLqHSfrlzceQBm5FzeWxleLUZ3pd07g1EwaG8AYBUZC
0UfAxNl6y3urnN0frHAdgIndDhqXkcmxCnfDskn8P4XzA357CbPfN8EZ+PPnzv8J
tSgS7irEPl0ikeYSFCuoId3rhCx+Yo8RvxFcDagqSvef
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:03 2026 by rpki-client