Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa
File: NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa (raw, json)
Hash identifier: yCrErrFnv++SOw7EizZUOX9PNdlIeawFAL8bS5PpO8M=
Subject key identifier: 35:38:DA:2A:50:B1:64:FF:F6:BC:C4:74:22:0B:3A:05:13:CB:30:18
Certificate issuer: /CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Certificate serial: 019F236876D9FEA62B02DCED21633E1C24F7
Authority key identifier: 3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.233.61.0/24 maxlen: 24
185.179.176.0/24 maxlen: 24
213.5.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:d9:fe:a6:2b:02:dc:ed:21:63:3e:1c:24:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3538da2a50b164fff6bcc474220b3a0513cb3018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:9b:b4:3d:b1:ac:be:9a:10:ce:37:a4:01:
44:eb:9f:77:45:2c:8a:93:4c:61:72:95:4e:c7:c1:
6f:98:27:c1:d7:70:0a:81:41:aa:a5:1b:d2:a4:16:
aa:1c:57:ab:92:7a:dd:c6:51:f5:3c:52:f2:70:0b:
5d:05:6d:d0:35:19:e2:5e:0a:ad:d9:c5:19:9d:12:
e3:ef:b8:b5:b3:75:d9:c9:2c:4b:0b:b9:82:be:83:
7f:1f:7d:86:c9:fc:14:d4:c2:6c:cb:b0:cf:fb:bb:
bf:97:e1:0f:5e:8b:7b:05:f2:b7:94:f2:2f:0a:76:
cb:58:9f:4c:4e:55:35:05:79:08:9f:7a:4b:10:1f:
86:8a:b1:b9:8a:ea:d6:0b:03:a3:75:fa:a7:a7:bf:
d7:f3:1d:95:06:6a:6f:38:7c:85:9f:49:e9:ac:de:
b7:ec:20:ca:bd:11:bc:8e:98:da:85:89:3a:74:f0:
99:55:7e:85:90:ff:93:67:70:04:a0:46:fa:6c:42:
0b:66:13:06:38:0d:6a:13:e4:71:8c:38:12:1f:21:
4e:43:0f:72:12:25:d9:87:f2:ab:8a:5a:9c:09:a1:
5e:a4:6d:59:58:6f:9a:b9:a1:07:f0:e2:7c:63:3d:
54:8f:02:d5:ee:7f:91:d9:ff:05:f7:f3:3d:58:50:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:DA:2A:50:B1:64:FF:F6:BC:C4:74:22:0B:3A:05:13:CB:30:18
X509v3 Authority Key Identifier:
keyid:3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.61.0/24
185.179.176.0/24
213.5.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9e:72:cd:6a:cf:2c:7c:e1:ef:e0:c9:91:e3:77:f2:27:55:
c5:00:93:33:5a:47:66:53:ab:78:8e:cb:9f:90:42:a5:ba:03:
00:c6:bf:22:15:65:b1:ee:cb:2e:2b:28:ae:d2:ca:c9:e3:1a:
7f:e9:77:5d:0a:ad:aa:46:d3:79:42:f2:78:5d:d0:ba:fc:ea:
59:e1:54:d7:bd:69:f3:9d:41:f4:fc:5d:87:15:42:78:77:4c:
42:cd:e8:4e:11:a0:4b:e1:b7:bd:00:18:3a:68:24:25:cb:3d:
6c:c7:64:9b:b1:64:8e:1d:15:76:de:6b:a4:20:14:13:85:20:
fe:8c:20:5e:06:9e:03:8d:27:55:4a:33:cb:6a:c7:8b:f0:e6:
d4:bf:f2:f4:d1:93:43:b9:28:f3:6d:cc:71:ab:73:4f:65:4e:
61:46:f0:25:3e:90:b4:16:f0:58:1f:76:24:3d:26:42:99:5d:
c8:65:4e:d9:8a:86:79:0c:07:99:e1:95:73:28:ed:6e:5d:ec:
a6:4b:da:ea:c4:31:45:10:01:89:6b:08:7a:6c:46:fd:41:47:
69:11:ab:28:b4:1d:ae:82:76:2f:46:08:26:4f:3e:d2:95:5c:
9c:2b:c6:58:ee:30:56:73:d3:4f:36:23:4e:a8:23:9c:a1:7c:
85:63:bb:21
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaHbZ/qYrAtztIWM+HCT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTE2YzAzOGYxOGFlM2E2MzVmNzBiYjVmNTcyOTFkMTlj
MmZkNjgwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM4ZGEyYTUwYjE2NGZmZjZiY2M0NzQyMjBiM2EwNTEzY2IzMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobObtD2xrL6aEM43pAFE6593RSyK
k0xhcpVOx8FvmCfB13AKgUGqpRvSpBaqHFerknrdxlH1PFLycAtdBW3QNRniXgqt
2cUZnRLj77i1s3XZySxLC7mCvoN/H32GyfwU1MJsy7DP+7u/l+EPXot7BfK3lPIv
CnbLWJ9MTlU1BXkIn3pLEB+GirG5iurWCwOjdfqnp7/X8x2VBmpvOHyFn0nprN63
7CDKvRG8jpjahYk6dPCZVX6FkP+TZ3AEoEb6bEILZhMGOA1qE+RxjDgSHyFOQw9y
EiXZh/KrilqcCaFepG1ZWG+auaEH8OJ8Yz1UjwLV7n+R2f8F9/M9WFCkcwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDU42ipQsWT/9rzEdCILOgUTyzAYMB8GA1UdIwQY
MBaAFDzhbAOPGK46Y19wu19XKR0Zwv1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt
MjQ1MTVhMTRjNDU2LzEvTlRqYUtsQ3haUF8ydk1SMElnczZCUlBMTUJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2
LzEvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+k9AwQA
ubOwAwQA1QXiMA0GCSqGSIb3DQEBCwUAA4IBAQBcnnLNas8sfOHv4MmR43fyJ1XF
AJMzWkdmU6t4jsufkEKlugMAxr8iFWWx7ssuKyiu0srJ4xp/6XddCq2qRtN5QvJ4
XdC6/OpZ4VTXvWnznUH0/F2HFUJ4d0xCzehOEaBL4be9ABg6aCQlyz1sx2SbsWSO
HRV23mukIBQThSD+jCBeBp4DjSdVSjPLaseL8ObUv/L00ZNDuSjzbcxxq3NPZU5h
RvAlPpC0FvBYH3YkPSZCmV3IZU7ZioZ5DAeZ4ZVzKO1uXeymS9rqxDFFEAGJawh6
bEb9QUdpEasotB2ugnYvRggmTz7SlVycK8ZY7jBWc9NPNiNOqCOcoXyFY7sh
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:13 2026 by rpki-client