Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Nb0hiLMlp_uv9xtpI5zzTCNtWtA.roa
File: Nb0hiLMlp_uv9xtpI5zzTCNtWtA.roa (raw, json)
Hash identifier: 4FylOItQIeX0sOOT1HtLg+jh2x7M8omtv6kAkN8WuI4=
Subject key identifier: 35:BD:21:88:B3:25:A7:FB:AF:F7:1B:69:23:9C:F3:4C:23:6D:5A:D0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019DB6CFD65F25C78B4E751CE8B4F993AEC3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Nb0hiLMlp_uv9xtpI5zzTCNtWtA.roa
Signing time: Wed 22 Apr 2026 20:09:27 +0000
ROA not before: Wed 22 Apr 2026 20:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 5.180.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:cf:d6:5f:25:c7:8b:4e:75:1c:e8:b4:f9:93:ae:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 22 20:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35bd2188b325a7fbaff71b69239cf34c236d5ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:5e:e5:a3:c9:aa:22:5d:fc:61:de:53:34:
c1:5f:ec:4b:5a:9a:10:f8:e2:4e:3e:83:59:c3:22:
73:e2:90:d4:82:9e:0c:ee:ce:4b:ae:8c:8d:14:57:
e0:d3:17:f1:de:f2:98:0e:64:84:ec:ad:0c:8a:5a:
3f:a6:c0:e0:2b:58:39:2f:c8:79:4d:6b:c3:dc:73:
d5:90:b2:62:20:ef:c6:6d:71:ee:07:79:bd:20:85:
cc:05:15:c7:ca:55:ef:58:36:58:b8:66:3e:7f:67:
cd:81:31:e8:af:70:49:8b:d7:99:d1:8b:24:d0:ca:
ab:2a:e0:68:cb:ca:4c:73:91:b9:e9:75:47:61:c8:
d1:5f:eb:30:db:fb:12:a0:d6:b7:59:59:cb:54:9e:
e9:21:92:37:01:6f:38:cd:0e:68:af:17:7e:a3:91:
fb:1c:f2:43:fa:22:50:a2:75:c2:a8:ff:f3:b7:d4:
f5:5c:97:36:a4:f5:d3:5d:f6:34:79:1a:94:5b:11:
d4:f4:de:da:94:28:5b:93:68:ad:13:f3:ec:87:63:
a2:a6:3c:01:e5:61:78:9e:bb:52:8f:36:c0:c7:f7:
ad:c0:43:03:e7:c0:51:62:ee:89:b9:33:8a:8b:6b:
01:b0:0f:2b:61:b6:86:80:23:a2:73:9a:c0:04:07:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:21:88:B3:25:A7:FB:AF:F7:1B:69:23:9C:F3:4C:23:6D:5A:D0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Nb0hiLMlp_uv9xtpI5zzTCNtWtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fe:53:ef:56:8c:98:5f:4c:d7:3b:5a:be:41:5e:6b:3c:5a:
63:58:53:81:f2:6b:86:88:97:b7:6b:2c:8b:ab:20:4e:bc:18:
85:b2:aa:c4:8e:b5:f2:2a:0b:61:12:10:30:d1:a7:22:58:0e:
32:a2:77:c6:d2:a9:1d:93:1f:91:2d:c2:64:10:b1:bb:3f:fe:
05:6c:c5:d2:bc:54:2c:3a:93:92:a3:7c:28:1c:26:94:aa:ff:
97:73:16:9f:d0:ff:ea:7f:05:4b:50:95:85:83:ca:df:99:3d:
26:4e:5e:9f:6b:84:5a:fb:1f:59:5e:40:f2:2e:90:18:57:5b:
70:e7:01:46:ae:7f:2e:46:f7:5f:15:9c:71:d4:a1:5a:52:44:
33:3a:a8:dd:fe:40:a6:c5:07:60:80:35:03:6a:66:54:30:0b:
99:09:82:04:98:84:e2:e8:22:db:5f:a9:da:bc:2e:88:b8:a8:
9c:bb:fb:e9:26:d5:a5:8e:d5:a5:8f:9e:e9:7f:67:fa:c9:fa:
bb:0c:f2:86:a7:62:02:64:67:9a:43:38:b3:ab:fa:dd:b0:4d:
78:8c:a9:d2:3e:7c:23:94:b4:93:f9:e1:a0:1c:00:97:62:e4:
f9:6a:08:7b:b4:7d:f4:e2:b6:69:7c:cf:dc:28:e0:b2:f1:c5:
d6:a0:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:22 2026 by rpki-client