Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/np1AwUxPvhucFA_5STu-Nqef15g.roa
File: np1AwUxPvhucFA_5STu-Nqef15g.roa (raw, json)
Hash identifier: lu5ki9GWrBZ09x6/h+h/MxtHXPkxiJms4SyH/AC1+pc=
Subject key identifier: 9E:9D:40:C1:4C:4F:BE:1B:9C:14:0F:F9:49:3B:BE:36:A7:9F:D7:98
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F12C60B63B53917EA7F87879AD74A74E2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/np1AwUxPvhucFA_5STu-Nqef15g.roa
Signing time: Mon 29 Jun 2026 09:46:36 +0000
ROA not before: Mon 29 Jun 2026 09:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.27.0/24 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 05:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:c6:0b:63:b5:39:17:ea:7f:87:87:9a:d7:4a:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 29 09:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e9d40c14c4fbe1b9c140ff9493bbe36a79fd798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:46:76:32:8c:3d:77:41:79:1b:fa:e7:db:
0d:7e:dc:1b:98:69:b7:a4:cd:39:ce:b6:2b:c7:cf:
c1:5a:39:f2:2d:44:21:de:b1:75:c5:d3:df:75:a3:
3b:19:6e:2a:68:34:9e:3a:18:1b:a4:95:fd:74:e9:
d0:34:55:0f:62:4b:e7:85:18:7d:11:1f:0d:8c:35:
37:bb:8c:4f:17:df:ff:b3:ef:96:47:60:96:81:51:
55:2e:45:13:22:89:46:c4:db:e8:ee:38:c5:7c:0c:
13:cd:a1:c6:2e:00:e7:80:87:7c:7c:fa:44:03:88:
fd:b1:a1:05:b7:12:e8:62:a0:da:d1:8a:0f:85:ac:
1d:03:c1:18:4a:84:74:9d:81:c7:16:ef:bb:4f:da:
4b:45:bc:d6:e3:5c:20:69:9f:d8:45:bc:40:ab:11:
8b:ee:73:aa:cf:03:56:92:36:00:53:41:c6:d0:1f:
4f:59:29:c6:e0:0b:f1:f2:31:40:9f:b4:95:4d:79:
07:51:ac:26:0e:a5:55:b6:ae:b5:1a:50:66:3e:f4:
3d:ce:41:a2:f0:53:72:ac:f6:33:c7:9a:52:86:f6:
86:dc:b4:37:56:43:3b:26:3f:e1:11:ff:09:d8:a4:
8b:ae:34:06:5a:46:4b:16:6f:83:fb:bb:2e:b5:8e:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:40:C1:4C:4F:BE:1B:9C:14:0F:F9:49:3B:BE:36:A7:9F:D7:98
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/np1AwUxPvhucFA_5STu-Nqef15g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/23
5.180.27.0/24
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
5.180.145.0/24
5.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:38:8a:be:1e:ae:ad:c1:4c:c8:32:d4:ee:60:db:0a:81:61:
29:9a:65:aa:05:82:45:0e:85:7f:1a:56:9c:85:16:89:35:fa:
82:32:6b:32:ab:7d:e2:fc:c8:10:9c:f7:cb:3c:ca:75:b1:99:
ec:15:8d:84:8f:ed:af:61:e8:80:b3:bb:8f:5c:9a:b5:59:bf:
73:53:cd:29:75:84:cd:2a:67:b8:b8:13:76:02:8a:1c:ff:91:
ae:7c:99:d1:19:0f:00:29:69:33:82:0c:d3:74:13:cb:24:13:
b5:64:56:90:41:ee:84:f6:9f:2d:de:f7:d7:d9:13:b8:7b:3e:
67:13:2d:b7:f8:1e:96:85:05:0c:a8:3f:2a:32:0f:37:32:be:
bc:dc:4c:3f:18:37:c8:e8:6d:e8:c0:ff:cc:b5:05:be:a6:13:
43:55:a7:54:a4:9f:c5:13:73:75:70:33:b3:db:29:01:de:7d:
fe:38:6b:a0:15:48:3a:f6:a6:dc:6c:d1:eb:f3:69:aa:60:d3:
c2:85:57:a6:63:b2:c0:d7:de:df:d3:67:1d:22:8c:c6:f4:73:
c9:44:5f:bd:c0:8a:cb:d8:f9:c4:1e:ed:bc:a4:37:30:da:e7:
1b:56:1f:45:39:25:f8:4c:07:60:0b:17:ad:cd:3b:a4:75:00:
27:79:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 10:31:28 2026 by rpki-client