Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa
File: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (raw, json)
Hash identifier: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=
Subject key identifier: E4:D5:3F:07:3E:D3:33:45:F1:D5:40:B0:39:AF:78:C2:3A:2E:67:6F
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019D00EA529361A5F2DE35F3D22F0AFC9FEC
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa
Signing time: Wed 18 Mar 2026 12:27:29 +0000
ROA not before: Wed 18 Mar 2026 12:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 46.226.124.0/24 maxlen: 32
109.234.75.0/24 maxlen: 32
185.138.166.0/24 maxlen: 32
217.119.131.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ea:52:93:61:a5:f2:de:35:f3:d2:2f:0a:fc:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Mar 18 12:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4d53f073ed33345f1d540b039af78c23a2e676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:89:7d:bc:9a:b0:ac:3d:ec:7c:a2:fa:70:
ff:9f:ff:4e:f5:32:26:3a:f9:ea:6c:66:ae:ac:3b:
2d:1c:81:92:40:9a:a1:48:bb:b1:99:d3:dd:2f:f5:
4c:28:0b:ab:6d:0d:25:2d:06:92:58:33:03:d9:ff:
1d:2b:76:9a:78:82:34:d4:9a:ae:bc:e7:72:a2:0a:
e7:32:e1:7e:29:1b:d9:9a:2c:d3:da:96:39:e7:bc:
0e:38:8f:6a:a9:9f:1d:a1:22:2e:63:c4:61:f9:f1:
fd:ce:c7:0d:07:41:9e:1b:30:0b:65:d1:17:04:87:
12:89:e6:d3:a5:91:db:ea:25:06:cc:4f:75:06:c9:
70:5b:ec:c5:4b:c7:81:bb:6e:6e:dc:d2:90:37:fb:
4a:dc:46:bc:58:ab:33:eb:02:73:37:41:37:a9:7d:
9c:f3:53:73:eb:39:0f:e2:7b:95:f5:c5:94:f2:c1:
e4:73:e3:81:22:db:77:a8:27:97:ed:2c:c6:5f:0c:
60:5d:94:55:a3:38:79:f0:3b:d4:d8:d2:c5:54:ef:
ae:e1:4a:5f:ab:7f:f6:90:20:74:e1:eb:96:42:11:
ef:b0:b1:ff:2b:c3:cb:18:ed:6b:46:24:90:84:d9:
7e:c3:2e:9c:32:21:f7:70:e0:3e:52:18:37:da:5e:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:3F:07:3E:D3:33:45:F1:D5:40:B0:39:AF:78:C2:3A:2E:67:6F
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
109.234.75.0/24
185.138.166.0/24
217.119.131.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7a:4b:c3:ca:1f:9f:de:99:43:6a:54:bb:57:7b:4f:0b:a3:
57:ec:a4:b4:d4:0e:90:ca:26:4d:f8:fb:eb:8a:e2:58:52:67:
e2:51:7c:52:28:08:89:12:29:3d:7b:67:f3:c1:cc:63:2a:f2:
df:dd:5b:db:ba:5f:d2:20:eb:ae:d5:3b:d4:f9:e0:04:f8:28:
81:0e:81:d0:b3:fb:69:81:43:ce:2f:5d:85:48:01:4e:ed:d2:
6b:95:77:9b:90:ee:3d:49:76:b0:71:7c:be:fe:46:e1:82:e7:
af:7d:82:5c:40:8a:04:9d:5c:f1:f7:9b:42:4c:9e:70:53:04:
17:b8:3e:14:cd:2f:ed:eb:66:25:37:21:bd:cd:23:59:d2:7c:
19:ee:01:8a:4c:87:82:16:05:78:6a:28:21:d3:25:10:50:a2:
5f:ae:27:be:d9:af:f9:44:9d:67:35:3f:24:3a:c5:b0:b4:d6:
2d:aa:a0:1d:3e:1d:4e:c3:9e:64:98:93:0a:bc:73:74:ab:79:
af:90:07:bd:3d:34:64:bd:1e:7b:0c:c6:3a:c2:8a:e7:0a:06:
8e:e2:68:55:8d:70:d6:7a:67:fe:f7:40:4e:8c:39:1c:f3:d9:
11:fb:92:a1:6f:27:83:c4:cd:07:a8:e0:cb:b3:5c:8e:d7:9a:
16:62:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:16:54 2026 by rpki-client