Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa
File: nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa (raw, json)
Hash identifier: bTjCfnE77NEactYbdS6nJYXWVoGC6Uw3L9qEunQvAs8=
Subject key identifier: 9E:FE:5F:89:65:D8:CC:7B:BA:EA:0C:F3:01:CD:A0:63:51:3F:D9:6B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0163996605DC4E3B2CDEB76928B822A4E
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa
Signing time: Tue 18 Aug 2026 18:54:27 +0000
ROA not before: Tue 18 Aug 2026 18:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.136.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:39:96:60:5d:c4:e3:b2:cd:eb:76:92:8b:82:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 18 18:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9efe5f8965d8cc7bbaea0cf301cda063513fd96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:3d:0c:98:95:8d:69:00:55:a1:30:03:7a:
c0:5f:1a:6f:cc:d3:42:fb:f7:c0:17:44:de:78:2c:
61:4b:7b:ed:a1:78:3f:86:fe:2a:75:0e:ef:05:e8:
a0:22:50:ed:61:71:0d:3a:25:90:55:fd:c3:7a:1e:
56:ea:20:32:57:95:65:4b:4e:d9:e0:d5:9a:80:f0:
ac:1f:06:c1:0c:21:27:1a:58:3b:06:e6:2d:76:c6:
bd:a6:c9:0d:7f:a2:79:d5:3f:c2:77:a2:3c:49:5f:
31:92:10:46:a8:4c:09:62:64:b3:d5:2d:f1:11:c6:
1a:82:21:d9:81:2b:64:63:a7:32:f7:e0:29:e2:67:
85:74:c6:16:9c:33:26:2e:11:6c:23:44:2f:5a:ba:
e2:9f:d0:f0:7a:59:c4:20:09:7c:bb:be:a8:85:0a:
48:95:32:5b:cf:8a:76:42:54:b7:85:73:84:8f:ad:
ef:60:56:cb:52:d2:2b:0d:48:16:fb:9f:21:46:a7:
df:78:d6:ea:05:9a:2a:59:41:0b:62:ab:0b:78:ed:
af:a4:0f:5b:4e:af:fa:df:35:ed:40:3c:0f:35:66:
bf:2b:dc:7e:eb:a4:4f:73:dc:e3:7c:60:30:47:4e:
48:5b:45:3c:99:44:cb:a4:6f:25:89:2d:44:86:ae:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:5F:89:65:D8:CC:7B:BA:EA:0C:F3:01:CD:A0:63:51:3F:D9:6B
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e4:c7:ee:f6:c4:2b:55:1d:1c:a0:7c:2b:d1:1c:e1:b1:af:
aa:a7:88:da:38:1a:b2:d6:c4:36:72:a6:25:75:6a:4c:49:23:
46:f0:e3:aa:81:7c:ad:c8:1f:7a:3d:82:b9:df:86:95:45:5f:
1c:1e:63:01:e6:f5:24:0f:02:06:36:45:e8:97:dc:90:6f:15:
3b:2d:be:38:84:70:3c:be:ec:32:6b:cb:83:04:bc:df:7c:b0:
56:57:3d:e7:c0:a7:cb:f9:33:21:5b:d8:b8:39:e1:ce:ac:d6:
d6:43:3e:67:bd:f3:75:55:8c:6c:a0:8b:c2:1e:cd:a1:93:f2:
2a:51:37:c2:44:1c:19:e7:96:60:c9:7a:f8:e1:cf:d8:26:d5:
cd:a8:d3:93:d4:47:44:43:f6:5d:07:29:02:34:4a:e5:0a:2d:
0c:03:97:fa:a0:24:58:5b:59:06:d0:6b:90:d0:ac:a4:65:29:
e5:93:69:71:8d:89:f8:e9:10:71:c5:0f:25:85:0c:ff:da:cc:
1b:1b:15:8f:42:ed:ae:42:10:a7:f9:13:22:ef:99:fd:3d:af:
c6:89:79:04:71:4c:c8:d3:07:a2:c7:e7:9e:6a:20:1d:88:01:
a0:ce:1b:b5:28:66:0a:8e:ae:56:85:79:4a:e5:9c:14:9a:26:
f3:00:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:58:54 2026 by rpki-client