Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/NvfylF4mNUZrVPpuF-aNgEIfodg.roa
File: NvfylF4mNUZrVPpuF-aNgEIfodg.roa (raw, json)
Hash identifier: Fvsh6sazNq+Fca51yFuaCiLcdIuLJhgDF163VQk6xG4=
Subject key identifier: 36:F7:F2:94:5E:26:35:46:6B:54:FA:6E:17:E6:8D:80:42:1F:A1:D8
Certificate issuer: /CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
Certificate serial: 019F23682D31E34701FDFF008B5425C1466E
Authority key identifier: 5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/NvfylF4mNUZrVPpuF-aNgEIfodg.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59909
IP address blocks: 168.222.188.0/22 maxlen: 22
185.67.108.0/22 maxlen: 24
185.67.108.0/24 maxlen: 24
185.67.109.0/24 maxlen: 24
185.67.110.0/24 maxlen: 24
185.67.111.0/24 maxlen: 24
2a05:e40::/29 maxlen: 38
2a05:e40:1000::/38 maxlen: 38
2a05:e40:2000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2d:31:e3:47:01:fd:ff:00:8b:54:25:c1:46:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f7f2945e2635466b54fa6e17e68d80421fa1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:e3:a6:8f:d5:9e:b1:69:a8:ef:6f:5f:c8:
88:67:c6:45:6d:52:ca:c2:86:9d:24:53:dd:55:26:
f8:34:1f:cc:d9:47:47:6a:0d:21:86:82:9a:7d:c2:
48:32:9e:8f:72:d0:58:cd:e5:32:e3:8a:a8:9f:b5:
87:77:76:76:7c:22:ab:2d:0d:07:90:f1:7d:43:bc:
1c:fc:d5:6d:32:f0:af:93:1e:76:a4:75:d0:8a:d7:
2c:d1:b0:71:a7:dc:4f:8a:f0:d9:d9:a6:b9:ba:c8:
6f:57:0a:ce:d4:e1:51:06:1a:c3:36:e8:86:aa:51:
bc:96:ec:99:e5:c9:11:9a:83:0a:1e:c9:87:89:ae:
52:06:86:a2:68:01:ab:e6:e9:22:79:92:61:0c:66:
ca:bd:ee:cc:5d:4c:37:79:61:1b:30:73:ef:e5:04:
77:20:c8:d7:87:72:09:4f:38:09:f1:4c:8c:91:b5:
43:de:0f:ed:df:55:28:b5:36:df:ad:a1:9f:b3:27:
a5:4f:e5:fa:19:f3:2b:07:49:e0:8c:58:94:a6:d6:
80:bb:68:13:fc:35:38:e7:ab:5c:15:05:90:0a:21:
ac:3f:e8:d5:dc:5b:3a:c3:b2:94:c3:c5:2d:37:e4:
cc:2a:af:10:97:d6:bb:86:d7:5d:8c:f3:08:9c:f7:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:F2:94:5E:26:35:46:6B:54:FA:6E:17:E6:8D:80:42:1F:A1:D8
X509v3 Authority Key Identifier:
keyid:5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/NvfylF4mNUZrVPpuF-aNgEIfodg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.188.0/22
185.67.108.0/22
IPv6:
2a05:e40::/29
Signature Algorithm: sha256WithRSAEncryption
e3:61:e6:25:db:2a:e4:f6:27:c1:40:5e:8a:01:96:35:91:91:
22:ab:c2:ec:c5:42:ed:bd:c9:d2:a8:81:7d:98:c3:16:b5:e5:
b2:2c:7a:de:ba:5f:35:29:d9:12:fe:e1:fb:04:4f:b9:77:33:
3f:9a:53:68:24:a1:14:06:d2:c3:d0:69:ba:a0:8a:b9:1b:f8:
58:93:3c:ae:ae:a5:00:4e:2b:d2:76:3e:98:e0:ab:47:3a:9d:
53:91:ae:86:2e:8c:03:60:78:e4:12:50:6f:ae:99:ca:16:7a:
02:0a:95:32:27:11:ab:5e:01:04:92:82:28:8b:31:da:a7:9d:
8e:20:6a:fb:20:03:52:e3:1f:52:b9:83:f6:d3:c7:d7:5d:a0:
18:72:d0:db:57:e5:2d:7f:27:02:34:ce:5c:62:79:ab:27:18:
15:33:f5:5e:18:eb:1e:b0:bc:7c:8b:d7:fb:bd:0b:15:d6:ee:
c2:7b:1a:22:0c:a8:b9:64:c5:b1:a6:31:14:2c:fa:67:e0:c9:
0a:db:51:3d:56:1b:c2:91:d0:2e:87:d8:72:07:17:e1:65:71:
df:9e:5e:e8:04:52:6e:56:4d:02:1f:dd:9e:f4:f5:48:a3:cb:
2b:3e:64:2c:5c:a8:c3:af:04:3c:df:ef:72:54:b0:69:00:7f:
5c:80:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:46 2026 by rpki-client