Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/NC1oz806At-lw52bVdOZr_4maGY.roa
File: NC1oz806At-lw52bVdOZr_4maGY.roa (raw, json)
Hash identifier: tIwn6Abw/GdxCHgi6qURJtlLes8IlOaegwWGbD/XOVw=
Subject key identifier: 34:2D:68:CF:CD:3A:02:DF:A5:C3:9D:9B:55:D3:99:AF:FE:26:68:66
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01A17C28B7C2CE6C1610ED3B6F0C5C442F68
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/NC1oz806At-lw52bVdOZr_4maGY.roa
Signing time: Tue 27 Oct 2026 07:00:05 +0000
ROA not before: Tue 27 Oct 2026 07:00:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.0.0/21 maxlen: 21
5.0.8.0/21 maxlen: 21
5.0.16.0/21 maxlen: 21
5.0.24.0/21 maxlen: 21
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.64.0/21 maxlen: 21
5.0.72.0/21 maxlen: 21
5.0.80.0/21 maxlen: 21
5.0.88.0/21 maxlen: 21
5.0.96.0/21 maxlen: 21
5.0.104.0/21 maxlen: 21
5.0.112.0/21 maxlen: 21
5.0.120.0/21 maxlen: 21
5.0.128.0/19 maxlen: 19
5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.32.0/21 maxlen: 21
5.155.40.0/21 maxlen: 21
5.155.48.0/21 maxlen: 21
5.155.56.0/21 maxlen: 21
5.155.64.0/19 maxlen: 19
5.155.64.0/21 maxlen: 21
5.155.72.0/21 maxlen: 21
5.155.80.0/21 maxlen: 21
5.155.88.0/21 maxlen: 21
5.155.96.0/19 maxlen: 19
5.155.96.0/21 maxlen: 21
5.155.104.0/21 maxlen: 21
5.155.112.0/21 maxlen: 21
5.155.120.0/21 maxlen: 21
5.155.128.0/19 maxlen: 19
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/19 maxlen: 19
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.0.0/19 maxlen: 19
31.9.32.0/20 maxlen: 20
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
91.144.48.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.64.0/21 maxlen: 21
94.47.72.0/21 maxlen: 21
94.47.80.0/21 maxlen: 21
94.47.88.0/21 maxlen: 21
94.47.96.0/19 maxlen: 19
178.253.64.0/19 maxlen: 19
178.253.64.0/20 maxlen: 20
178.253.94.0/24 maxlen: 24
178.253.95.0/24 maxlen: 24
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
194.58.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:b7:c2:ce:6c:16:10:ed:3b:6f:0c:5c:44:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Oct 27 07:00:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342d68cfcd3a02dfa5c39d9b55d399affe266866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:30:6a:ff:df:76:88:78:89:c5:e3:97:fd:
6a:04:3e:ff:2c:88:81:64:60:40:f1:60:fb:ce:12:
4e:43:f4:c9:ca:da:e5:2c:d9:62:7c:d5:f0:2d:b9:
dc:ff:ed:3a:98:d9:a1:10:e7:e4:5d:1f:48:f8:4e:
46:d0:2b:b4:c2:28:44:07:33:78:02:92:af:9b:c9:
7c:e2:c8:77:3f:51:10:5f:a7:0c:b5:6c:0a:3d:44:
b3:52:f3:c7:d2:bc:bf:ca:34:c5:5b:33:8e:27:62:
5f:58:27:19:19:41:28:6c:1b:f5:40:e6:1b:6f:cb:
93:b4:2d:28:17:64:08:a0:b6:92:96:5a:b7:c2:a4:
66:7c:fe:d1:d2:c8:b1:2b:2e:f5:4b:4d:a1:d8:9c:
56:48:6d:81:bd:26:e4:78:91:d8:4f:28:ec:be:b2:
6d:43:1a:b1:f1:73:a8:0d:17:70:a7:5a:9f:be:72:
16:18:0a:29:ab:7f:18:16:14:d9:f8:47:93:db:1e:
bf:58:05:9f:e1:b3:b4:0b:35:3c:f0:ce:b3:b7:60:
a6:3a:9c:e0:6d:8d:de:ff:b3:8c:3f:37:c5:96:76:
5b:bd:4e:04:d5:44:73:d7:5c:3c:69:b6:ff:c7:11:
77:df:f0:99:29:d3:de:77:aa:bb:29:aa:03:73:68:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:68:CF:CD:3A:02:DF:A5:C3:9D:9B:55:D3:99:AF:FE:26:68:66
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/NC1oz806At-lw52bVdOZr_4maGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.0.0-31.9.51.255
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0/18
94.47.0.0/17
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
194.58.10.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1d:90:d5:ba:59:d0:8c:10:3e:d6:81:3a:31:c3:fa:58:6c:
33:f9:7f:e8:ea:e6:05:86:11:9a:2f:43:5c:b6:02:7e:d7:a0:
52:71:6f:24:61:ff:f0:73:af:ab:c7:bc:37:c5:a2:09:71:81:
c5:1c:4e:95:7d:20:d0:e8:75:25:84:1d:e9:79:54:6f:9d:cd:
cd:23:80:27:c2:ae:3c:fb:09:0c:4a:55:d2:f2:dd:08:39:42:
5d:98:45:df:f3:8d:0e:4f:b7:49:8d:65:37:36:70:2d:6d:cc:
59:e4:f3:fd:6c:c6:bf:43:85:1e:bd:02:39:de:0d:d0:d2:87:
7f:76:66:46:35:71:07:69:e4:bb:76:d3:e4:1e:71:c3:3f:3f:
b0:f2:f3:0f:6c:2b:98:1b:07:b5:3e:fc:ec:66:a6:7a:72:3a:
6e:bd:b8:b3:f5:65:ca:82:a3:08:3d:ab:84:23:f4:9e:d6:55:
9a:9f:48:91:97:45:b8:7d:e4:3c:3d:0e:02:65:63:3c:df:7a:
f5:e0:61:c3:0c:a6:64:5e:43:f1:1e:9a:fa:66:d2:c1:85:5b:
80:20:5d:08:df:8c:0a:70:d4:b3:be:75:4d:b1:a8:e4:4a:0c:
05:df:2a:ff:13:8a:1d:85:b6:e7:ea:81:39:1a:7a:85:15:9f:
0b:67:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:38 2026 by rpki-client