Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NLCWVJw3JYBwQXRAVBmythCNeUA.roa
File: NLCWVJw3JYBwQXRAVBmythCNeUA.roa (raw, json)
Hash identifier: wszxVZj3CFBaolfflnE142p5t0UV4rBpFkNGJRUYtIM=
Subject key identifier: 34:B0:96:54:9C:37:25:80:70:41:74:40:54:19:B2:B6:10:8D:79:40
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0EC54D8043707DA045F7CDB2CC17C9BFE
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NLCWVJw3JYBwQXRAVBmythCNeUA.roa
Signing time: Tue 29 Sep 2026 08:42:58 +0000
ROA not before: Tue 29 Sep 2026 08:42:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 87.58.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:54:d8:04:37:07:da:04:5f:7c:db:2c:c1:7c:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 29 08:42:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34b096549c372580704174405419b2b6108d7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:eb:5d:d8:15:10:df:4f:a3:67:38:89:45:
67:33:72:9b:74:9c:a7:3e:4b:ca:49:1b:1a:8d:06:
36:02:fc:d8:01:cd:c1:a0:60:82:dc:03:98:a2:74:
d7:d6:6e:39:d7:29:38:de:d2:b8:42:08:10:21:59:
47:c6:cb:8c:4d:f7:9e:d7:6e:4f:0b:d9:70:a5:ce:
98:14:a5:64:a6:ad:b9:b3:bf:ed:58:62:93:4d:4c:
e7:84:65:0d:57:bb:f4:95:99:01:bc:00:90:9e:0f:
14:3c:31:90:eb:3b:89:b2:e7:44:d6:d7:02:e7:90:
98:fe:e4:cc:70:f0:b9:9b:0c:fe:db:cb:e0:9f:67:
da:b8:e3:5d:b5:bb:b5:df:9d:93:ef:b4:28:6f:f8:
f6:0a:49:0d:37:50:0f:b9:7b:4b:cb:05:22:4d:d1:
32:c8:85:25:d7:6c:12:28:61:a6:03:fd:b7:74:0e:
64:d8:f6:c9:36:15:08:1c:de:8e:68:70:2a:97:f2:
74:9f:12:34:db:94:ff:6d:59:04:ff:94:4f:4d:ea:
88:45:6e:33:84:4b:c9:de:f6:11:60:d2:47:14:ed:
d0:75:45:35:56:db:05:b3:77:79:78:a3:14:22:d4:
1a:e2:12:c8:41:2b:9f:e8:41:40:41:51:28:8d:d2:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:96:54:9C:37:25:80:70:41:74:40:54:19:B2:B6:10:8D:79:40
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NLCWVJw3JYBwQXRAVBmythCNeUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.203.0/24
Signature Algorithm: sha256WithRSAEncryption
24:35:e4:5d:b0:ba:53:0b:59:22:ec:3c:35:8e:2c:c5:6f:09:
27:27:bf:64:55:fa:89:02:de:c2:e8:5b:b0:32:1b:03:34:10:
99:71:37:de:ca:c9:fe:11:42:39:24:68:06:72:1e:1a:81:a1:
da:57:0a:c6:d0:06:92:b8:37:3b:5e:3b:fa:ce:ad:da:42:a8:
1a:f4:27:c0:54:cf:15:23:9c:a4:ba:d1:40:6d:06:56:64:93:
44:a2:ca:de:de:f1:da:aa:73:bc:bb:c3:ee:51:75:be:58:08:
80:25:1c:bb:05:dc:c6:8b:f7:55:b1:68:87:d7:81:81:d3:0c:
88:69:22:3b:f7:4c:ea:eb:6c:1a:d0:12:eb:32:fe:84:89:2d:
4f:0d:4c:99:b6:4b:44:74:44:92:96:12:64:ce:0a:a0:50:93:
1a:7b:f8:6f:f5:7d:58:6c:aa:01:36:b5:54:84:84:1e:c9:76:
1f:40:13:9e:74:d6:53:f0:54:d1:7d:47:59:f7:f8:a8:53:8b:
42:b0:f2:3a:89:15:31:4a:4a:bc:13:6c:f8:34:28:19:5a:b6:
56:71:f2:fa:f7:b4:2d:55:0f:e4:7a:85:0a:e4:85:88:c3:14:
e5:23:05:a1:05:73:93:b9:f3:55:34:d4:58:0c:a4:93:84:b3:
0d:f9:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:58:09 2026 by rpki-client