Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/NCNXc5lMowEEWRt7GMK-jUnw7SI.roa
File: NCNXc5lMowEEWRt7GMK-jUnw7SI.roa (raw, json)
Hash identifier: jH0mGr8QJrUmmcn9H7M7XqUSldOHcyG979yAvGsjcFo=
Subject key identifier: 34:23:57:73:99:4C:A3:01:04:59:1B:7B:18:C2:BE:8D:49:F0:ED:22
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019EEF694D17122DB01C6504FE6B6EE2DF11
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/NCNXc5lMowEEWRt7GMK-jUnw7SI.roa
Signing time: Mon 22 Jun 2026 12:58:36 +0000
ROA not before: Mon 22 Jun 2026 12:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206186
IP address blocks: 185.170.225.0/24 maxlen: 24
188.241.28.0/24 maxlen: 24
2001:678:3b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:69:4d:17:12:2d:b0:1c:65:04:fe:6b:6e:e2:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jun 22 12:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34235773994ca30104591b7b18c2be8d49f0ed22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:a7:86:92:84:df:4a:d9:5b:9c:ab:ea:74:
8a:c5:36:a0:da:13:36:31:91:b5:23:18:b7:8b:9b:
c1:5c:83:b7:f0:04:57:ea:12:62:50:dc:37:07:78:
57:ee:c1:5d:60:73:77:37:c4:f8:45:b1:b1:1f:88:
60:ad:57:92:34:e0:ae:4f:65:57:99:26:eb:6a:fb:
33:48:91:ee:d0:5e:23:af:42:0d:44:34:fd:f5:e9:
8a:8e:96:70:47:3c:73:88:84:9f:03:fa:a2:ce:29:
fe:6c:5a:d7:45:b4:4f:18:95:75:61:d1:9a:ab:3f:
89:5c:05:19:fe:6f:3b:80:b1:e1:be:aa:4a:3d:ca:
74:54:0e:b8:29:68:26:90:da:f5:cc:f6:34:71:6f:
b2:05:a9:90:40:13:c2:cb:74:44:6c:a0:90:9a:de:
f8:3d:c3:7b:bd:d3:2f:ec:8b:aa:c2:de:61:e6:6a:
12:70:f2:f7:d6:12:9c:c8:76:e8:ac:2b:2d:71:68:
ff:76:1c:21:15:68:49:c2:fd:fe:14:d1:01:83:e1:
88:a2:36:b6:c6:46:23:08:67:d4:31:4b:ee:a6:7e:
9d:05:3b:f7:81:0c:73:e7:d7:30:26:a3:49:42:0d:
ee:ae:29:64:57:ac:3a:99:f2:be:83:3e:84:09:55:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:57:73:99:4C:A3:01:04:59:1B:7B:18:C2:BE:8D:49:F0:ED:22
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/NCNXc5lMowEEWRt7GMK-jUnw7SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.225.0/24
188.241.28.0/24
IPv6:
2001:678:3b0::/48
Signature Algorithm: sha256WithRSAEncryption
ab:96:82:30:72:a2:c3:52:62:39:0a:9d:29:5a:e8:14:d3:15:
02:54:1f:76:00:42:68:92:99:24:cb:e9:83:b9:2d:4f:f4:59:
24:2d:46:7f:61:82:84:fb:80:41:f9:a3:d1:dc:31:4d:73:04:
1e:26:62:6d:41:86:1d:61:89:f3:a2:16:66:bd:b0:c2:a8:f1:
e3:83:74:34:7a:6a:02:75:3a:9a:b5:0e:85:ae:89:39:7e:e4:
81:be:57:2c:df:ab:3a:7c:86:b6:93:e1:75:a0:cd:c3:fa:38:
34:f4:4b:a8:4e:29:6d:c7:09:9f:6f:29:60:e0:29:6a:d0:85:
1b:eb:4f:16:06:0b:14:46:bb:9f:31:c4:40:29:2b:6a:d6:8f:
b0:97:ea:07:91:a9:69:ed:37:2d:14:1d:93:c6:e4:d0:03:d6:
22:da:c0:71:5c:ba:26:68:78:44:b3:d4:b3:8a:fb:b3:44:fe:
5b:58:b7:e5:06:71:38:83:9a:53:62:ff:b5:a0:78:75:1c:3e:
18:48:27:0e:72:48:33:58:2f:19:5a:8d:b3:1f:84:07:c9:20:
29:1a:6b:2f:31:60:ed:63:9b:4d:8c:95:df:92:43:48:f5:89:
6f:72:5a:a9:06:60:28:2e:2b:ec:5a:48:f1:b7:f8:a0:36:60:
4c:0d:6e:16
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ7vaU0XEi2wHGUE/mtu4t8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx
NmMzMmEwHhcNMjYwNjIyMTI1ODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDIzNTc3Mzk5NGNhMzAxMDQ1OTFiN2IxOGMyYmU4ZDQ5ZjBlZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNSnhpKE30rZW5yr6nSKxTag2hM2
MZG1Ixi3i5vBXIO38ARX6hJiUNw3B3hX7sFdYHN3N8T4RbGxH4hgrVeSNOCuT2VX
mSbravszSJHu0F4jr0INRDT99emKjpZwRzxziISfA/qizin+bFrXRbRPGJV1YdGa
qz+JXAUZ/m87gLHhvqpKPcp0VA64KWgmkNr1zPY0cW+yBamQQBPCy3REbKCQmt74
PcN7vdMv7Iuqwt5h5moScPL31hKcyHborCstcWj/dhwhFWhJwv3+FNEBg+GIoja2
xkYjCGfUMUvupn6dBTv3gQxz59cwJqNJQg3urilkV6w6mfK+gz6ECVXjfQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDQjV3OZTKMBBFkbexjCvo1J8O0iMB8GA1UdIwQY
MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvTkNOWGM1bE1vd0VFV1J0N0dNSy1qVW53N1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuarhAwQA
vPEcMA8EAgACMAkDBwAgAQZ4A7AwDQYJKoZIhvcNAQELBQADggEBAKuWgjByosNS
YjkKnSla6BTTFQJUH3YAQmiSmSTL6YO5LU/0WSQtRn9hgoT7gEH5o9HcMU1zBB4m
Ym1Bhh1hifOiFma9sMKo8eODdDR6agJ1Opq1DoWuiTl+5IG+Vyzfqzp8hraT4XWg
zcP6ODT0S6hOKW3HCZ9vKWDgKWrQhRvrTxYGCxRGu58xxEApK2rWj7CX6geRqWnt
Ny0UHZPG5NAD1iLawHFcuiZoeESz1LOK+7NE/ltYt+UGcTiDmlNi/7WgeHUcPhhI
Jw5ySDNYLxlajbMfhAfJICkaay8xYO1jm02Mld+SQ0j1iW9yWqkGYCguK+xaSPG3
+KA2YEwNbhY=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:26:57 2026 by rpki-client