Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NvVMa-j_hPO4DFtKtgKKtgQ1kq4.roa
File: NvVMa-j_hPO4DFtKtgKKtgQ1kq4.roa (raw, json)
Hash identifier: JI6J2fBWEMT8vPhOHhQakpVplXs7Ut+NcJJ5cueyru0=
Subject key identifier: 36:F5:4C:6B:E8:FF:84:F3:B8:0C:5B:4A:B6:02:8A:B6:04:35:92:AE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0CE5CEA63A0F75B8FAD9FD3C78E98140A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NvVMa-j_hPO4DFtKtgKKtgQ1kq4.roa
Signing time: Wed 23 Sep 2026 13:03:10 +0000
ROA not before: Wed 23 Sep 2026 13:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 193.124.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5c:ea:63:a0:f7:5b:8f:ad:9f:d3:c7:8e:98:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 23 13:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f54c6be8ff84f3b80c5b4ab6028ab6043592ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:25:85:ea:c6:5a:7e:f5:73:f1:16:63:89:
ad:13:ab:ea:72:93:5f:94:42:72:23:3d:c2:ff:1a:
23:14:d1:17:ef:f0:ea:89:51:79:4a:f9:7c:3f:b5:
35:a5:fb:6a:b4:1c:bd:d1:fa:e0:33:e2:4d:d6:96:
76:da:0d:87:4e:ac:49:81:29:0a:bb:f6:c9:99:a3:
cd:ee:61:47:90:a6:05:1d:c4:10:cb:c0:17:68:56:
6d:b9:cd:0a:93:f2:1c:c3:93:6e:51:dd:99:9f:e1:
90:96:f0:fe:5e:af:a9:c7:2d:1d:6e:4b:12:e8:9a:
97:31:2e:62:9c:79:60:5e:15:02:8b:dc:76:a9:3f:
d7:68:67:19:71:99:c1:37:88:b5:d6:03:02:80:2d:
24:5b:05:bd:fe:f1:69:81:69:2b:7a:e6:b9:14:08:
fd:50:71:3b:9d:22:31:02:e5:d6:98:39:25:2c:fe:
77:70:c1:41:c9:eb:a7:d0:2a:00:e4:83:17:9a:03:
52:a5:b3:a0:20:f5:39:59:9d:bf:a8:e8:60:e0:3b:
87:c9:9f:48:6f:73:9b:3d:11:47:d1:ee:05:ab:fa:
42:d3:74:ec:51:77:89:e5:bd:6e:51:1a:4c:0c:0a:
8c:11:f1:ae:91:49:77:b7:cc:91:52:57:90:fd:5d:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:4C:6B:E8:FF:84:F3:B8:0C:5B:4A:B6:02:8A:B6:04:35:92:AE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NvVMa-j_hPO4DFtKtgKKtgQ1kq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
Signature Algorithm: sha256WithRSAEncryption
05:59:6e:cb:6f:6b:46:27:95:c0:9a:ae:a8:8f:b7:dd:42:0a:
3d:06:3b:46:59:e3:a7:38:0f:f3:08:b3:2c:c6:86:66:23:5d:
a3:4a:58:7a:26:e5:4d:1b:25:90:d9:8c:89:33:cc:15:bb:fa:
2f:15:c8:a6:a1:08:0b:bf:2f:4a:e3:bf:ed:12:b9:5f:27:3f:
50:bc:0e:4d:ac:7a:dc:d4:3e:cf:8a:f8:77:f0:cd:b8:3b:c1:
7b:40:7e:3c:6b:06:57:c4:98:3e:76:6f:97:32:ed:a2:8f:29:
19:4f:e0:59:c0:64:a5:29:04:f3:d3:5e:d5:9e:16:dd:5f:1a:
ed:e4:4e:b5:ad:54:ef:80:89:b8:4b:74:5b:62:3c:26:62:3c:
11:1d:ef:64:df:34:09:d9:06:e6:f8:1e:35:75:b7:ce:76:f7:
d9:b2:09:db:1f:77:73:03:ca:7a:00:aa:97:de:c2:7e:4e:7f:
44:06:15:d9:68:65:f5:20:5a:35:c8:16:1a:15:cc:61:50:f9:
5b:7c:b4:c6:9b:25:88:9e:7e:70:3a:50:73:89:68:23:04:4b:
26:63:5f:d3:69:3b:b3:66:03:fb:ee:90:b9:78:a8:b3:c0:1a:
b1:a6:ae:a8:c0:54:f9:76:b4:7b:d4:a6:fd:98:16:a0:50:ac:
ae:d4:00:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDOXOpjoPdbj62f08eOmBQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTIzMTMwMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmY1NGM2YmU4ZmY4NGYzYjgwYzViNGFiNjAyOGFiNjA0MzU5MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65ElherGWn71c/EWY4mtE6vqcpNf
lEJyIz3C/xojFNEX7/DqiVF5Svl8P7U1pftqtBy90frgM+JN1pZ22g2HTqxJgSkK
u/bJmaPN7mFHkKYFHcQQy8AXaFZtuc0Kk/Icw5NuUd2Zn+GQlvD+Xq+pxy0dbksS
6JqXMS5inHlgXhUCi9x2qT/XaGcZcZnBN4i11gMCgC0kWwW9/vFpgWkreua5FAj9
UHE7nSIxAuXWmDklLP53cMFByeun0CoA5IMXmgNSpbOgIPU5WZ2/qOhg4DuHyZ9I
b3ObPRFH0e4Fq/pC03TsUXeJ5b1uURpMDAqMEfGukUl3t8yRUleQ/V202wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDb1TGvo/4TzuAxbSrYCirYENZKuMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvTnZWTWEtal9oUE80REZ0S3RnS0t0Z1Exa3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXzNMA0G
CSqGSIb3DQEBCwUAA4IBAQAFWW7Lb2tGJ5XAmq6oj7fdQgo9BjtGWeOnOA/zCLMs
xoZmI12jSlh6JuVNGyWQ2YyJM8wVu/ovFcimoQgLvy9K47/tErlfJz9QvA5NrHrc
1D7Pivh38M24O8F7QH48awZXxJg+dm+XMu2ijykZT+BZwGSlKQTz017VnhbdXxrt
5E61rVTvgIm4S3RbYjwmYjwRHe9k3zQJ2Qbm+B41dbfOdvfZsgnbH3dzA8p6AKqX
3sJ+Tn9EBhXZaGX1IFo1yBYaFcxhUPlbfLTGmyWInn5wOlBziWgjBEsmY1/TaTuz
ZgP77pC5eKizwBqxpq6owFT5drR71Kb9mBagUKyu1ABF
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:25:52 2026 by rpki-client