Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nwnUYcZ8B5xzUKvblLV9toJjt0o.roa
File: nwnUYcZ8B5xzUKvblLV9toJjt0o.roa (raw, json)
Hash identifier: LZf2ZohZTlIPpPOHAO+2fBtPjyLyJ4skYfEwI88rfl4=
Subject key identifier: 9F:09:D4:61:C6:7C:07:9C:73:50:AB:DB:94:B5:7D:B6:82:63:B7:4A
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0495D6534D4B326DD366FDB5971EC68D8
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nwnUYcZ8B5xzUKvblLV9toJjt0o.roa
Signing time: Fri 28 Aug 2026 17:14:12 +0000
ROA not before: Fri 28 Aug 2026 17:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218954
IP address blocks: 5.133.101.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:5d:65:34:d4:b3:26:dd:36:6f:db:59:71:ec:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 28 17:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f09d461c67c079c7350abdb94b57db68263b74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f7:d5:63:9b:58:77:22:fc:ea:f2:66:d9:ce:
0d:1c:fc:47:47:bd:c7:5d:3e:7d:64:4a:50:37:65:
c6:d5:82:06:a1:08:9f:09:d3:f5:38:3a:5f:16:89:
84:ed:71:96:b5:5e:da:30:00:64:00:3a:a6:c3:00:
5b:87:70:ad:2b:57:ac:d8:3f:f0:f3:92:25:91:6a:
e3:8b:41:99:fb:f4:7f:2e:89:b3:a4:98:3f:59:8c:
5b:fd:d0:a2:6f:44:f1:62:37:3e:8c:ca:da:e0:3f:
48:75:23:03:05:89:fc:5b:64:8d:1a:06:12:8f:a3:
6c:d0:41:73:b4:e2:38:7c:87:dc:d7:c8:24:2f:cd:
89:3d:a5:24:7f:67:1b:4b:31:04:ae:f5:43:ad:bc:
78:db:85:b8:25:e1:ee:17:8b:a6:42:cd:61:29:60:
35:9d:2b:42:dd:9f:e5:f1:24:ab:d9:de:33:c5:38:
dd:41:ec:a8:6d:e1:9c:2b:f0:bb:73:bb:7d:47:01:
20:87:b7:3e:66:0c:01:97:cd:73:89:81:6c:9e:04:
b8:2f:f6:6f:70:90:5f:fa:15:2e:34:13:e4:31:81:
9e:a8:cf:94:3e:7a:ca:08:4c:56:38:39:a4:ae:e9:
30:80:8b:09:bc:97:79:ce:ff:03:c7:a4:54:8d:66:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:D4:61:C6:7C:07:9C:73:50:AB:DB:94:B5:7D:B6:82:63:B7:4A
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nwnUYcZ8B5xzUKvblLV9toJjt0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0/24
37.221.78.0/24
Signature Algorithm: sha256WithRSAEncryption
66:95:cb:39:1b:e1:40:ea:e0:5c:fc:57:72:d5:c2:ac:c6:eb:
82:3e:35:b7:c4:7c:fd:9a:ad:a3:02:6e:3b:43:26:57:63:6b:
f0:a3:f5:d7:b0:cc:6f:2d:b0:79:a9:69:be:97:d7:0b:2e:be:
b3:87:0d:cb:2f:1b:36:66:f3:7f:3e:93:9f:b4:6f:0e:5b:43:
95:af:7f:b4:bb:9a:fb:bb:1e:69:b0:84:f7:b9:1e:6a:d7:42:
27:34:21:ba:45:b1:3d:97:88:8b:18:b2:75:0c:4a:ec:b6:64:
14:3a:36:6f:97:9d:34:de:6e:dd:12:17:60:61:05:4c:9f:ba:
f4:8a:ae:74:c8:58:8c:a0:e9:53:a6:b1:4c:c9:d1:f8:2e:62:
a3:b5:65:91:e2:b1:95:90:40:7e:f6:70:cf:8d:a1:55:26:ac:
06:55:c5:30:e0:23:aa:71:35:ac:a7:e8:8e:6f:7e:d0:06:c2:
6c:da:6c:cc:e5:27:67:ed:d9:76:ae:f2:2b:57:f6:bf:c3:ec:
12:4e:5f:57:e5:c9:a5:59:bc:f1:95:13:3f:0d:ba:6c:27:f6:
8c:12:c5:a4:59:5f:7e:7e:b4:54:a3:d0:68:d3:ec:03:77:ec:
48:92:96:19:e6:7e:f0:45:10:11:55:6b:09:d8:59:74:42:3d:
c0:27:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:19:27 2026 by rpki-client