Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/nWWVWP2BcHaVfNWoF4AVYtp5pxc.roa
File: nWWVWP2BcHaVfNWoF4AVYtp5pxc.roa (raw, json)
Hash identifier: NVfU3TqNbn5gHACaDa6BG6sq5PC56l3fZkk6hnFB3c4=
Subject key identifier: 9D:65:95:58:FD:81:70:76:95:7C:D5:A8:17:80:15:62:DA:79:A7:17
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019D1EB5B88B75AB10C110539277A88EE815
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/nWWVWP2BcHaVfNWoF4AVYtp5pxc.roa
Signing time: Tue 24 Mar 2026 07:18:38 +0000
ROA not before: Tue 24 Mar 2026 07:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205507
IP address blocks: 92.119.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:b5:b8:8b:75:ab:10:c1:10:53:92:77:a8:8e:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Mar 24 07:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d659558fd817076957cd5a817801562da79a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:e5:0b:64:3e:57:26:95:01:e5:64:db:d7:
81:e8:2a:20:21:9d:9d:02:de:25:a9:55:b5:3e:58:
c8:40:7e:e5:53:80:b2:1f:ee:66:5c:0a:e5:5e:b1:
f3:9e:c3:b2:8f:a2:bc:8f:2c:79:28:e0:7e:a8:ff:
a2:20:83:bc:d6:d4:bf:68:4d:96:b5:e9:58:e7:51:
59:61:3f:71:93:bd:e7:36:1b:2c:1c:d6:f9:e1:3b:
cd:04:37:f5:6c:38:00:b4:7a:0c:79:9e:97:0f:3b:
c7:05:80:34:f1:77:8c:9c:3f:9e:5e:6a:e8:51:a7:
f5:7c:d9:d7:38:26:18:c7:a1:46:e0:dc:d8:b2:f7:
35:47:9a:f5:70:ae:bf:a0:04:4c:22:03:1a:c6:64:
fa:9d:a9:ad:df:77:61:38:29:c6:e4:77:77:0e:ce:
38:2e:60:05:cd:51:3d:e8:1a:af:c4:91:e2:97:0e:
5a:9d:0c:2b:ec:db:18:ac:45:ba:9e:2a:f0:94:1d:
45:b7:ab:2a:f1:31:68:16:a9:44:a7:23:69:31:9f:
7d:4a:25:c4:37:fd:9a:85:00:ff:99:27:db:83:3c:
54:03:54:02:84:17:a1:1e:41:d8:54:59:72:5c:39:
e5:56:77:28:b4:f2:64:eb:f7:b9:92:97:d2:52:63:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:65:95:58:FD:81:70:76:95:7C:D5:A8:17:80:15:62:DA:79:A7:17
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/nWWVWP2BcHaVfNWoF4AVYtp5pxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.185.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2a:0b:ca:e1:98:f5:7e:93:2f:19:a2:33:25:ac:a6:91:b8:
24:5d:7e:ea:eb:32:65:b7:95:cd:00:ac:03:ca:57:67:06:ab:
7d:cd:df:51:b0:fe:62:76:f6:72:3c:fe:6f:87:17:cb:0e:2a:
20:87:90:cf:b9:f9:5b:07:66:89:9e:f2:24:b1:7b:6f:2d:48:
ab:b0:30:c6:86:23:13:aa:c3:40:41:be:73:84:cf:1d:c9:d4:
20:8f:11:c4:33:06:91:46:79:be:67:54:fe:ab:16:2c:b5:cb:
8d:19:a4:3f:76:2b:1d:39:8f:a0:e2:d1:26:10:8b:01:82:ea:
07:df:c6:9f:f7:b4:5a:80:07:6c:59:d3:05:1b:59:04:7c:cc:
4c:d9:7c:0e:0c:76:6a:40:1f:4a:da:be:a6:9f:de:ff:cb:63:
46:74:ee:32:bd:73:b1:5f:59:95:fa:11:55:09:3d:0d:d5:fb:
d1:b7:cb:51:58:50:ac:ac:65:0f:d0:64:43:f7:bd:2a:32:5d:
1f:23:4a:52:b8:ac:7f:55:bd:49:f2:01:9c:0a:9c:d0:b2:68:
e7:10:d2:35:03:c7:f3:ec:a7:00:b0:d3:b1:d6:e7:6a:c5:67:
c0:d9:e5:6f:0d:5a:75:13:34:14:16:8b:e0:ec:a4:7e:63:8e:
c7:52:e4:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0etbiLdasQwRBTkneojugVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjYwMzI0MDcxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDY1OTU1OGZkODE3MDc2OTU3Y2Q1YTgxNzgwMTU2MmRhNzlhNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrrlC2Q+VyaVAeVk29eB6CogIZ2d
At4lqVW1PljIQH7lU4CyH+5mXArlXrHznsOyj6K8jyx5KOB+qP+iIIO81tS/aE2W
telY51FZYT9xk73nNhssHNb54TvNBDf1bDgAtHoMeZ6XDzvHBYA08XeMnD+eXmro
Uaf1fNnXOCYYx6FG4NzYsvc1R5r1cK6/oARMIgMaxmT6namt33dhOCnG5Hd3Ds44
LmAFzVE96BqvxJHilw5anQwr7NsYrEW6nirwlB1Ft6sq8TFoFqlEpyNpMZ99SiXE
N/2ahQD/mSfbgzxUA1QChBehHkHYVFlyXDnlVncotPJk6/e5kpfSUmPi7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ1llVj9gXB2lXzVqBeAFWLaeacXMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvbldXVldQMkJjSGFWZk5Xb0Y0QVZZdHA1cHhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHe5MA0G
CSqGSIb3DQEBCwUAA4IBAQAwKgvK4Zj1fpMvGaIzJaymkbgkXX7q6zJlt5XNAKwD
yldnBqt9zd9RsP5idvZyPP5vhxfLDiogh5DPuflbB2aJnvIksXtvLUirsDDGhiMT
qsNAQb5zhM8dydQgjxHEMwaRRnm+Z1T+qxYstcuNGaQ/disdOY+g4tEmEIsBguoH
38af97RagAdsWdMFG1kEfMxM2XwODHZqQB9K2r6mn97/y2NGdO4yvXOxX1mV+hFV
CT0N1fvRt8tRWFCsrGUP0GRD970qMl0fI0pSuKx/Vb1J8gGcCpzQsmjnENI1A8fz
7KcAsNOx1udqxWfA2eVvDVp1EzQUFovg7KR+Y47HUuR6
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:43:01 2026 by rpki-client