Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/O_LpxTo7R231ddDcPK4hIGV9iXg.roa
File: O_LpxTo7R231ddDcPK4hIGV9iXg.roa (raw, json)
Hash identifier: 8m1fk7WYxmCwj0R7yKBqeG1SMElzRX73CuF2TSrZxVU=
Subject key identifier: 3B:F2:E9:C5:3A:3B:47:6D:F5:75:D0:DC:3C:AE:21:20:65:7D:89:78
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 019F2368A73134725B29A3A2ACE51C551FE5
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/O_LpxTo7R231ddDcPK4hIGV9iXg.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9051
IP address blocks: 80.89.176.0/20 maxlen: 24
194.26.4.0/22 maxlen: 24
2a06:b940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a7:31:34:72:5b:29:a3:a2:ac:e5:1c:55:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bf2e9c53a3b476df575d0dc3cae2120657d8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:4b:d3:4e:a4:4e:76:b7:ba:5a:45:73:ab:
c4:d7:8b:56:8a:bc:48:78:4b:45:ab:bf:c4:5c:0f:
bc:54:d0:63:bf:24:29:fd:00:7b:d2:b6:d0:d9:5e:
ef:7e:2e:8f:fb:0a:5d:2a:97:53:68:64:bf:12:64:
47:0a:5f:a9:57:7b:b4:82:9e:1b:35:e1:9f:67:50:
9a:67:b5:2b:be:cd:85:cb:21:a1:3e:44:65:be:19:
65:47:57:4c:a7:be:40:64:41:01:ee:f2:9c:c3:12:
5d:22:d7:bb:b2:a2:99:91:5c:30:99:8b:38:8a:63:
d2:40:f6:b4:95:de:24:03:9a:bd:d0:66:6c:a4:f2:
8a:35:21:0f:2a:32:67:88:d2:3a:1b:93:cf:3a:f8:
10:ee:e9:18:92:39:1b:ed:79:2b:ae:6b:23:2e:68:
25:3f:07:ad:69:f4:89:65:c9:56:e6:74:09:5a:b5:
40:15:a4:87:48:2f:5a:5a:04:75:c2:5f:48:c1:fc:
a2:1b:97:3f:ee:e1:76:05:e0:95:9b:d9:f2:59:c7:
d2:1f:33:48:78:18:41:56:c7:23:0d:96:ac:94:d5:
38:2e:03:20:e6:e4:68:31:5d:6d:47:8c:49:00:96:
60:c1:ea:d9:4d:de:26:d0:e8:dc:6e:8a:78:2d:d3:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:E9:C5:3A:3B:47:6D:F5:75:D0:DC:3C:AE:21:20:65:7D:89:78
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/O_LpxTo7R231ddDcPK4hIGV9iXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/20
194.26.4.0/22
IPv6:
2a06:b940::/29
Signature Algorithm: sha256WithRSAEncryption
89:83:cf:2f:e8:2e:05:d0:ba:e3:b0:df:ed:d2:f3:05:d8:9c:
94:f7:50:72:1d:52:c8:6c:4e:7a:c6:74:15:3c:4e:0b:4f:97:
98:87:1b:bb:c4:16:64:6d:70:82:e5:e6:46:4f:a9:64:53:96:
c3:04:8f:23:ce:76:0f:d3:4c:a0:bb:98:53:1d:66:e8:be:82:
5f:41:82:67:3b:05:d3:e0:77:c6:58:29:88:e1:47:ef:d3:97:
79:4f:b3:1a:08:23:54:b0:f9:c7:fc:5e:6e:29:16:e0:72:6d:
e4:d6:6b:ec:c0:26:61:2e:d0:a2:6c:cd:11:d3:be:41:65:ea:
b7:06:31:16:3a:7d:79:f6:d4:c0:10:c3:a2:26:7f:a1:ec:a1:
ea:d5:f0:0d:fc:a0:1b:6f:ce:37:bf:84:b9:34:fc:21:ca:f7:
25:26:0d:cd:b4:c6:7d:6d:59:d4:67:85:85:71:e5:fc:34:de:
81:e0:b6:eb:d7:46:03:1a:07:56:9b:77:b9:70:57:c0:2b:40:
96:bc:8d:9c:df:6c:37:2e:93:47:92:ee:ff:d9:96:2b:be:c6:
e0:0f:10:7f:c4:80:2f:f8:7e:23:30:bc:82:e7:5b:04:c8:09:
74:3b:62:10:02:0d:50:9f:d9:71:64:f5:8a:ff:99:23:2a:c3:
eb:5a:5d:d2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaKcxNHJbKaOirOUcVR/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWMzNTBjZjU2NzM0NWU1ZDc1ZTZjNTNlMDRkZjRlMTI0
MWMxNDAwHhcNMjYwNzAyMTUxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmYyZTljNTNhM2I0NzZkZjU3NWQwZGMzY2FlMjEyMDY1N2Q4OTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J9L006kTna3ulpFc6vE14tWirxI
eEtFq7/EXA+8VNBjvyQp/QB70rbQ2V7vfi6P+wpdKpdTaGS/EmRHCl+pV3u0gp4b
NeGfZ1CaZ7Urvs2FyyGhPkRlvhllR1dMp75AZEEB7vKcwxJdIte7sqKZkVwwmYs4
imPSQPa0ld4kA5q90GZspPKKNSEPKjJniNI6G5PPOvgQ7ukYkjkb7XkrrmsjLmgl
PwetafSJZclW5nQJWrVAFaSHSC9aWgR1wl9IwfyiG5c/7uF2BeCVm9nyWcfSHzNI
eBhBVscjDZaslNU4LgMg5uRoMV1tR4xJAJZgwerZTd4m0Ojcbop4LdONCwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDvy6cU6O0dt9XXQ3DyuISBlfYl4MB8GA1UdIwQY
MBaAFJ8cNQz1ZzReXXXmxT4E304SQcFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt
OTYyOGY1MjY2NTQyLzEvT19McHhUbzdSMjMxZGREY1BLNGhJR1Y5aVhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy
LzEvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFmwAwQC
whoEMA0EAgACMAcDBQMqBrlAMA0GCSqGSIb3DQEBCwUAA4IBAQCJg88v6C4F0Lrj
sN/t0vMF2JyU91ByHVLIbE56xnQVPE4LT5eYhxu7xBZkbXCC5eZGT6lkU5bDBI8j
znYP00ygu5hTHWbovoJfQYJnOwXT4HfGWCmI4Ufv05d5T7MaCCNUsPnH/F5uKRbg
cm3k1mvswCZhLtCibM0R075BZeq3BjEWOn159tTAEMOiJn+h7KHq1fAN/KAbb843
v4S5NPwhyvclJg3NtMZ9bVnUZ4WFceX8NN6B4Lbr10YDGgdWm3e5cFfAK0CWvI2c
32w3LpNHku7/2ZYrvsbgDxB/xIAv+H4jMLyC51sEyAl0O2IQAg1Qn9lxZPWK/5kj
KsPrWl3S
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:45 2026 by rpki-client