Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/0nv-S98ulLoBxUbeunIyyHswlb4.roa
File: 0nv-S98ulLoBxUbeunIyyHswlb4.roa (raw, json)
Hash identifier: wXc4tA/MdxZd0ahPnwNsbJs8ojwvndGATxFJmx4jZGI=
Subject key identifier: D2:7B:FE:4B:DF:2E:94:BA:01:C5:46:DE:BA:72:32:C8:7B:30:95:BE
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F236885605C7B59021DC5033E0C871444
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/0nv-S98ulLoBxUbeunIyyHswlb4.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34994
IP address blocks: 82.193.94.0/24 maxlen: 32
82.193.95.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:60:5c:7b:59:02:1d:c5:03:3e:0c:87:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d27bfe4bdf2e94ba01c546deba7232c87b3095be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:f4:0d:1e:6c:3e:00:80:1c:49:91:dc:54:
ec:38:79:0c:3d:e7:c4:31:cf:73:39:67:48:04:3e:
b1:52:5d:5f:4b:e5:c4:9e:04:87:8d:d6:be:f0:88:
02:3d:90:9c:d9:6d:ac:56:74:1e:5e:5f:1a:18:52:
48:54:17:46:0a:e3:8b:ad:da:2a:0f:19:0a:9a:3e:
f2:73:67:53:12:b6:16:ba:38:24:49:84:05:45:e6:
93:ef:c0:9d:17:c0:9e:36:58:e5:54:16:77:3c:31:
d1:c4:4d:5a:fa:78:3e:c9:7c:6d:4b:ac:87:ce:51:
fc:93:50:84:cc:50:2c:c2:8f:a8:11:9e:f1:3c:2f:
cd:cc:34:e2:7d:8e:d8:86:03:a4:28:0f:51:dc:24:
60:02:7b:f6:6d:80:9c:2b:cf:88:b7:49:27:58:7f:
a6:23:81:ec:36:52:9b:de:82:81:57:92:98:01:5b:
f2:38:a1:be:d1:5f:16:cc:c5:58:e0:0b:c9:37:8f:
d7:7f:67:37:11:c0:41:d6:98:9e:34:db:aa:41:15:
a3:58:c2:b2:8a:29:e3:11:90:08:c6:b0:ad:5d:39:
79:99:bc:66:64:cb:7f:4c:06:d9:40:1d:75:9e:91:
16:01:45:9c:74:85:81:8c:4c:70:3c:ea:8e:82:6d:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:FE:4B:DF:2E:94:BA:01:C5:46:DE:BA:72:32:C8:7B:30:95:BE
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/0nv-S98ulLoBxUbeunIyyHswlb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:c4:a5:0b:89:30:db:b8:fe:d4:55:f1:a7:98:09:1d:5a:06:
f3:66:16:e4:af:f7:d2:45:44:85:c0:94:b0:c4:7f:88:8f:e8:
4b:96:c9:c1:15:7d:29:e6:9c:f3:a0:49:c2:bb:24:ab:72:09:
7f:12:14:cc:48:f8:f9:3b:11:47:c5:48:67:91:5d:7d:c0:d4:
62:da:3b:a6:d3:89:3a:48:61:9d:be:22:88:be:e3:ae:c9:95:
4c:f3:4c:bc:de:b4:b5:8d:f3:13:dc:f8:a7:51:1d:1b:45:38:
f5:4c:ca:62:9c:1c:74:b4:6f:69:db:76:3b:07:dc:f5:e5:42:
14:86:1f:6d:e7:05:4f:4f:50:f8:eb:e8:1a:4c:1c:53:40:46:
db:21:f0:66:af:00:87:12:c6:66:00:d6:09:62:bd:db:d2:fe:
29:d5:df:6c:52:34:d9:74:3f:b7:69:96:ce:51:df:3e:4f:b9:
b8:7e:73:ca:b4:a0:fa:bc:cb:9c:0c:58:9f:37:9c:dc:91:83:
9e:54:01:ba:63:1c:8e:ef:2d:06:a9:d6:ab:4f:ce:1e:f4:e8:
3b:41:86:2e:6f:65:d9:21:bd:a1:f5:b9:7f:0d:a2:3f:96:d0:
3c:92:33:42:0d:e4:d7:dc:99:0c:96:79:63:87:d6:f1:27:63:
a6:40:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:03:00 2026 by rpki-client