Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/NV7bonbzUdYDsES4VO4pRJ8bb0U.roa
File: NV7bonbzUdYDsES4VO4pRJ8bb0U.roa (raw, json)
Hash identifier: /TP4uRljbjgho85/nd4chEgZ45xnysDKS/rWil/Kvpw=
Subject key identifier: 35:5E:DB:A2:76:F3:51:D6:03:B0:44:B8:54:EE:29:44:9F:1B:6F:45
Certificate issuer: /CN=ba6444dc21ccbef0134d7643eaefd7ec8fa958b8
Certificate serial: 019CE666502B64B53D6A621657AF8EE03A42
Authority key identifier: BA:64:44:DC:21:CC:BE:F0:13:4D:76:43:EA:EF:D7:EC:8F:A9:58:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/NV7bonbzUdYDsES4VO4pRJ8bb0U.roa
Signing time: Fri 13 Mar 2026 08:53:10 +0000
ROA not before: Fri 13 Mar 2026 08:53:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206548
IP address blocks: 185.250.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:66:50:2b:64:b5:3d:6a:62:16:57:af:8e:e0:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6444dc21ccbef0134d7643eaefd7ec8fa958b8
Validity
Not Before: Mar 13 08:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=355edba276f351d603b044b854ee29449f1b6f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:2c:17:9c:bf:c2:d2:f0:c1:f0:36:e0:b5:
9d:23:a4:3e:71:54:22:65:68:3a:2c:bf:7a:1b:27:
9b:7e:b3:9d:3a:3e:e3:37:e9:4e:dd:d4:dc:24:0b:
94:f5:c7:47:38:3d:50:2d:e2:7a:62:a1:a9:09:1b:
12:82:a2:c9:4a:a1:83:bb:2e:a3:54:c2:2f:67:c7:
3c:2f:6e:b2:d1:97:ca:56:75:ba:3c:1d:e5:72:82:
7c:f8:ab:fd:4d:69:cf:25:ff:6b:0d:be:e6:8b:52:
a4:dc:16:c9:9a:b4:51:90:d7:0a:f2:3f:be:0b:d5:
50:b9:c1:14:12:cc:d4:4d:a1:bc:25:f2:cd:f2:99:
3e:5d:a7:81:74:97:c2:4d:37:2b:15:70:21:34:72:
1b:b1:60:a8:60:65:92:1d:47:47:f1:70:c8:a7:21:
c5:34:a3:1a:77:50:a5:a2:85:17:eb:be:66:8f:64:
57:fd:f2:d2:73:59:3e:26:d2:c1:0f:9c:de:a4:4d:
3b:18:90:37:d0:c5:3e:c8:fb:1a:fc:17:3d:6e:9c:
47:9e:31:c1:02:06:88:f9:90:66:00:b1:77:d0:84:
1e:b8:65:16:5f:86:5b:f0:80:1d:c9:03:c7:aa:83:
d5:29:98:64:b1:ee:ec:6d:7c:88:a4:94:ee:46:9f:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:DB:A2:76:F3:51:D6:03:B0:44:B8:54:EE:29:44:9F:1B:6F:45
X509v3 Authority Key Identifier:
keyid:BA:64:44:DC:21:CC:BE:F0:13:4D:76:43:EA:EF:D7:EC:8F:A9:58:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/NV7bonbzUdYDsES4VO4pRJ8bb0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.232.0/22
Signature Algorithm: sha256WithRSAEncryption
86:e2:dd:fa:4c:6e:b0:0e:65:8b:2e:e2:4a:60:b9:82:0f:28:
c4:55:62:aa:12:f3:ff:ba:45:81:f6:d3:a7:b0:a1:7c:67:0a:
f1:52:cd:d8:97:90:47:f7:47:94:b4:2a:6b:25:a7:d9:f9:4a:
b8:09:da:33:0a:58:e6:8c:7a:bf:d5:48:ca:dc:60:a3:e6:29:
8d:c6:72:e9:96:71:08:3a:b4:d8:36:55:59:c9:80:a8:ee:d0:
a6:25:e1:d5:36:23:28:53:62:4b:03:ee:c6:22:1b:c6:9a:f4:
35:1c:d8:ee:d4:40:dc:f7:7e:98:ef:90:a4:1d:16:c0:0e:f5:
e3:0b:b2:32:de:f1:c5:62:14:9a:e8:14:17:89:a2:23:8d:4a:
30:c5:2f:ac:80:fa:12:56:c1:9c:9d:12:ed:b6:d3:2f:9b:51:
43:19:e6:3a:1d:59:51:da:a3:19:4c:72:92:13:9e:e4:46:31:
d0:34:be:ce:69:2f:16:5d:fe:30:03:ed:f7:7e:c1:87:6c:86:
50:a4:a7:76:61:17:70:bb:7b:63:45:2b:cb:5c:5e:a2:79:6a:
ca:ba:97:8c:c3:ed:2c:32:a1:ea:75:b8:d1:c8:1f:d7:d4:d4:
8d:7a:76:f8:bf:61:d6:67:65:52:aa:f4:05:d1:02:1d:1e:ba:
f8:ab:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:01:54 2026 by rpki-client