Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NX1W1XU4m9CHGcHLU45vbkbx_o0.roa
File: NX1W1XU4m9CHGcHLU45vbkbx_o0.roa (raw, json)
Hash identifier: BPnoxFO7YXCoSeO1ggpZtD+VvP2caZ3V1X7/uMcS824=
Subject key identifier: 35:7D:56:D5:75:38:9B:D0:87:19:C1:CB:53:8E:6F:6E:46:F1:FE:8D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019DF67FE3D93ABD00BD8C4AC97DE8DB15DE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NX1W1XU4m9CHGcHLU45vbkbx_o0.roa
Signing time: Tue 05 May 2026 04:57:49 +0000
ROA not before: Tue 05 May 2026 04:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264628
IP address blocks: 153.51.224.0/20 maxlen: 20
153.51.224.0/21 maxlen: 21
153.51.224.0/22 maxlen: 22
153.51.224.0/23 maxlen: 23
153.51.224.0/24 maxlen: 24
153.51.225.0/24 maxlen: 24
153.51.226.0/23 maxlen: 23
153.51.226.0/24 maxlen: 24
153.51.227.0/24 maxlen: 24
153.51.228.0/22 maxlen: 22
153.51.228.0/23 maxlen: 23
153.51.228.0/24 maxlen: 24
153.51.229.0/24 maxlen: 24
153.51.230.0/23 maxlen: 23
153.51.230.0/24 maxlen: 24
153.51.231.0/24 maxlen: 24
153.51.232.0/21 maxlen: 21
153.51.232.0/22 maxlen: 22
153.51.232.0/23 maxlen: 23
153.51.232.0/24 maxlen: 24
153.51.233.0/24 maxlen: 24
153.51.234.0/23 maxlen: 23
153.51.234.0/24 maxlen: 24
153.51.235.0/24 maxlen: 24
153.51.236.0/22 maxlen: 22
153.51.236.0/23 maxlen: 23
153.51.236.0/24 maxlen: 24
153.51.237.0/24 maxlen: 24
153.51.238.0/23 maxlen: 23
153.51.238.0/24 maxlen: 24
153.51.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f6:7f:e3:d9:3a:bd:00:bd:8c:4a:c9:7d:e8:db:15:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 5 04:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=357d56d575389bd08719c1cb538e6f6e46f1fe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:80:2a:a5:8e:bc:a3:b9:a4:12:42:1e:ee:
03:e5:08:f4:d1:d4:df:71:c6:c9:df:c3:c8:0e:38:
c4:d8:51:41:6b:0b:d6:05:9e:c1:b1:46:ae:a2:b7:
56:3d:47:d8:04:2d:79:35:54:19:be:46:f3:3e:8b:
e6:27:1b:5c:99:f6:c5:24:5e:03:3e:b7:8b:a9:fe:
e0:fb:4a:df:b7:95:43:8c:c8:96:80:81:c9:5f:33:
07:11:6e:26:c1:59:b9:b3:ba:f8:e9:78:39:11:9a:
54:65:bf:73:63:1a:90:61:ee:45:55:95:e7:60:2c:
d9:cb:8f:18:e1:24:93:3d:bd:f9:51:c6:9b:74:5e:
bf:b8:34:66:b5:39:8c:35:d8:bd:19:09:ed:cc:cc:
d9:6c:fe:7a:98:93:bf:84:d4:99:03:02:c5:78:b5:
d8:fd:60:42:bd:a1:03:e0:58:69:25:5b:0c:47:78:
a3:54:ec:41:3c:d6:1f:0b:95:dd:df:49:18:ec:f8:
61:a8:2f:12:8f:d7:0a:68:c4:c2:6c:bd:0a:07:4d:
25:a9:42:04:e0:06:4c:2b:aa:a1:af:4a:fa:d9:43:
70:cd:8b:e9:55:ea:b6:34:cd:99:b2:98:76:ee:97:
c1:5a:a8:4f:ab:97:27:c7:67:4a:d1:63:49:56:b8:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7D:56:D5:75:38:9B:D0:87:19:C1:CB:53:8E:6F:6E:46:F1:FE:8D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NX1W1XU4m9CHGcHLU45vbkbx_o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
af:32:f2:b8:ec:a1:76:25:2e:23:d6:ad:c9:4d:61:77:e1:82:
f5:74:20:92:1c:78:55:a6:69:41:50:ee:c6:ae:d6:83:52:a3:
4b:80:08:8b:97:6e:78:12:29:c6:71:1d:89:03:c5:4b:19:75:
61:3f:b2:ff:d7:a9:66:78:70:dd:f0:66:27:29:de:c6:07:9c:
0c:3e:bd:f3:81:ef:e6:aa:72:8b:cf:be:86:d9:b4:98:d5:cc:
a5:06:5f:fc:96:c6:73:71:6a:49:57:c5:3a:87:63:0e:ea:e2:
7c:36:ac:3e:4d:a2:d7:6b:82:ce:c6:5b:95:ca:da:83:64:61:
98:7d:cd:8e:b8:13:e4:99:1a:0a:b9:b2:84:17:43:be:6d:64:
50:97:22:be:43:02:1a:19:c1:29:76:a2:4e:08:5a:a0:c3:6d:
cc:7f:1d:87:b3:de:1e:dd:57:be:70:41:20:df:c1:e0:12:70:
2e:2b:33:06:ea:7e:25:ca:6e:dc:31:51:1e:6c:fc:26:91:8c:
81:1b:08:9d:5d:03:3c:08:c7:58:47:7c:90:b5:08:5c:52:e4:
51:9e:bb:49:d8:5d:94:e6:e2:5f:b8:06:82:3f:44:f8:ba:5f:
e3:4e:40:51:cd:0a:40:52:8f:9f:bb:e4:5b:e0:60:27:4a:40:
60:e6:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:31 2026 by rpki-client