Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NnGC_SwrR7gdgnL3lWCxvICCiKw.roa
File: NnGC_SwrR7gdgnL3lWCxvICCiKw.roa (raw, json)
Hash identifier: QhqWkXhMSd98i4HKupC6O4HMCae/cMYfBZ6NBVI1luM=
Subject key identifier: 36:71:82:FD:2C:2B:47:B8:1D:82:72:F7:95:60:B1:BC:80:82:88:AC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F8A5CF26734312BC86223493BB4D229C0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NnGC_SwrR7gdgnL3lWCxvICCiKw.roa
Signing time: Wed 22 Jul 2026 15:06:14 +0000
ROA not before: Wed 22 Jul 2026 15:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27882
IP address blocks: 49.0.184.0/21 maxlen: 21
49.0.184.0/22 maxlen: 22
49.0.184.0/23 maxlen: 23
49.0.184.0/24 maxlen: 24
49.0.185.0/24 maxlen: 24
49.0.186.0/23 maxlen: 23
49.0.186.0/24 maxlen: 24
49.0.187.0/24 maxlen: 24
49.0.188.0/22 maxlen: 22
49.0.188.0/23 maxlen: 23
49.0.188.0/24 maxlen: 24
49.0.189.0/24 maxlen: 24
49.0.190.0/23 maxlen: 23
49.0.190.0/24 maxlen: 24
49.0.191.0/24 maxlen: 24
189.28.64.0/19 maxlen: 19
189.28.64.0/24 maxlen: 24
189.28.65.0/24 maxlen: 24
189.28.66.0/24 maxlen: 24
189.28.67.0/24 maxlen: 24
189.28.68.0/23 maxlen: 23
189.28.68.0/24 maxlen: 24
189.28.69.0/24 maxlen: 24
189.28.70.0/23 maxlen: 23
189.28.70.0/24 maxlen: 24
189.28.71.0/24 maxlen: 24
189.28.72.0/24 maxlen: 24
189.28.73.0/24 maxlen: 24
189.28.74.0/23 maxlen: 23
189.28.74.0/24 maxlen: 24
189.28.75.0/24 maxlen: 24
189.28.76.0/23 maxlen: 23
189.28.76.0/24 maxlen: 24
189.28.77.0/24 maxlen: 24
189.28.78.0/23 maxlen: 23
189.28.78.0/24 maxlen: 24
189.28.79.0/24 maxlen: 24
189.28.80.0/24 maxlen: 24
189.28.81.0/24 maxlen: 24
189.28.82.0/24 maxlen: 24
189.28.83.0/24 maxlen: 24
189.28.84.0/23 maxlen: 23
189.28.84.0/24 maxlen: 24
189.28.85.0/24 maxlen: 24
189.28.86.0/24 maxlen: 24
189.28.87.0/24 maxlen: 24
189.28.88.0/24 maxlen: 24
189.28.89.0/24 maxlen: 24
189.28.90.0/24 maxlen: 24
189.28.91.0/24 maxlen: 24
189.28.92.0/23 maxlen: 23
189.28.92.0/24 maxlen: 24
189.28.93.0/24 maxlen: 24
189.28.94.0/23 maxlen: 23
189.28.94.0/24 maxlen: 24
189.28.95.0/24 maxlen: 24
203.88.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:5c:f2:67:34:31:2b:c8:62:23:49:3b:b4:d2:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 22 15:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=367182fd2c2b47b81d8272f79560b1bc808288ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4a:c5:9f:dc:3c:61:1f:37:8b:21:2c:15:5a:
db:f4:b6:d2:4a:ed:29:30:93:7a:84:b2:7f:dc:20:
08:51:e8:51:1e:85:9e:54:19:54:a5:44:00:78:9d:
c9:ce:32:df:b4:a2:45:9d:8b:38:6e:c5:22:6c:c9:
53:8c:3b:81:eb:77:22:ac:9d:1a:73:70:6b:12:de:
5c:29:a3:93:6f:e1:55:95:a4:86:e9:7b:06:77:36:
a9:76:c9:78:bc:1e:8a:92:ab:a9:9b:8d:ef:38:33:
0f:cd:6b:77:ba:fe:e1:b0:aa:ba:48:60:19:c7:82:
a8:02:e7:f3:65:e8:87:67:f3:b4:93:11:73:06:35:
00:43:4c:a7:45:f0:1c:29:f5:2a:60:da:ef:70:d5:
e4:b6:b6:cc:fd:78:be:93:2f:62:64:57:8f:36:4b:
db:3c:19:2b:6e:47:ce:9a:be:97:bb:f7:ba:8a:9d:
14:80:c8:a2:5b:73:59:af:12:26:a3:c9:25:b4:fb:
dd:57:24:d7:58:d3:fd:60:94:5b:86:04:69:d5:8f:
6c:07:0b:51:57:a6:88:a3:80:d3:b8:8a:35:67:a6:
46:a2:42:f9:3c:a5:a2:ba:54:c4:e4:f6:8d:5e:96:
fb:98:2b:b3:a7:05:99:14:1a:46:2e:bf:92:d1:a1:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:82:FD:2C:2B:47:B8:1D:82:72:F7:95:60:B1:BC:80:82:88:AC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NnGC_SwrR7gdgnL3lWCxvICCiKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.184.0/21
189.28.64.0/19
203.88.99.0/24
Signature Algorithm: sha256WithRSAEncryption
38:06:74:b0:90:a1:13:41:9b:ca:d8:da:3c:41:e4:48:6d:7e:
a6:fc:11:61:dc:2a:d9:1b:07:7c:80:7d:b4:31:bc:26:54:a4:
a3:93:56:ce:75:d4:bc:56:60:b3:05:68:34:b0:40:70:43:1f:
de:25:14:b0:e4:59:83:dc:39:86:24:45:b7:e6:69:74:83:c9:
97:52:6c:7b:56:fe:bc:d4:83:1b:ff:d9:20:a1:43:59:1c:5a:
7d:2c:ab:a3:b0:63:61:8a:2f:db:7d:49:ef:ad:66:0b:46:1a:
a5:d3:f6:4a:7f:e0:19:59:c5:29:87:55:14:d5:89:1d:97:e2:
79:0b:fc:58:64:d7:ab:2c:ca:9e:a7:5b:95:34:1c:90:98:c7:
4b:b3:d8:f2:a8:7a:90:34:77:00:f1:cf:99:8b:10:3e:33:9c:
57:db:a1:81:ff:cd:7b:4a:cc:11:e2:bd:a1:80:9d:ff:ad:7a:
d2:2b:a7:89:8d:e8:de:68:49:3b:d0:e9:bc:53:25:e9:6e:79:
27:fd:83:96:3e:7c:70:5c:bd:ac:a3:4a:13:a5:2b:4e:b8:01:
e5:8d:3b:8c:43:bc:15:39:63:2b:b6:95:0a:fe:3b:d9:a8:9c:
9d:a0:f5:cd:e0:89:26:a3:b8:7e:2a:87:02:69:bc:8a:ae:15:
f6:a8:b9:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+KXPJnNDEryGIjSTu00inAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwNzIyMTUwNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjcxODJmZDJjMmI0N2I4MWQ4MjcyZjc5NTYwYjFiYzgwODI4OGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UrFn9w8YR83iyEsFVrb9LbSSu0p
MJN6hLJ/3CAIUehRHoWeVBlUpUQAeJ3JzjLftKJFnYs4bsUibMlTjDuB63cirJ0a
c3BrEt5cKaOTb+FVlaSG6XsGdzapdsl4vB6Kkqupm43vODMPzWt3uv7hsKq6SGAZ
x4KoAufzZeiHZ/O0kxFzBjUAQ0ynRfAcKfUqYNrvcNXktrbM/Xi+ky9iZFePNkvb
PBkrbkfOmr6Xu/e6ip0UgMiiW3NZrxImo8kltPvdVyTXWNP9YJRbhgRp1Y9sBwtR
V6aIo4DTuIo1Z6ZGokL5PKWiulTE5PaNXpb7mCuzpwWZFBpGLr+S0aGHxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDZxgv0sK0e4HYJy95VgsbyAgoisMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvTm5HQ19Td3JSN2dkZ25MM2xXQ3h2SUNDaUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDMQC4AwQF
vRxAAwQAy1hjMA0GCSqGSIb3DQEBCwUAA4IBAQA4BnSwkKETQZvK2No8QeRIbX6m
/BFh3CrZGwd8gH20MbwmVKSjk1bOddS8VmCzBWg0sEBwQx/eJRSw5FmD3DmGJEW3
5ml0g8mXUmx7Vv681IMb/9kgoUNZHFp9LKujsGNhii/bfUnvrWYLRhql0/ZKf+AZ
WcUph1UU1Ykdl+J5C/xYZNerLMqep1uVNByQmMdLs9jyqHqQNHcA8c+ZixA+M5xX
26GB/817SswR4r2hgJ3/rXrSK6eJjejeaEk70Om8UyXpbnkn/YOWPnxwXL2so0oT
pStOuAHljTuMQ7wVOWMrtpUK/jvZqJydoPXN4Ikmo7h+KocCabyKrhX2qLm6
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:47 2026 by rpki-client