Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NvbS5sOAUNfOOpt29VvOaI0Q1GU.roa
File: NvbS5sOAUNfOOpt29VvOaI0Q1GU.roa (raw, json)
Hash identifier: GL59Ic8ka/niFso+F/8Eg88mvm1XwcLa8ddONMXcl3Y=
Subject key identifier: 36:F6:D2:E6:C3:80:50:D7:CE:3A:9B:76:F5:5B:CE:68:8D:10:D4:65
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019DABFC88D19A763E9E94BC23DCE5FE94BF
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NvbS5sOAUNfOOpt29VvOaI0Q1GU.roa
Signing time: Mon 20 Apr 2026 17:42:27 +0000
ROA not before: Mon 20 Apr 2026 17:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 5.42.211.0/24 maxlen: 24
45.131.163.0/24 maxlen: 24
212.46.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:fc:88:d1:9a:76:3e:9e:94:bc:23:dc:e5:fe:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 20 17:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f6d2e6c38050d7ce3a9b76f55bce688d10d465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:b1:74:37:c2:bd:64:03:30:0d:a1:a3:da:
53:32:41:c0:32:89:74:9d:5e:b5:e2:6c:82:ec:3f:
89:c3:66:65:10:56:55:f5:5c:16:e9:39:8e:96:4e:
e2:15:80:a3:13:84:be:01:5e:8e:bb:e9:11:64:4f:
34:5c:95:22:c5:f5:a5:0a:cd:5d:8a:fc:79:f3:31:
e8:23:9a:3f:e4:2a:29:6b:15:b6:68:2e:8f:cb:6f:
cd:ea:0d:f4:90:08:6c:13:5b:11:e3:61:f9:ed:7d:
1d:47:17:0b:56:82:95:94:55:9f:20:fd:76:8e:9e:
4c:5f:10:a5:24:68:23:a7:6e:17:ce:46:28:bb:ec:
61:34:50:b0:c7:ed:44:5c:be:3c:07:f8:15:de:e8:
8f:37:58:f2:30:04:aa:1b:95:89:5a:40:38:68:20:
e5:8d:d0:91:87:b1:b2:5d:2f:d5:45:11:09:f0:d9:
92:34:31:49:4b:5e:8b:80:89:4b:32:18:aa:d4:59:
5e:ae:80:d9:0a:7c:5b:07:69:cf:87:82:96:a0:70:
40:85:24:08:ca:67:9a:e0:04:34:9b:1f:34:8d:e6:
8f:bd:3b:63:81:1c:e6:4a:d2:17:93:b1:5d:3f:7c:
11:8e:50:1f:d2:af:fe:e7:cd:bf:13:47:77:10:43:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:D2:E6:C3:80:50:D7:CE:3A:9B:76:F5:5B:CE:68:8D:10:D4:65
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NvbS5sOAUNfOOpt29VvOaI0Q1GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.211.0/24
45.131.163.0/24
212.46.36.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0c:96:7b:b7:e5:4f:f4:80:58:6c:e6:d6:15:0b:f6:ac:f6:
8e:df:37:b2:66:76:75:c9:43:c7:3a:79:39:5d:04:9d:76:22:
a8:e7:39:c1:0f:5e:7e:55:bb:45:1f:d0:52:a0:05:52:f8:87:
dd:b0:de:3d:6b:5f:0f:77:d7:b2:1b:a3:2c:4a:42:6a:2d:f0:
4d:07:bb:4b:5e:cd:41:01:b6:9d:bf:fd:3e:09:c6:2f:54:db:
55:3b:28:a5:98:c3:79:65:02:7c:a5:1b:c2:2c:b1:c2:00:af:
b4:31:1b:50:b3:2f:c3:7e:63:53:1e:5a:eb:f4:dd:f0:bd:74:
88:6d:3e:60:52:39:24:34:e8:c3:1c:05:cd:e5:54:cb:15:37:
39:63:02:93:60:57:0a:da:64:04:77:39:5a:8a:bc:8d:a6:3e:
2c:ab:8b:ad:76:46:b0:0b:e9:40:9c:0c:f4:46:72:51:6c:c3:
58:06:c6:86:07:79:cb:7b:6a:cf:af:ed:ec:cb:98:dd:9f:91:
32:02:be:08:97:25:4c:b6:01:a2:44:32:41:92:33:f0:04:1f:
a5:00:b4:76:70:f5:48:bf:21:5f:35:f5:4d:67:50:0c:17:b6:
65:c5:8f:7f:83:9b:db:c7:36:b7:aa:df:d3:a8:b7:b7:20:2f:
4a:a3:65:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ2r/IjRmnY+npS8I9zl/pS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNDIwMTc0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmY2ZDJlNmMzODA1MGQ3Y2UzYTliNzZmNTViY2U2ODhkMTBkNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymuxdDfCvWQDMA2ho9pTMkHAMol0
nV614myC7D+Jw2ZlEFZV9VwW6TmOlk7iFYCjE4S+AV6Ou+kRZE80XJUixfWlCs1d
ivx58zHoI5o/5CopaxW2aC6Py2/N6g30kAhsE1sR42H57X0dRxcLVoKVlFWfIP12
jp5MXxClJGgjp24XzkYou+xhNFCwx+1EXL48B/gV3uiPN1jyMASqG5WJWkA4aCDl
jdCRh7GyXS/VRREJ8NmSNDFJS16LgIlLMhiq1FleroDZCnxbB2nPh4KWoHBAhSQI
ymea4AQ0mx80jeaPvTtjgRzmStIXk7FdP3wRjlAf0q/+582/E0d3EEMjcwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDb20ubDgFDXzjqbdvVbzmiNENRlMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvTnZiUzVzT0FVTmZPT3B0MjlWdk9hSTBRMUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSrTAwQA
LYOjAwQA1C4kMA0GCSqGSIb3DQEBCwUAA4IBAQAQDJZ7t+VP9IBYbObWFQv2rPaO
3zeyZnZ1yUPHOnk5XQSddiKo5znBD15+VbtFH9BSoAVS+IfdsN49a18Pd9eyG6Ms
SkJqLfBNB7tLXs1BAbadv/0+CcYvVNtVOyilmMN5ZQJ8pRvCLLHCAK+0MRtQsy/D
fmNTHlrr9N3wvXSIbT5gUjkkNOjDHAXN5VTLFTc5YwKTYFcK2mQEdzlairyNpj4s
q4utdkawC+lAnAz0RnJRbMNYBsaGB3nLe2rPr+3sy5jdn5EyAr4IlyVMtgGiRDJB
kjPwBB+lALR2cPVIvyFfNfVNZ1AMF7ZlxY9/g5vbxza3qt/TqLe3IC9Ko2Wr
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:49 2026 by rpki-client