Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/Nw5e2XBeWz1F5V3fCUooSdjIByw.roa
File: Nw5e2XBeWz1F5V3fCUooSdjIByw.roa (raw, json)
Hash identifier: hszO3zUWOu3PHw9A9VPhEVEpCWtMNuuin6SDD3mP7Bc=
Subject key identifier: 37:0E:5E:D9:70:5E:5B:3D:45:E5:5D:DF:09:4A:28:49:D8:C8:07:2C
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 019CC26C5A2EDDEE2C55BA11D0D9616CEFC7
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/Nw5e2XBeWz1F5V3fCUooSdjIByw.roa
Signing time: Fri 06 Mar 2026 09:13:26 +0000
ROA not before: Fri 06 Mar 2026 09:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58188
IP address blocks: 91.193.244.0/22 maxlen: 22
91.193.244.0/24 maxlen: 24
91.193.245.0/24 maxlen: 24
91.193.246.0/24 maxlen: 24
91.193.247.0/24 maxlen: 24
193.27.42.0/24 maxlen: 24
2a0e:9ac0::/32 maxlen: 32
2a0e:9ac0:5544::/48 maxlen: 48
2a0e:9ac0:5545::/48 maxlen: 48
2a0e:9ac0:5546::/48 maxlen: 48
2a0e:9ac0:5547::/48 maxlen: 48
2a0e:9ac0:5548::/48 maxlen: 48
2a0e:9ac0:5549::/48 maxlen: 48
2a0e:9ac0:554a::/48 maxlen: 48
2a0e:9ac0:554b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:6c:5a:2e:dd:ee:2c:55:ba:11:d0:d9:61:6c:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Mar 6 09:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=370e5ed9705e5b3d45e55ddf094a2849d8c8072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:a7:36:b6:97:65:4d:e7:f8:ef:ec:99:84:
00:a6:05:38:d4:a3:ac:91:23:3b:e4:ea:a5:b8:ae:
22:f9:ad:6f:1c:0f:ab:48:80:84:a4:7e:c1:5a:65:
63:15:8d:b0:14:c5:6f:61:67:25:26:12:93:ce:bc:
6d:55:9d:a1:f2:fc:33:51:bf:7a:19:37:b5:8d:fb:
bf:0a:64:f3:e5:75:b7:d4:bd:f0:ba:b9:fb:e9:9c:
65:c1:b4:7f:8c:fd:9e:d6:d0:e6:bf:3b:ae:40:19:
cf:41:73:72:f7:f7:0b:52:be:29:bb:2f:59:79:10:
8f:87:bf:7a:dc:d5:c6:0e:ce:fc:25:1a:7e:b3:be:
d3:4b:13:16:5f:b6:18:35:7e:7e:e3:54:b8:4a:be:
c2:d2:cf:a1:bc:64:12:be:1a:e4:cd:54:6f:b1:e2:
02:2f:6a:30:5b:9f:01:f3:10:ae:09:d8:4d:07:50:
eb:e5:77:b3:74:fe:14:b4:ce:0c:4a:58:f4:ca:cf:
47:73:2b:9d:d3:6b:ca:54:33:06:e4:fd:a3:0c:aa:
8c:df:19:07:ee:fc:b0:e0:af:14:af:15:b8:6c:e9:
c0:6d:18:cd:7e:7f:c5:2f:47:32:d7:56:6d:ce:56:
ab:4d:49:e1:f9:1f:2c:af:74:08:df:fa:ff:40:0a:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0E:5E:D9:70:5E:5B:3D:45:E5:5D:DF:09:4A:28:49:D8:C8:07:2C
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/Nw5e2XBeWz1F5V3fCUooSdjIByw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.244.0/22
193.27.42.0/24
IPv6:
2a0e:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
d0:3e:00:3a:ba:4b:64:1d:f6:8a:7d:e5:42:af:2c:ff:cc:93:
06:d3:2e:33:88:80:be:ee:b3:85:f5:21:66:46:a7:e6:4c:a4:
0c:fb:90:5a:d8:96:4f:5e:56:2c:42:99:89:0d:dc:a0:63:f5:
04:23:84:69:a9:9f:0e:55:27:a8:a1:d8:37:ba:a7:24:c4:c3:
b2:5f:1e:c9:52:01:aa:4d:fd:35:4b:fc:d2:79:f2:d7:ec:e8:
8a:d6:0e:69:d6:2c:68:1a:23:f2:e3:34:88:f6:21:8c:76:81:
6e:1f:c5:43:8f:bc:51:3d:78:17:be:67:ea:d4:da:f9:14:14:
03:bf:08:8c:86:c1:ee:00:95:41:bf:d6:87:73:91:9c:1d:8d:
e8:40:2d:6f:2c:c0:77:af:40:49:6f:ff:7b:b7:db:25:64:9f:
cc:bc:a1:37:ad:0b:5a:8c:57:a0:42:69:71:0d:48:72:b1:81:
81:16:83:64:de:be:21:9d:3e:92:98:25:3b:17:97:47:29:e0:
7b:92:01:e2:99:f2:18:f8:ac:28:3d:b7:3d:bf:a7:cf:cd:d8:
cb:c3:37:42:eb:ec:0e:a4:04:a6:0c:b0:cc:0d:a0:40:68:f9:
74:b6:53:0a:a7:38:53:c3:92:2b:95:e3:dd:d0:7c:cc:57:2f:
1c:49:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:46:08 2026 by rpki-client