Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/nxPePhL8tH3NJQt_EAwpwmwqNH8.roa
File: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (raw, json)
Hash identifier: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=
Subject key identifier: 9F:13:DE:3E:12:FC:B4:7D:CD:25:0B:7F:10:0C:29:C2:6C:2A:34:7F
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F987006FC9A4E548C04CD94ABF86
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/nxPePhL8tH3NJQt_EAwpwmwqNH8.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198580
IP address blocks: 176.53.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f9:87:00:6f:c9:a4:e5:48:c0:4c:d9:4a:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f13de3e12fcb47dcd250b7f100c29c26c2a347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:ed:8a:26:4a:db:6b:25:be:06:80:28:80:
c4:50:90:3d:f7:75:74:5a:d7:f9:c0:ab:28:49:1c:
9b:11:a7:12:1e:f4:60:fd:5b:89:30:8e:22:38:5e:
4e:10:0d:0c:72:aa:a0:56:e6:f1:2d:f1:ad:e0:9e:
8e:81:96:d9:e0:e2:2a:0a:b3:89:a7:06:19:28:f3:
48:bf:2a:0c:2e:40:ae:6d:b0:23:36:94:55:0a:65:
fa:76:39:65:ad:be:6f:57:e1:d5:6e:c8:27:f1:1c:
f2:0f:e6:2f:f6:0f:fa:3f:ee:e3:c0:8f:7c:59:c2:
ed:de:ce:51:f8:79:97:3a:b4:21:66:d1:f4:42:f7:
c6:73:ba:dc:42:46:1b:88:4b:db:a5:d2:0c:76:ab:
93:a4:01:87:ad:33:1c:fb:e6:dc:48:8a:c3:d7:46:
7a:38:fb:e0:84:43:9a:fa:6a:43:ec:de:37:f5:ad:
f9:02:94:8c:fd:0a:4c:c4:45:76:fe:a9:e5:ca:67:
1e:ff:15:ba:f8:f5:49:06:43:26:d1:f4:f2:d8:fb:
0c:5c:8c:b8:07:62:e6:af:10:d8:8e:85:9d:21:24:
dc:4b:f7:87:c4:90:80:1d:11:a4:05:40:b9:4f:67:
6c:00:84:74:bb:14:32:98:68:67:c5:1d:63:b4:e9:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:DE:3E:12:FC:B4:7D:CD:25:0B:7F:10:0C:29:C2:6C:2A:34:7F
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/nxPePhL8tH3NJQt_EAwpwmwqNH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8f:9e:c5:a1:97:59:2b:39:45:c2:d7:a3:90:b9:d4:b3:e2:
5a:a2:7e:3f:1f:24:f4:54:59:85:a9:ea:75:80:a4:66:2b:38:
5a:95:ce:fa:78:da:5f:9b:b7:a8:6f:0c:c8:da:ee:4f:4d:7d:
1b:aa:26:da:dd:fa:40:a7:c8:be:51:0b:38:7a:56:2a:da:9a:
4e:37:b2:ff:74:22:a1:87:7c:09:4c:f6:3d:bf:3a:95:a0:15:
7c:c4:9e:84:b1:8e:e0:4d:17:54:05:b6:76:29:05:e6:51:89:
b3:00:69:b6:d8:c3:30:63:11:8c:89:20:97:92:59:1c:b6:05:
31:44:f8:0d:e2:f8:61:fc:16:5b:e2:6d:a0:5b:26:e0:35:0f:
68:b0:e8:10:16:66:ec:12:bb:68:70:40:8f:5d:e0:70:4d:87:
95:f7:4c:ee:28:2a:f1:07:31:b8:00:3f:8a:28:e0:76:d5:d4:
89:6f:31:41:6c:a5:7e:fc:32:fd:1b:4d:95:b1:70:0c:57:af:
eb:ee:a2:aa:40:89:90:79:75:d6:89:aa:a2:a1:2e:43:93:e4:
de:32:25:ad:fe:ef:21:77:8f:f6:3e:3e:f6:fc:3b:6a:71:10:
40:e1:97:4a:8f:7c:32:5e:5c:f0:ec:7a:1a:b5:43:9f:b1:38:
5f:f1:4f:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPmHAG/JpOVIwEzZSr+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjEzZGUzZTEyZmNiNDdkY2QyNTBiN2YxMDBjMjljMjZjMmEzNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXTtiiZK22slvgaAKIDEUJA993V0
Wtf5wKsoSRybEacSHvRg/VuJMI4iOF5OEA0McqqgVubxLfGt4J6OgZbZ4OIqCrOJ
pwYZKPNIvyoMLkCubbAjNpRVCmX6djllrb5vV+HVbsgn8RzyD+Yv9g/6P+7jwI98
WcLt3s5R+HmXOrQhZtH0QvfGc7rcQkYbiEvbpdIMdquTpAGHrTMc++bcSIrD10Z6
OPvghEOa+mpD7N439a35ApSM/QpMxEV2/qnlymce/xW6+PVJBkMm0fTy2PsMXIy4
B2LmrxDYjoWdISTcS/eHxJCAHRGkBUC5T2dsAIR0uxQymGhnxR1jtOmQCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8T3j4S/LR9zSULfxAMKcJsKjR/MB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvbnhQZVBoTDh0SDNOSlF0X0VBd3B3bXdxTkg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDXBMA0G
CSqGSIb3DQEBCwUAA4IBAQBBj57FoZdZKzlFwtejkLnUs+Jaon4/HyT0VFmFqep1
gKRmKzhalc76eNpfm7eobwzI2u5PTX0bqiba3fpAp8i+UQs4elYq2ppON7L/dCKh
h3wJTPY9vzqVoBV8xJ6EsY7gTRdUBbZ2KQXmUYmzAGm22MMwYxGMiSCXklkctgUx
RPgN4vhh/BZb4m2gWybgNQ9osOgQFmbsErtocECPXeBwTYeV90zuKCrxBzG4AD+K
KOB21dSJbzFBbKV+/DL9G02VsXAMV6/r7qKqQImQeXXWiaqioS5Dk+TeMiWt/u8h
d4/2Pj72/DtqcRBA4ZdKj3wyXlzw7HoatUOfsThf8U9s
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:22 2026 by rpki-client