Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/Nz-Lgn_QVOin8XWv1S64QnkcP3w.roa
File: Nz-Lgn_QVOin8XWv1S64QnkcP3w.roa (raw, json)
Hash identifier: jC3XmTzI+R2aFNtc8XjGsHrUgLJRNlcf+7Yq/k7nnf0=
Subject key identifier: 37:3F:8B:82:7F:D0:54:E8:A7:F1:75:AF:D5:2E:B8:42:79:1C:3F:7C
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019F64E6903B570751FD5E6008F747CA3E86
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/Nz-Lgn_QVOin8XWv1S64QnkcP3w.roa
Signing time: Wed 15 Jul 2026 08:30:59 +0000
ROA not before: Wed 15 Jul 2026 08:30:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204544
IP address blocks: 194.156.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:e6:90:3b:57:07:51:fd:5e:60:08:f7:47:ca:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Jul 15 08:30:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=373f8b827fd054e8a7f175afd52eb842791c3f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:b5:1c:9b:1e:a7:da:c6:64:5e:76:ba:e1:
5e:47:89:0e:4e:ba:53:20:44:b4:1b:19:8d:c1:a2:
db:51:1d:2e:76:83:e9:5c:8c:42:32:81:d9:48:ea:
da:9e:5b:be:14:49:06:19:4a:6e:ad:d1:5a:0d:e8:
db:1e:4c:6b:b6:4f:01:75:ec:ad:44:30:e8:54:38:
19:9b:78:50:4c:2a:77:f0:a4:d4:cd:5e:96:5b:7b:
20:ce:73:0d:80:40:82:93:47:f8:29:e2:d2:57:de:
f0:4f:46:43:4a:c6:89:44:e9:21:4e:b6:10:d5:62:
f3:4a:81:69:b4:45:60:3b:98:f9:7e:f3:ec:0b:43:
e9:98:ca:82:a3:55:db:69:f5:d3:40:d6:2f:6b:65:
22:19:67:be:fd:aa:40:af:ef:f0:ae:94:90:30:8e:
90:f9:36:70:23:50:b8:18:17:e2:36:95:ab:7b:a2:
69:7b:14:66:e1:b7:6f:65:47:32:97:23:5e:59:01:
a1:1d:4a:20:fa:7d:bf:6e:18:cd:f8:1b:f3:0b:94:
dd:6a:ba:d1:2e:fd:6f:0a:17:07:1f:ec:4e:4b:05:
9f:a6:1a:c3:92:aa:b3:a0:ef:6a:7b:69:35:72:60:
77:19:d0:8d:f4:b4:6a:ff:2f:96:d4:93:f1:31:da:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:8B:82:7F:D0:54:E8:A7:F1:75:AF:D5:2E:B8:42:79:1C:3F:7C
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/Nz-Lgn_QVOin8XWv1S64QnkcP3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.77.0/24
Signature Algorithm: sha256WithRSAEncryption
de:d6:f6:e9:0c:78:71:91:3c:86:4b:39:3a:bc:53:05:51:17:
91:56:ff:31:6f:4d:ca:0f:a0:49:77:2d:0c:96:29:39:98:d2:
e1:2a:f5:cd:ac:4d:f9:1a:d0:84:e5:45:d4:ca:8b:7f:ea:90:
42:ef:c5:f2:00:9c:0b:9a:11:1a:6c:49:df:d5:09:70:c5:3a:
59:e8:de:9a:cf:d5:c4:ac:bb:68:31:fb:30:d3:16:bb:d8:3f:
46:77:f6:ca:1b:5f:d1:5e:3a:3b:9b:0e:b8:97:2b:49:38:f7:
ae:a6:53:46:89:3a:a7:4b:ae:b3:11:86:3c:88:d2:c1:01:03:
e9:07:07:56:b5:8a:40:d4:9f:f4:01:ee:5b:af:5e:3a:4b:71:
9d:21:c3:ae:5c:8c:fc:80:2b:46:6a:e3:31:d2:56:15:e4:66:
2c:67:a8:f8:f6:78:4d:c8:08:1a:e9:20:8c:2e:dd:d5:36:4c:
bd:26:f0:90:11:1b:3f:77:72:58:b5:af:04:a8:58:c8:e5:13:
3e:b2:cf:90:de:4b:d6:a8:09:02:ea:eb:61:0f:fe:a3:53:cd:
8f:3e:83:d0:c2:01:55:1c:c4:9a:8f:8d:66:e9:d3:6f:43:f3:
19:35:0f:bb:3e:4b:ee:a1:e2:4f:55:61:1b:6e:74:b6:4e:0a:
a2:d9:8d:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9k5pA7VwdR/V5gCPdHyj6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjgzODA1YjIzZDhiNzg3ZDY5MjEwNTNkN2ViYWU5NzA0
MDhhMTkwHhcNMjYwNzE1MDgzMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzNmOGI4MjdmZDA1NGU4YTdmMTc1YWZkNTJlYjg0Mjc5MWMzZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEO1HJsep9rGZF52uuFeR4kOTrpT
IES0GxmNwaLbUR0udoPpXIxCMoHZSOranlu+FEkGGUpurdFaDejbHkxrtk8Bdeyt
RDDoVDgZm3hQTCp38KTUzV6WW3sgznMNgECCk0f4KeLSV97wT0ZDSsaJROkhTrYQ
1WLzSoFptEVgO5j5fvPsC0PpmMqCo1XbafXTQNYva2UiGWe+/apAr+/wrpSQMI6Q
+TZwI1C4GBfiNpWre6JpexRm4bdvZUcylyNeWQGhHUog+n2/bhjN+BvzC5TdarrR
Lv1vChcHH+xOSwWfphrDkqqzoO9qe2k1cmB3GdCN9LRq/y+W1JPxMdoUWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDc/i4J/0FTop/F1r9UuuEJ5HD98MB8GA1UdIwQY
MBaAFDFoOAWyPYt4fWkhBT1+uulwQIoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTIt
MmE0NTZmZDA5NmFiLzEvTnotTGduX1FWT2luOFhXdjFTNjRRbmtjUDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTItMmE0NTZmZDA5NmFi
LzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpxNMA0G
CSqGSIb3DQEBCwUAA4IBAQDe1vbpDHhxkTyGSzk6vFMFUReRVv8xb03KD6BJdy0M
lik5mNLhKvXNrE35GtCE5UXUyot/6pBC78XyAJwLmhEabEnf1QlwxTpZ6N6az9XE
rLtoMfsw0xa72D9Gd/bKG1/RXjo7mw64lytJOPeuplNGiTqnS66zEYY8iNLBAQPp
BwdWtYpA1J/0Ae5br146S3GdIcOuXIz8gCtGauMx0lYV5GYsZ6j49nhNyAga6SCM
Lt3VNky9JvCQERs/d3JYta8EqFjI5RM+ss+Q3kvWqAkC6uthD/6jU82PPoPQwgFV
HMSaj41m6dNvQ/MZNQ+7PkvuoeJPVWEbbnS2Tgqi2Y0G
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:50:51 2026 by rpki-client