Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Nsh_W4gT44WToqQeMBkvLdwLp7U.roa
File: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (raw, json)
Hash identifier: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=
Subject key identifier: 36:C8:7F:5B:88:13:E3:85:93:A2:A4:1E:30:19:2F:2D:DC:0B:A7:B5
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019DB2B9613898A1AAA5B5D5856F5E174C08
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Nsh_W4gT44WToqQeMBkvLdwLp7U.roa
Signing time: Wed 22 Apr 2026 01:06:26 +0000
ROA not before: Wed 22 Apr 2026 01:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.46.251.0/24 maxlen: 24
109.69.108.0/24 maxlen: 24
194.88.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b9:61:38:98:a1:aa:a5:b5:d5:85:6f:5e:17:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Apr 22 01:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36c87f5b8813e38593a2a41e30192f2ddc0ba7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:15:ce:38:98:a1:14:ce:87:3a:ec:0a:49:
4a:08:0a:e6:32:3b:7d:f6:be:a7:a5:8c:d2:14:dd:
c3:a4:eb:51:d7:5d:51:f8:c6:80:2a:49:e7:14:a2:
57:a2:55:c1:50:df:5f:67:0c:ad:5f:fc:08:6c:91:
ab:4d:7d:b1:9f:52:9c:f1:7a:ae:b1:e1:d0:bd:99:
81:be:81:ee:8b:7b:bb:0b:67:0c:f1:2e:d8:c0:fa:
c8:a6:30:73:3c:ee:28:e8:70:72:bb:8d:be:ca:85:
fc:66:40:25:9a:2b:83:f0:6f:4c:30:0b:f3:8c:48:
63:04:fd:dc:eb:7f:2c:59:a4:82:3e:e0:eb:58:f7:
b8:d4:44:e1:69:98:4a:70:ce:3e:6d:55:ec:01:79:
7b:76:5b:cc:86:bb:ec:f3:ab:9e:76:92:43:0c:2b:
c2:47:0e:ab:5f:cd:57:e6:f4:8e:cc:58:f2:7d:48:
e8:1a:27:df:e2:37:4c:ce:55:89:d0:e1:97:be:c6:
c2:d4:5e:e6:ed:c5:ad:44:74:54:96:4a:72:d7:11:
3f:df:ef:23:e8:66:9f:b7:5d:e0:cb:0d:5b:19:b1:
bb:b9:35:e8:b8:91:a1:b3:50:bb:0a:57:9f:f5:3b:
2b:22:cf:fa:be:54:75:18:ce:13:33:70:2a:63:58:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:7F:5B:88:13:E3:85:93:A2:A4:1E:30:19:2F:2D:DC:0B:A7:B5
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Nsh_W4gT44WToqQeMBkvLdwLp7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.251.0/24
109.69.108.0/24
194.88.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:48:5a:6c:c0:77:75:2f:37:11:55:2e:50:4c:ad:07:64:f6:
8b:d9:de:36:02:b4:84:0e:c5:bb:03:83:cb:c2:09:e3:2f:69:
8b:55:33:38:5a:e0:51:20:66:d9:0e:96:9e:77:a2:94:6f:ee:
dc:43:b5:8b:73:00:00:4d:6d:36:2f:74:7f:19:2f:8b:72:5d:
a6:c0:25:8b:e9:e7:26:36:bb:59:97:b7:c0:26:f8:3a:f4:1c:
ef:4e:02:70:13:5e:68:67:da:9f:b8:2f:c8:84:07:71:30:11:
37:29:ba:bb:f3:3a:ba:24:86:60:bd:64:f0:d9:b3:8a:69:f4:
00:9c:ac:62:6d:fa:db:99:e4:ef:60:d8:a6:47:6c:b1:17:f5:
b2:10:ab:bd:4f:28:fc:69:cf:b6:9b:e8:76:15:e6:28:b0:63:
90:dc:4c:01:07:38:63:e3:c5:1c:a5:93:e0:3f:a2:84:72:a1:
11:b6:13:15:c1:a0:b8:79:1f:be:42:eb:c7:bc:07:f6:4a:2f:
9b:4b:c7:ee:bc:82:a0:15:25:dd:9e:61:08:cd:55:c1:60:bc:
6a:75:29:33:4f:2c:8b:39:a3:90:42:34:2b:98:d0:29:d6:c1:
de:8a:88:89:08:b5:6f:1a:ab:9b:95:95:23:ac:c8:ee:7b:4e:
51:22:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:13 2026 by rpki-client