Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NVW4GwsXUigPGX34bPF0IZfD-kc.roa
File: NVW4GwsXUigPGX34bPF0IZfD-kc.roa (raw, json)
Hash identifier: gu5ap+jdQrUPc2tNq2bZjWqU+w6sRiJupJonHPdUN+A=
Subject key identifier: 35:55:B8:1B:0B:17:52:28:0F:19:7D:F8:6C:F1:74:21:97:C3:FA:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C1410CB979807B8DA6C0A2513911D0CEC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NVW4GwsXUigPGX34bPF0IZfD-kc.roa
Signing time: Sat 31 Jan 2026 12:39:30 +0000
ROA not before: Sat 31 Jan 2026 12:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213413
IP address blocks: 5.175.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:14:10:cb:97:98:07:b8:da:6c:0a:25:13:91:1d:0c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 31 12:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3555b81b0b1752280f197df86cf1742197c3fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:79:c3:6d:45:e5:8a:51:b4:70:99:a6:3f:
b5:73:b7:03:ec:a4:b5:49:80:57:0f:3b:50:12:af:
0b:da:c1:c1:f3:62:da:7e:32:9f:fe:dc:3f:19:78:
a6:2c:a8:c3:c0:16:08:25:25:b3:d8:40:b7:07:88:
be:7b:97:9b:f1:2d:10:4e:b1:06:b6:20:40:d9:e5:
d3:64:31:08:91:0b:f8:02:eb:2e:02:b3:24:cf:86:
e7:85:ca:dd:66:52:ea:a5:84:ae:5b:17:02:fb:94:
b0:03:c8:55:2d:ab:1d:a1:c6:b7:50:c4:2e:c9:ba:
3f:bb:6f:70:e3:4c:43:db:b7:81:c3:da:0f:43:cf:
e1:b3:5f:13:50:00:d6:b3:71:79:d6:7d:7b:08:5c:
8b:5b:25:34:9f:17:ab:4a:35:5f:ce:d0:bb:f5:16:
b6:6f:a3:18:be:41:0d:60:32:4d:32:14:da:68:fc:
7c:55:e6:c1:d2:fb:3e:52:72:2c:78:a6:d9:f6:15:
e2:6f:96:a3:46:e3:0b:97:8d:9d:9d:bb:88:10:01:
4a:a3:0b:f4:34:8e:d7:e2:83:e0:ab:e1:4a:59:db:
f8:e1:be:10:0a:ea:03:1e:3c:8e:99:b3:4d:fa:49:
be:53:d3:72:08:00:3c:b1:02:b9:17:35:b6:a2:15:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:B8:1B:0B:17:52:28:0F:19:7D:F8:6C:F1:74:21:97:C3:FA:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NVW4GwsXUigPGX34bPF0IZfD-kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:97:38:d4:b7:3c:f9:ab:06:b0:e7:f7:c2:b4:c1:51:48:b7:
24:fa:ff:44:1a:ec:09:b2:78:6a:06:bc:ef:f4:c6:1e:c8:ec:
d2:d5:02:12:2e:47:8a:6d:af:73:82:5f:42:36:30:6e:59:c4:
e3:58:92:0a:73:4a:b8:11:f0:3e:61:b2:f2:77:07:73:9a:dc:
04:a0:9a:97:fd:f8:17:bb:84:cd:75:b6:28:0e:a7:3f:d9:29:
89:6c:cc:4d:41:c7:85:db:ca:43:fa:6c:f8:ce:9a:f3:63:5b:
64:9e:b6:03:ec:1c:7d:b0:a8:33:6e:b9:e7:88:79:42:9a:93:
a7:96:b4:52:54:14:5f:0c:d8:6e:0c:7e:7f:a3:ae:00:f8:5e:
85:73:93:2c:0b:72:92:4b:bf:f8:85:b8:72:6c:2c:27:19:fd:
56:7f:55:36:5b:0c:e6:73:34:e7:9f:10:e1:71:53:b8:32:5f:
76:15:21:bb:85:d7:54:98:fb:22:31:d4:bd:74:cd:4c:aa:de:
5c:7f:5a:3e:a1:d9:3c:9c:24:b9:24:39:30:4a:b7:a0:7d:c4:
05:53:3b:05:f7:10:80:91:ec:8f:a1:74:31:9b:f5:3b:c9:74:
4e:23:65:e3:02:12:eb:47:10:83:49:3f:64:85:e0:22:ca:60:
8f:5b:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:48 2026 by rpki-client