Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/nRGVIh5sE05xD692H24Cxlq7V8o.roa
File: nRGVIh5sE05xD692H24Cxlq7V8o.roa (raw, json)
Hash identifier: Tc2ZVvug9tFo5lvN6aBVNCGxx5GKA6dz+Rua6DfVBe8=
Subject key identifier: 9D:11:95:22:1E:6C:13:4E:71:0F:AF:76:1F:6E:02:C6:5A:BB:57:CA
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 019C8AA9745D6C9AF7FDD5C4B9BCF64EB041
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/nRGVIh5sE05xD692H24Cxlq7V8o.roa
Signing time: Mon 23 Feb 2026 13:21:26 +0000
ROA not before: Mon 23 Feb 2026 13:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207974
IP address blocks: 185.193.173.0/24 maxlen: 24
185.214.168.0/22 maxlen: 22
185.214.168.0/24 maxlen: 24
185.214.169.0/24 maxlen: 24
185.214.170.0/24 maxlen: 24
2a0a:3b40::/36 maxlen: 36
2a0a:3b40:1000::/36 maxlen: 36
2a0a:3b40:2000::/36 maxlen: 36
2a0a:3b40:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:a9:74:5d:6c:9a:f7:fd:d5:c4:b9:bc:f6:4e:b0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Feb 23 13:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d1195221e6c134e710faf761f6e02c65abb57ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:f2:37:5c:29:35:f8:c7:7c:6e:c5:f7:1a:
16:19:32:c7:ed:04:17:2e:30:2b:ae:a3:79:6b:bc:
10:bd:20:f5:46:e9:d8:3c:6d:56:5b:e6:9e:96:cb:
67:6b:bc:f8:d1:ef:ee:c3:0b:36:d7:66:79:2b:c2:
90:26:b7:34:2c:d4:9f:29:ea:98:c6:b3:f3:69:c0:
c9:7a:d8:48:4b:5e:a9:23:36:b3:c9:49:32:8d:b4:
e9:79:27:29:cb:47:80:81:d4:95:47:88:b4:8e:1a:
94:a9:d5:43:0e:9d:5c:33:b3:8d:60:b1:fb:a8:24:
95:fb:35:0a:76:8f:73:82:9c:b2:f3:1e:9b:c2:f0:
b8:64:91:ba:b4:eb:5b:22:2c:a7:fe:7f:18:d5:76:
10:e8:e6:d7:f0:5f:56:41:9f:de:79:c9:3e:eb:8a:
24:10:31:6f:c0:29:36:94:83:65:2e:aa:1e:0e:95:
bc:e2:b8:f9:54:a6:ca:8b:e3:24:2d:da:71:16:4b:
4f:aa:80:ed:61:2f:33:4c:a3:91:e9:3e:2e:e0:5b:
29:ed:da:77:cc:9a:95:e8:b7:6e:e8:75:c7:38:8c:
26:47:46:86:0c:e9:ef:7a:dc:c4:58:9c:0f:08:3f:
28:3a:75:f6:43:6f:0f:3e:ab:b0:43:56:4a:6b:37:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:95:22:1E:6C:13:4E:71:0F:AF:76:1F:6E:02:C6:5A:BB:57:CA
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/nRGVIh5sE05xD692H24Cxlq7V8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.173.0/24
185.214.168.0/22
IPv6:
2a0a:3b40::/34
Signature Algorithm: sha256WithRSAEncryption
8f:1b:09:5f:cf:93:1e:b2:e0:0b:2a:3b:53:66:1d:e3:87:70:
49:8e:06:92:07:64:0b:f9:bf:63:65:ad:4d:16:e0:73:42:d2:
57:47:28:d9:38:c5:74:55:b8:3f:3d:aa:22:d9:6a:ba:d9:de:
9b:30:87:c9:55:46:1c:57:a5:01:8a:ae:19:1a:c9:e1:ae:43:
85:06:4d:3a:bc:9e:4b:d5:c7:f3:ac:52:2b:04:b6:a8:20:31:
92:33:db:56:6b:f0:5b:76:d5:7a:43:35:b6:1c:40:6c:ba:a9:
f7:34:62:e5:cc:13:09:02:2c:d3:96:84:8e:b9:2e:ba:4b:a7:
4d:97:dc:5a:7a:1a:04:ca:41:84:77:9b:f5:de:b6:31:48:c4:
3d:5a:f2:c5:a8:aa:dd:30:7e:7d:e8:b1:6f:6d:89:eb:39:74:
47:a8:24:69:f2:43:b4:4b:3f:4c:96:ec:e6:80:15:95:4e:c6:
af:05:62:1c:e6:8a:69:32:f5:07:78:d7:5a:5b:a1:ed:bf:54:
e3:b3:a3:46:83:6e:26:f0:c0:c0:55:3e:b1:be:83:e6:02:5f:
6b:70:51:60:9f:19:31:7e:9d:99:d5:0e:a2:60:e3:4a:f3:c6:
c7:8e:cb:cb:d0:a4:3a:c1:b6:20:76:af:05:d3:e4:1a:54:f6:
2b:7b:00:05
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZyKqXRdbJr3/dXEubz2TrBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw
MWFiODEwHhcNMjYwMjIzMTMyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDExOTUyMjFlNmMxMzRlNzEwZmFmNzYxZjZlMDJjNjVhYmI1N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k/yN1wpNfjHfG7F9xoWGTLH7QQX
LjArrqN5a7wQvSD1RunYPG1WW+aelstna7z40e/uwws212Z5K8KQJrc0LNSfKeqY
xrPzacDJethIS16pIzazyUkyjbTpeScpy0eAgdSVR4i0jhqUqdVDDp1cM7ONYLH7
qCSV+zUKdo9zgpyy8x6bwvC4ZJG6tOtbIiyn/n8Y1XYQ6ObX8F9WQZ/eeck+64ok
EDFvwCk2lINlLqoeDpW84rj5VKbKi+MkLdpxFktPqoDtYS8zTKOR6T4u4Fsp7dp3
zJqV6Ldu6HXHOIwmR0aGDOnvetzEWJwPCD8oOnX2Q28PPquwQ1ZKazci0wIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFJ0RlSIebBNOcQ+vdh9uAsZau1fKMB8GA1UdIwQY
MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt
MmMyMDFkMzBhZTA1LzEvblJHVkloNXNFMDV4RDY5MkgyNEN4bHE3VjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1
LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAucGtAwQC
udaoMA4EAgACMAgDBgYqCjtAADANBgkqhkiG9w0BAQsFAAOCAQEAjxsJX8+THrLg
Cyo7U2Yd44dwSY4GkgdkC/m/Y2WtTRbgc0LSV0co2TjFdFW4Pz2qItlqutnemzCH
yVVGHFelAYquGRrJ4a5DhQZNOryeS9XH86xSKwS2qCAxkjPbVmvwW3bVekM1thxA
bLqp9zRi5cwTCQIs05aEjrkuukunTZfcWnoaBMpBhHeb9d62MUjEPVryxaiq3TB+
feixb22J6zl0R6gkafJDtEs/TJbs5oAVlU7GrwViHOaKaTL1B3jXWluh7b9U47Oj
RoNuJvDAwFU+sb6D5gJfa3BRYJ8ZMX6dmdUOomDjSvPGx47Ly9CkOsG2IHavBdPk
GlT2K3sABQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:39 2026 by rpki-client