Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/Npw06d3i6OT6W1cbnDgGuSW4ge4.roa
File: Npw06d3i6OT6W1cbnDgGuSW4ge4.roa (raw, json)
Hash identifier: XuYzx4X8wj26HqV6SxCe8B8EhqEndYSd+I3KwtxjVxU=
Subject key identifier: 36:9C:34:E9:DD:E2:E8:E4:FA:5B:57:1B:9C:38:06:B9:25:B8:81:EE
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019C7A8ED7BDE3DDA361C5EFFF92396EA9FD
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/Npw06d3i6OT6W1cbnDgGuSW4ge4.roa
Signing time: Fri 20 Feb 2026 10:18:27 +0000
ROA not before: Fri 20 Feb 2026 10:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56911
IP address blocks: 176.58.80.0/21 maxlen: 21
185.49.248.0/22 maxlen: 24
185.146.64.0/24 maxlen: 24
185.169.236.0/23 maxlen: 24
185.169.236.0/24 maxlen: 24
185.169.237.0/24 maxlen: 24
185.169.238.0/23 maxlen: 24
195.234.92.0/23 maxlen: 23
2a01:a620::/32 maxlen: 48
2a0a:7300::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:8e:d7:bd:e3:dd:a3:61:c5:ef:ff:92:39:6e:a9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Feb 20 10:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=369c34e9dde2e8e4fa5b571b9c3806b925b881ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:5e:8a:14:45:b5:ac:8d:0e:77:0d:14:bc:
75:40:07:55:08:bc:da:9b:8a:f6:4f:91:3e:e4:fb:
5d:7c:69:8a:73:be:4a:0b:75:4f:df:07:82:81:96:
51:95:33:3f:d0:45:ba:1e:ed:f4:35:63:87:4d:15:
5f:ba:7e:14:97:4f:ce:df:1e:8a:a4:7d:ec:81:be:
3d:77:fd:1a:3e:25:eb:8d:48:4d:56:03:96:66:46:
d4:25:cb:71:ca:74:33:ce:d3:0d:06:a0:f8:f6:c5:
1e:8f:89:43:de:14:b0:4a:f6:c9:f4:63:55:51:b0:
85:2a:84:d6:11:c9:28:13:41:30:13:61:e3:a1:dc:
f7:cd:2e:04:b1:25:3e:b2:9d:6f:7b:65:de:79:5b:
3f:2b:99:09:ed:9a:d5:63:02:74:9f:ee:03:86:ca:
cf:78:6c:2f:9e:48:0b:3d:f0:f4:0c:e2:2b:ca:57:
44:fb:07:a3:fc:0e:bf:85:f6:42:e2:b6:3b:26:33:
c6:dd:42:ed:ed:2c:52:38:20:82:1d:3b:6f:73:35:
8f:f6:ee:c2:d5:69:ed:d5:72:42:c6:64:4d:f6:a2:
68:e8:0b:63:9b:3c:bd:fa:8b:df:7d:35:08:2c:f3:
a7:7c:d2:63:0d:94:f6:c3:43:4c:7a:5f:39:5c:53:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:34:E9:DD:E2:E8:E4:FA:5B:57:1B:9C:38:06:B9:25:B8:81:EE
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/Npw06d3i6OT6W1cbnDgGuSW4ge4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.80.0/21
185.49.248.0/22
185.146.64.0/24
185.169.236.0/22
195.234.92.0/23
IPv6:
2a01:a620::/32
2a0a:7300::/32
Signature Algorithm: sha256WithRSAEncryption
73:52:32:12:f5:a1:9e:e8:3d:7f:e9:99:2a:73:bc:f1:15:36:
ef:04:4c:6e:d7:d8:20:06:74:d9:81:ba:31:2a:60:9b:6b:e0:
7b:72:28:04:fd:2f:6f:d3:f7:78:61:90:b2:d0:88:89:14:93:
1d:17:7a:5c:d4:14:38:0a:57:fa:11:79:87:6b:41:77:5b:49:
91:63:49:2d:86:1e:c8:ca:30:eb:09:4a:e4:5b:28:8f:9f:cc:
b1:13:01:53:7f:8d:f8:6e:61:8d:da:e3:0b:99:ac:08:6f:b1:
a9:ec:0a:8f:41:b5:b9:19:75:02:aa:07:b6:b6:f9:4e:a8:6a:
e8:89:7d:98:e4:be:90:82:68:74:c5:b6:b3:3f:33:c5:08:60:
24:1b:60:4f:4b:cc:cf:de:f4:bb:3a:35:40:cd:a1:51:c4:a3:
77:83:f4:6f:38:df:18:d2:26:a1:e0:3a:ee:0d:0b:83:49:f4:
b0:bd:6c:3b:72:18:97:f0:4a:f6:c5:e2:40:31:af:61:d8:28:
07:c0:ba:bc:34:98:d7:01:38:7a:0a:75:3a:06:cf:a9:9b:1a:
58:13:d2:66:2f:21:a0:86:11:f1:69:0a:5d:d2:ba:77:28:c0:
8a:9a:9f:44:c4:cd:2c:7d:ce:e0:92:c1:d1:57:49:c2:eb:80:
f2:5d:0a:7b
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZx6jte9492jYcXv/5I5bqn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjYwMjIwMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjljMzRlOWRkZTJlOGU0ZmE1YjU3MWI5YzM4MDZiOTI1Yjg4MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZteihRFtayNDncNFLx1QAdVCLza
m4r2T5E+5PtdfGmKc75KC3VP3weCgZZRlTM/0EW6Hu30NWOHTRVfun4Ul0/O3x6K
pH3sgb49d/0aPiXrjUhNVgOWZkbUJctxynQzztMNBqD49sUej4lD3hSwSvbJ9GNV
UbCFKoTWEckoE0EwE2Hjodz3zS4EsSU+sp1ve2XeeVs/K5kJ7ZrVYwJ0n+4DhsrP
eGwvnkgLPfD0DOIryldE+wej/A6/hfZC4rY7JjPG3ULt7SxSOCCCHTtvczWP9u7C
1Wnt1XJCxmRN9qJo6Atjmzy9+ovffTUILPOnfNJjDZT2w0NMel85XFNJTQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFDacNOnd4ujk+ltXG5w4BrkluIHuMB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvTnB3MDZkM2k2T1Q2VzFjYm5EZ0d1U1c0Z2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQDsDpQAwQC
uTH4AwQAuZJAAwQCuansAwQBw+pcMBQEAgACMA4DBQAqAaYgAwUAKgpzADANBgkq
hkiG9w0BAQsFAAOCAQEAc1IyEvWhnug9f+mZKnO88RU27wRMbtfYIAZ02YG6MSpg
m2vge3IoBP0vb9P3eGGQstCIiRSTHRd6XNQUOApX+hF5h2tBd1tJkWNJLYYeyMow
6wlK5Fsoj5/MsRMBU3+N+G5hjdrjC5msCG+xqewKj0G1uRl1AqoHtrb5Tqhq6Il9
mOS+kIJodMW2sz8zxQhgJBtgT0vMz970uzo1QM2hUcSjd4P0bzjfGNImoeA67g0L
g0n0sL1sO3IYl/BK9sXiQDGvYdgoB8C6vDSY1wE4egp1OgbPqZsaWBPSZi8hoIYR
8WkKXdK6dyjAipqfRMTNLH3O4JLB0VdJwuuA8l0Kew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:40 2026 by rpki-client