Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/nkC0ILInB60k7Tjk1RYSXiffld0.roa
File: nkC0ILInB60k7Tjk1RYSXiffld0.roa (raw, json)
Hash identifier: vfvY0Z8w7VV6MrjWXlFzTPbkvf0+2njyoGaRbTheF+U=
Subject key identifier: 9E:40:B4:20:B2:27:07:AD:24:ED:38:E4:D5:16:12:5E:27:DF:95:DD
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A03984031FF4805AF6B62E8878E27D6786
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/nkC0ILInB60k7Tjk1RYSXiffld0.roa
Signing time: Tue 25 Aug 2026 15:22:27 +0000
ROA not before: Tue 25 Aug 2026 15:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:84:03:1f:f4:80:5a:f6:b6:2e:88:78:e2:7d:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Aug 25 15:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e40b420b22707ad24ed38e4d516125e27df95dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:9a:65:0b:5f:0e:0e:8c:81:1c:b0:7a:8f:
c1:2c:02:c3:f7:ad:fe:8b:a0:fd:18:55:3d:91:c3:
40:04:3f:7b:97:49:42:39:10:93:6a:a0:95:85:30:
13:8e:b6:ad:28:9e:2e:8f:0c:98:7a:59:a5:bd:bf:
3f:9c:9d:1e:82:0f:ef:82:b0:d4:13:7b:49:87:f4:
78:4d:5d:d4:dc:67:6c:fc:8d:b9:e1:fe:73:ea:04:
3e:ef:eb:60:f9:81:a0:9c:b8:b4:eb:39:84:50:df:
58:58:79:14:ac:df:00:f4:4c:91:53:37:36:43:23:
84:9c:d9:89:ed:ab:87:3a:e6:d0:12:c3:c4:ba:d3:
35:5d:f6:ee:0e:fe:97:3b:cf:85:43:8d:5e:4d:05:
18:d5:29:29:9a:0e:e6:14:9a:63:f1:24:8d:11:b9:
08:05:90:b1:95:f0:e9:73:60:d7:5a:6e:97:d1:b3:
87:28:99:13:cc:c2:73:e1:39:e2:f1:e0:b0:f7:ff:
90:6f:05:a3:45:c8:df:0b:5f:5d:5e:b3:87:47:c2:
a0:ca:f2:83:28:16:73:45:e3:b8:7a:24:d2:85:79:
a4:68:b2:c4:ce:17:1d:96:d3:f0:46:26:ee:33:eb:
30:0e:57:0e:fc:cd:fe:2f:e0:ff:38:70:5c:14:be:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:B4:20:B2:27:07:AD:24:ED:38:E4:D5:16:12:5E:27:DF:95:DD
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/nkC0ILInB60k7Tjk1RYSXiffld0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
89:89:c1:85:02:c8:77:a3:9e:e7:76:21:80:49:95:67:f9:3d:
83:5a:f0:e1:55:fd:66:fe:c5:12:b4:5b:30:56:58:19:0f:b1:
bd:3d:b5:f4:f6:d8:49:b9:49:89:1e:60:b6:5d:97:9d:4f:32:
25:d3:ac:e4:b8:96:20:97:c1:50:22:96:13:1d:19:e0:94:9b:
8c:3d:a7:3e:0c:3f:1f:d8:f0:62:b2:41:ff:ef:ee:f0:5f:ae:
1a:62:48:64:63:8a:da:cd:49:8e:1a:b6:89:5a:d5:56:7a:72:
51:6f:9e:9d:8b:85:f5:4e:8a:c3:6e:a2:04:fd:85:58:95:f7:
2b:e1:62:62:b3:d5:37:17:d3:15:84:73:31:1a:76:0f:d6:15:
a8:df:e4:86:49:48:75:d3:19:01:43:f8:6c:ea:8d:1b:f7:94:
cf:55:95:fa:95:08:5d:0f:a5:fa:46:a9:80:02:d9:bb:be:c6:
36:e4:3b:63:6d:e8:44:53:7f:71:af:fa:58:02:b8:86:89:53:
1d:44:f1:3a:a4:ee:94:87:4e:b2:b0:98:4d:bc:0c:c3:dd:aa:
21:a6:7c:ba:41:76:47:76:43:8a:e3:79:fb:ad:14:88:31:d1:
84:b4:a6:8c:4e:19:b3:af:78:fd:ff:66:b9:ff:43:21:7e:d5:
4e:5d:b6:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5hAMf9IBa9rYuiHjifWeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYwODI1MTUyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTQwYjQyMGIyMjcwN2FkMjRlZDM4ZTRkNTE2MTI1ZTI3ZGY5NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTaaZQtfDg6MgRyweo/BLALD963+
i6D9GFU9kcNABD97l0lCORCTaqCVhTATjratKJ4ujwyYelmlvb8/nJ0egg/vgrDU
E3tJh/R4TV3U3Gds/I254f5z6gQ+7+tg+YGgnLi06zmEUN9YWHkUrN8A9EyRUzc2
QyOEnNmJ7auHOubQEsPEutM1XfbuDv6XO8+FQ41eTQUY1Skpmg7mFJpj8SSNEbkI
BZCxlfDpc2DXWm6X0bOHKJkTzMJz4Tni8eCw9/+QbwWjRcjfC19dXrOHR8KgyvKD
KBZzReO4eiTShXmkaLLEzhcdltPwRibuM+swDlcO/M3+L+D/OHBcFL4jKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5AtCCyJwetJO045NUWEl4n35XdMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvbmtDMElMSW5CNjBrN1RqazFSWVNYaWZmbGQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbseMA0G
CSqGSIb3DQEBCwUAA4IBAQCJicGFAsh3o57ndiGASZVn+T2DWvDhVf1m/sUStFsw
VlgZD7G9PbX09thJuUmJHmC2XZedTzIl06zkuJYgl8FQIpYTHRnglJuMPac+DD8f
2PBiskH/7+7wX64aYkhkY4razUmOGraJWtVWenJRb56di4X1TorDbqIE/YVYlfcr
4WJis9U3F9MVhHMxGnYP1hWo3+SGSUh10xkBQ/hs6o0b95TPVZX6lQhdD6X6RqmA
Atm7vsY25DtjbehEU39xr/pYAriGiVMdRPE6pO6Uh06ysJhNvAzD3aohpny6QXZH
dkOK43n7rRSIMdGEtKaMThmzr3j9/2a5/0MhftVOXbZK
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:02:07 2026 by rpki-client