Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/2NHSSwcRqAg5h1KSDvlHSrP16hI.roa
File: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (raw, json)
Hash identifier: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=
Subject key identifier: D8:D1:D2:4B:07:11:A8:08:39:87:52:92:0E:F9:47:4A:B3:F5:EA:12
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A075B2B20A2F9E237A9CB29BA4FAE1B92E
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/2NHSSwcRqAg5h1KSDvlHSrP16hI.roa
Signing time: Sun 06 Sep 2026 07:50:40 +0000
ROA not before: Sun 06 Sep 2026 07:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.74.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:b2:b2:0a:2f:9e:23:7a:9c:b2:9b:a4:fa:e1:b9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 6 07:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8d1d24b0711a808398752920ef9474ab3f5ea12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:cd:7f:ac:4e:4b:55:6f:de:cd:ba:c0:34:
b8:0a:49:70:1c:d9:3b:cc:09:19:a3:3d:3c:03:76:
02:5d:01:c2:e6:6a:71:7f:ea:70:f7:a2:80:c1:12:
1f:88:1e:cc:20:4e:37:ae:6c:eb:98:75:3d:c9:1f:
c4:b3:30:36:40:c3:28:ed:ec:25:0a:f0:fa:85:63:
ee:28:51:78:c9:5c:82:a0:96:8a:4d:1b:37:51:86:
b2:59:0a:89:1c:a8:7c:75:6a:a4:6b:f1:89:f3:56:
7e:72:2f:1c:b4:89:46:5c:c6:c0:20:69:b8:04:0e:
ad:6b:ff:8d:77:1a:2f:cc:58:d3:48:60:d8:52:1d:
8a:d9:71:d6:9a:b4:c0:0a:1b:37:7d:53:02:fb:39:
a7:6c:98:e9:f6:32:b6:15:33:f8:49:13:47:60:74:
b2:da:d7:95:b9:75:0c:6d:a1:2e:c9:6e:80:64:b5:
70:a2:05:a4:d2:ab:84:9f:c4:f3:e0:5c:66:3d:e9:
13:55:8a:6d:62:9b:4c:db:0d:84:68:e1:23:e6:cd:
08:27:2a:62:ad:73:e8:3e:d0:a4:dd:03:92:0d:1b:
81:ab:4f:a6:34:27:b2:41:b8:1c:5f:57:ad:03:81:
47:4c:f6:af:61:ca:f0:4e:2b:45:37:84:28:52:96:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:D2:4B:07:11:A8:08:39:87:52:92:0E:F9:47:4A:B3:F5:EA:12
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/2NHSSwcRqAg5h1KSDvlHSrP16hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.52.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ba:99:f2:2d:07:52:fb:29:32:fc:1a:28:22:e0:d3:c1:db:
de:8a:fd:b3:8e:f8:17:02:db:de:6b:b0:98:aa:d8:51:a0:15:
07:85:6f:ee:58:9f:a2:c5:75:c0:46:eb:41:55:cf:43:07:f3:
9b:7e:73:dc:a4:39:33:81:4b:dd:0b:2f:eb:9f:ab:40:50:1e:
85:51:79:4e:31:b1:f4:ce:68:07:8d:f7:92:0a:cf:7f:40:c7:
63:5a:a1:f9:6b:2e:c5:70:1d:07:1e:d4:07:16:9f:a1:30:09:
1c:2b:37:9d:7a:e8:d8:cc:c4:65:aa:20:56:d1:8a:44:20:6e:
13:88:3b:dd:94:f8:78:9e:46:68:b1:c3:49:36:93:ce:fe:86:
d6:50:8d:84:c7:65:41:61:25:34:ee:c6:c8:a5:11:23:4c:7e:
05:7a:af:95:e7:c2:9d:93:78:1b:9b:9b:e7:c2:7c:e0:92:7b:
f0:e5:66:ec:06:be:ca:b7:9b:77:d8:1a:89:e2:60:6c:aa:de:
8b:81:bc:ca:6f:0c:51:4e:c8:64:24:15:d7:66:8f:aa:57:c5:
7c:fb:4d:10:a4:b7:6a:58:b1:6e:46:ec:34:32:b9:9b:02:be:
6f:64:a7:8d:32:66:00:6d:6a:95:e3:43:00:84:a0:97:f6:b4:
63:e9:d2:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB1srIKL54jepyym6T64bkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjYwOTA2MDc1MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGQxZDI0YjA3MTFhODA4Mzk4NzUyOTIwZWY5NDc0YWIzZjVlYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZvNf6xOS1Vv3s26wDS4CklwHNk7
zAkZoz08A3YCXQHC5mpxf+pw96KAwRIfiB7MIE43rmzrmHU9yR/EszA2QMMo7ewl
CvD6hWPuKFF4yVyCoJaKTRs3UYayWQqJHKh8dWqka/GJ81Z+ci8ctIlGXMbAIGm4
BA6ta/+NdxovzFjTSGDYUh2K2XHWmrTAChs3fVMC+zmnbJjp9jK2FTP4SRNHYHSy
2teVuXUMbaEuyW6AZLVwogWk0quEn8Tz4FxmPekTVYptYptM2w2EaOEj5s0IJypi
rXPoPtCk3QOSDRuBq0+mNCeyQbgcX1etA4FHTPavYcrwTitFN4QoUpbVtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjR0ksHEagIOYdSkg75R0qz9eoSMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvMk5IU1N3Y1JxQWc1aDFLU0R2bEhTclAxNmhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUo0MA0G
CSqGSIb3DQEBCwUAA4IBAQCVupnyLQdS+yky/BooIuDTwdveiv2zjvgXAtvea7CY
qthRoBUHhW/uWJ+ixXXARutBVc9DB/ObfnPcpDkzgUvdCy/rn6tAUB6FUXlOMbH0
zmgHjfeSCs9/QMdjWqH5ay7FcB0HHtQHFp+hMAkcKzedeujYzMRlqiBW0YpEIG4T
iDvdlPh4nkZoscNJNpPO/obWUI2Ex2VBYSU07sbIpREjTH4Feq+V58Kdk3gbm5vn
wnzgknvw5WbsBr7Kt5t32BqJ4mBsqt6LgbzKbwxRTshkJBXXZo+qV8V8+00QpLdq
WLFuRuw0MrmbAr5vZKeNMmYAbWqV40MAhKCX9rRj6dLL
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:58 2026 by rpki-client