Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/nwwR0-9CsEUMGPEOFFL_3bvgQUo.roa
File: nwwR0-9CsEUMGPEOFFL_3bvgQUo.roa (raw, json)
Hash identifier: k8js5BOnSh6QgVLoeeNLri5jyLltfPNXIDWo5SvT1SI=
Subject key identifier: 9F:0C:11:D3:EF:42:B0:45:0C:18:F1:0E:14:52:FF:DD:BB:E0:41:4A
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019E599AC90B83B728C5ABE9775D912DB93A
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/nwwR0-9CsEUMGPEOFFL_3bvgQUo.roa
Signing time: Sun 24 May 2026 10:49:36 +0000
ROA not before: Sun 24 May 2026 10:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203113
IP address blocks: 151.123.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:9a:c9:0b:83:b7:28:c5:ab:e9:77:5d:91:2d:b9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 24 10:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f0c11d3ef42b0450c18f10e1452ffddbbe0414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:60:e2:8e:22:15:6c:c6:4e:b0:f3:7c:7b:
dd:85:b3:0e:02:00:72:76:48:40:97:b4:16:45:ff:
2d:17:2e:02:27:60:8a:02:f8:f8:28:8d:21:5c:10:
7a:23:19:52:bf:f8:c6:e0:d9:86:22:41:7e:17:40:
04:f1:70:cd:82:4d:8b:66:05:b8:32:d2:93:eb:bb:
5d:1f:30:f6:c6:d5:2a:7d:be:dd:55:24:a7:f9:bd:
16:cd:83:a2:89:d3:ce:61:99:28:bf:6b:7d:22:e7:
23:9a:3e:75:85:86:5e:a6:3a:b9:51:2f:82:1d:44:
76:b9:1d:0a:d3:4f:95:11:c1:e9:8e:2e:91:53:5a:
33:28:2e:ee:af:85:9a:0c:e7:39:14:46:c2:7c:7d:
9a:86:4b:81:c0:60:b4:82:18:82:0d:32:c6:61:53:
4b:c4:98:9b:6c:83:ef:d3:a1:8b:a9:18:da:df:80:
5d:2a:4e:09:e4:98:17:16:31:9d:15:29:43:8e:74:
45:9e:10:95:5e:b8:a1:f6:ba:ef:22:3a:c7:c4:ef:
28:5e:8b:22:ec:16:cf:c7:8d:c3:6f:3b:49:90:17:
33:85:ae:41:6e:a2:01:0b:f1:6a:06:c5:29:68:ec:
a3:26:12:24:dd:c6:57:a5:a2:f6:aa:93:b0:8f:63:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0C:11:D3:EF:42:B0:45:0C:18:F1:0E:14:52:FF:DD:BB:E0:41:4A
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/nwwR0-9CsEUMGPEOFFL_3bvgQUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.183.0/24
Signature Algorithm: sha256WithRSAEncryption
13:dc:63:82:82:4d:07:d1:5a:ed:6f:08:4c:40:3d:92:09:b9:
d5:de:95:f4:c9:d6:e9:51:82:8b:8f:aa:0a:4b:22:21:98:88:
29:34:84:e1:15:b0:25:20:1b:ee:c0:6d:ad:e7:86:2f:1e:c3:
f6:6c:77:65:83:64:5b:13:13:a4:68:05:94:03:ea:41:8c:0b:
68:0a:a0:1a:6c:6c:90:46:e5:31:5f:d6:0c:96:49:59:e9:f5:
14:6f:ca:e8:36:29:d0:ec:a0:96:43:67:3e:65:61:bc:92:3f:
3e:2c:d8:30:50:b3:a4:47:9f:fc:41:68:e1:af:88:60:16:9b:
f2:09:18:3c:45:84:d3:64:d6:ed:99:a7:e6:63:dc:ab:e1:3a:
4a:47:a8:a2:51:f6:70:c4:ce:0e:2e:76:19:be:ec:1b:69:80:
a5:91:cc:f9:9b:6e:d8:75:f3:52:f6:c4:21:48:1a:ec:f0:28:
fa:4b:c4:aa:f0:81:ad:36:78:7a:20:16:04:aa:ee:9d:fe:c9:
e5:b2:14:62:ac:3f:5d:6d:d2:92:d3:d9:b8:d2:41:db:c8:62:
c0:c7:cd:d1:87:16:47:f8:22:72:a7:dc:85:c0:91:df:57:7c:
57:9f:ab:6a:b9:88:e2:b2:5f:f6:ed:0a:0d:22:50:16:85:39:
a4:79:20:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5ZmskLg7coxavpd12RLbk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjYwNTI0MTA0OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjBjMTFkM2VmNDJiMDQ1MGMxOGYxMGUxNDUyZmZkZGJiZTA0MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHJg4o4iFWzGTrDzfHvdhbMOAgBy
dkhAl7QWRf8tFy4CJ2CKAvj4KI0hXBB6IxlSv/jG4NmGIkF+F0AE8XDNgk2LZgW4
MtKT67tdHzD2xtUqfb7dVSSn+b0WzYOiidPOYZkov2t9Iucjmj51hYZepjq5US+C
HUR2uR0K00+VEcHpji6RU1ozKC7ur4WaDOc5FEbCfH2ahkuBwGC0ghiCDTLGYVNL
xJibbIPv06GLqRja34BdKk4J5JgXFjGdFSlDjnRFnhCVXrih9rrvIjrHxO8oXosi
7BbPx43DbztJkBczha5BbqIBC/FqBsUpaOyjJhIk3cZXpaL2qpOwj2PZ/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8MEdPvQrBFDBjxDhRS/9274EFKMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvbnd3UjAtOUNzRVVNR1BFT0ZGTF8zYnZnUVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl3u3MA0G
CSqGSIb3DQEBCwUAA4IBAQAT3GOCgk0H0VrtbwhMQD2SCbnV3pX0ydbpUYKLj6oK
SyIhmIgpNIThFbAlIBvuwG2t54YvHsP2bHdlg2RbExOkaAWUA+pBjAtoCqAabGyQ
RuUxX9YMlklZ6fUUb8roNinQ7KCWQ2c+ZWG8kj8+LNgwULOkR5/8QWjhr4hgFpvy
CRg8RYTTZNbtmafmY9yr4TpKR6iiUfZwxM4OLnYZvuwbaYClkcz5m27YdfNS9sQh
SBrs8Cj6S8Sq8IGtNnh6IBYEqu6d/snlshRirD9dbdKS09m40kHbyGLAx83RhxZH
+CJyp9yFwJHfV3xXn6tquYjisl/27QoNIlAWhTmkeSD9
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:01 2026 by rpki-client