Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/Ni9cQ-__7IlFIEScWKkm8nTwcNM.roa
File: Ni9cQ-__7IlFIEScWKkm8nTwcNM.roa (raw, json)
Hash identifier: KZYmuutPEp1K/Rtla/BK3MqBgIvimyKNEmmqmQ1JLcU=
Subject key identifier: 36:2F:5C:43:EF:FF:EC:89:45:20:44:9C:58:A9:26:F2:74:F0:70:D3
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 0199B8922BD575ABAB1D87708F64F551D283
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/Ni9cQ-__7IlFIEScWKkm8nTwcNM.roa
Signing time: Mon 06 Oct 2025 08:10:11 +0000
ROA not before: Mon 06 Oct 2025 08:10:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39643
IP address blocks: 194.50.106.0/24 maxlen: 24
2001:678:fac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:92:2b:d5:75:ab:ab:1d:87:70:8f:64:f5:51:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Oct 6 08:10:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=362f5c43efffec894520449c58a926f274f070d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:33:dc:f3:59:a3:b6:c5:04:e7:17:8d:89:
ed:88:f5:f9:7b:50:3c:4a:93:9c:63:6d:d2:ca:f0:
38:f0:31:0d:1f:11:64:85:73:f7:1a:b3:77:c7:a8:
ff:38:51:34:a3:82:16:d3:8b:08:64:ba:e2:4f:a2:
88:89:f2:34:40:a6:89:d2:40:66:3d:10:d8:1f:17:
8e:ca:68:12:36:3c:ef:de:3b:50:da:5e:45:ab:3a:
b1:c7:fc:4e:b5:62:5c:2d:d7:6b:8d:a5:f4:04:3f:
9a:84:52:0a:63:85:01:70:67:16:c9:cb:36:38:f3:
87:6f:cc:13:c4:77:f9:60:27:34:de:0c:f8:ca:53:
11:f3:0e:64:10:39:66:cc:7b:83:ae:97:ea:53:59:
9e:fa:86:6b:bf:53:af:a1:c9:05:44:fe:28:7c:40:
80:ae:39:0f:0e:0f:d3:52:9a:49:d6:ac:0e:f7:82:
2e:d8:46:70:51:16:d0:42:79:ce:0e:45:6a:d3:24:
40:cf:51:e4:4c:ae:ae:0c:cd:bb:a9:7b:91:97:01:
b9:b1:27:ce:05:5c:04:d7:d2:2a:88:b0:a9:4e:a4:
1c:ad:22:ff:a4:ee:da:ed:58:12:85:6d:13:3b:a0:
a4:04:5c:bb:35:54:f0:9d:35:1e:4a:0a:99:59:f8:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:5C:43:EF:FF:EC:89:45:20:44:9C:58:A9:26:F2:74:F0:70:D3
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/Ni9cQ-__7IlFIEScWKkm8nTwcNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.106.0/24
IPv6:
2001:678:fac::/48
Signature Algorithm: sha256WithRSAEncryption
6d:eb:09:fa:7d:da:df:71:b9:34:9b:a8:e8:56:41:a8:ce:8a:
a0:0c:4e:c2:fb:85:a2:b5:28:49:45:19:30:e0:58:64:5e:ad:
0c:43:1b:40:57:ea:fc:4f:73:53:e4:ca:7c:f8:ec:00:07:27:
7a:e1:8f:5c:ae:43:d6:b2:67:31:21:2f:94:f9:3d:2a:72:b7:
cf:c9:66:53:35:cd:f6:61:5e:ee:c4:19:d0:c7:34:03:75:0d:
3c:2a:4c:32:1f:b2:c0:13:7b:82:b1:d3:75:7e:38:01:5a:32:
f4:c9:43:be:28:75:5d:50:ec:93:cb:50:c4:c2:e0:43:ab:9f:
d9:49:d6:9d:3d:eb:18:46:a5:1f:cb:42:4a:0d:9d:27:01:1f:
33:63:f6:36:92:14:4c:bd:10:84:c7:dd:63:5c:0e:ab:d9:04:
c2:1f:d3:2b:06:51:bb:8c:ad:49:8b:e4:fc:1e:02:38:0c:52:
3c:30:e2:7a:71:22:bf:e8:ae:ca:6c:d2:27:a0:fb:c7:5d:ee:
c2:3a:85:73:46:8f:0d:56:6d:10:84:ec:0a:fc:89:54:0c:9f:
27:3e:a8:b1:07:ff:7c:b6:18:a1:b1:80:ff:38:7f:3f:e6:d4:
60:ca:6e:90:92:4b:72:8d:a2:ff:f6:29:fb:4e:e6:38:7c:27:
4a:36:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:17 2025 by rpki-client