Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NTOW8FFtiXwYR3sqbI1kjifJNyA.roa
File: NTOW8FFtiXwYR3sqbI1kjifJNyA.roa (raw, json)
Hash identifier: 6DHGxrYdwaMsQDnfHye/VUKXQ/rBWAgJsNJ0BPFS8T0=
Subject key identifier: 35:33:96:F0:51:6D:89:7C:18:47:7B:2A:6C:8D:64:8E:27:C9:37:20
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01987A29639A69A74DFDB9FB7A04C2920510
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NTOW8FFtiXwYR3sqbI1kjifJNyA.roa
Signing time: Tue 05 Aug 2025 12:16:29 +0000
ROA not before: Tue 05 Aug 2025 12:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12390
IP address blocks: 2a02:2fc0:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:29:63:9a:69:a7:4d:fd:b9:fb:7a:04:c2:92:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 12:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353396f0516d897c18477b2a6c8d648e27c93720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:ed:39:a5:8d:35:bf:fb:14:e4:c4:23:2e:
59:5e:b4:47:2a:17:3e:c7:e5:01:1c:89:91:85:66:
88:04:1f:7c:a8:47:f7:9d:04:af:14:53:8a:84:f6:
52:b8:bc:49:18:4c:97:52:55:f9:1c:6b:b4:70:f1:
1e:c9:b1:66:fc:2c:a7:07:af:5f:0e:10:84:e3:42:
70:c7:59:1b:c3:3e:6c:d4:32:23:db:76:97:27:b8:
14:52:3b:eb:df:3c:ce:b2:5b:2b:38:1a:7a:d3:c6:
99:c4:13:96:4d:62:f7:2c:81:28:5e:76:d5:a9:8a:
be:cf:4b:13:8e:07:74:c9:69:11:a6:95:53:a4:36:
52:0f:ae:63:42:91:b2:c1:4a:c6:85:6b:45:34:05:
35:f5:64:49:1a:97:dc:da:9f:cc:ec:b4:d5:9e:38:
34:e3:cc:fa:45:e2:e1:d1:74:10:c6:44:38:10:7c:
21:90:72:68:90:c7:8c:f4:60:31:af:24:73:ae:a6:
7b:55:3c:38:65:ad:c4:2b:28:87:c7:17:aa:43:c6:
c7:ae:9f:b8:96:d5:ab:37:12:61:5f:bd:b8:03:8f:
70:a1:e9:83:54:9d:be:4b:23:30:27:04:88:9c:73:
88:0e:2c:d1:e3:84:c0:d9:47:c6:b2:9b:a8:3d:e7:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:96:F0:51:6D:89:7C:18:47:7B:2A:6C:8D:64:8E:27:C9:37:20
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NTOW8FFtiXwYR3sqbI1kjifJNyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:15::/48
Signature Algorithm: sha256WithRSAEncryption
69:56:1e:44:84:9a:9b:eb:47:16:6b:e4:12:c1:3e:0c:2b:c9:
70:37:06:99:7b:53:68:cb:85:e6:0c:5c:77:3c:0f:92:0e:be:
85:99:d6:0d:b9:e7:0f:39:ea:13:79:c3:62:08:c9:1b:7e:6d:
ad:76:36:96:56:74:76:83:82:71:0f:f5:3c:b2:df:e5:c3:4f:
a0:20:33:40:9f:50:8b:d4:5e:bc:3b:15:3c:f3:2f:96:29:00:
65:08:18:52:f5:92:ef:80:54:d3:5f:06:04:73:c9:e1:c2:0b:
b0:cf:c5:2a:3f:58:83:15:db:9d:ed:9e:94:9a:48:0d:fa:de:
c5:46:19:ef:23:a0:b0:c4:49:28:b4:76:20:82:cd:4c:41:8f:
b4:3a:3c:c8:ec:56:e5:a5:a0:77:41:47:3f:b8:76:fb:ee:e6:
d4:14:0c:08:dd:37:34:64:1e:c8:a7:d2:59:69:bd:60:87:6a:
eb:9c:98:db:e6:c6:57:6b:3d:ac:4d:4a:4a:49:4c:f4:84:f3:
e3:44:ae:48:03:0d:68:4c:a0:81:05:42:1e:65:fb:d7:24:f0:
c2:f2:ef:5e:d8:4b:5b:79:1e:4f:11:5e:b0:2d:eb:1d:e1:d3:
c3:a8:48:5b:31:69:43:fb:ed:7e:43:88:b8:af:49:d9:eb:75:
55:db:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:08 2025 by rpki-client