Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/N0wwWKKKxqPy6RSA6nnS7cvudS0.roa
File: N0wwWKKKxqPy6RSA6nnS7cvudS0.roa (raw, json)
Hash identifier: ygfEJ52vLUUPAjwZYZC3H5T8g3GhyC6qh+q6gI3gwWw=
Subject key identifier: 37:4C:30:58:A2:8A:C6:A3:F2:E9:14:80:EA:79:D2:ED:CB:EE:75:2D
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0198CBD7A62DD02B29F4C43DEF2ECF2DEC1F
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/N0wwWKKKxqPy6RSA6nnS7cvudS0.roa
Signing time: Thu 21 Aug 2025 08:56:04 +0000
ROA not before: Thu 21 Aug 2025 08:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 109.122.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:d7:a6:2d:d0:2b:29:f4:c4:3d:ef:2e:cf:2d:ec:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 21 08:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374c3058a28ac6a3f2e91480ea79d2edcbee752d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:d4:ce:f4:14:49:6a:fb:d6:e8:a4:9b:2d:
90:79:72:12:7f:1e:56:c1:b7:30:87:12:7b:0d:0b:
65:d9:92:4b:20:d6:c4:12:5c:24:14:fa:2c:63:ea:
5d:70:06:59:2e:de:b4:50:cd:92:7f:d6:a3:41:a9:
05:5b:05:06:43:37:52:1d:f6:b6:85:89:58:be:af:
2a:3c:f8:c4:a1:fa:fa:9c:09:60:01:10:2c:b9:8e:
ab:08:34:5f:11:05:fe:a7:c3:9a:84:11:2f:21:b4:
da:d9:d1:59:5f:2f:6a:e9:ea:ca:87:89:9d:69:39:
6b:e7:e2:d7:e3:ea:0a:87:f2:61:d6:5d:51:b0:1c:
51:7f:6a:5e:d3:48:fc:53:d2:0c:13:41:c8:ff:e4:
18:08:c5:ca:c9:cb:44:b9:6a:3c:93:2d:84:1e:61:
29:df:64:c1:1e:71:6b:e7:a5:64:71:cd:32:8c:ad:
f0:ed:4e:cd:2b:ee:cd:55:92:14:a3:25:3d:8c:fb:
45:89:3a:92:06:95:c8:ef:40:9c:a1:3c:12:b0:2e:
c9:22:bc:18:b1:3b:38:45:34:eb:14:59:2c:1c:e2:
48:38:43:09:ce:20:ce:31:3c:3a:5e:aa:fb:f6:b9:
b2:77:e4:82:1a:fe:65:91:50:39:fb:d9:9d:49:3a:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:30:58:A2:8A:C6:A3:F2:E9:14:80:EA:79:D2:ED:CB:EE:75:2D
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/N0wwWKKKxqPy6RSA6nnS7cvudS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.9.0/24
Signature Algorithm: sha256WithRSAEncryption
41:08:25:fa:47:80:65:34:e0:0b:73:b7:8b:6b:99:fb:70:72:
95:d4:d6:09:f6:a2:17:32:58:0a:4b:84:27:bb:1f:c0:ac:09:
70:92:b0:ce:fe:69:82:7c:ff:5c:f2:87:fb:89:09:d7:e2:4f:
d1:41:9b:40:d0:94:f9:59:94:3f:5b:65:24:88:73:91:35:fd:
ff:eb:96:54:df:8d:86:6b:4c:4a:36:66:56:aa:00:02:22:51:
f7:b2:bc:e7:e2:63:d5:ff:e5:8e:9e:68:08:c6:94:ec:cd:77:
7e:3b:d0:8a:9b:82:0f:85:64:ee:a1:6b:b6:43:b9:a4:a2:6c:
9b:c6:a2:09:e0:9b:5f:ce:7f:60:bc:c2:cf:20:cb:6b:0f:7d:
31:9e:cb:63:56:79:f2:8d:e9:46:76:51:39:72:db:c1:19:95:
2f:b9:b1:87:8f:be:5a:2d:7c:11:d1:20:b0:0c:ce:21:5a:6d:
d5:83:6f:90:8f:b2:a0:95:20:10:cc:60:46:de:ba:ae:34:1c:
46:33:fc:fd:55:05:61:eb:da:25:10:22:fb:08:8a:cd:13:4a:
f4:38:ec:67:44:61:ae:17:27:e3:6c:60:2d:a8:df:0c:b5:cc:
78:26:57:a0:5f:61:df:0a:f9:d1:bf:03:45:4c:52:b3:9c:d3:
25:a2:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:25 2025 by rpki-client