Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RNJKqLWau3U94GY9crw0PfEyZ2E.roa
File: RNJKqLWau3U94GY9crw0PfEyZ2E.roa (raw, json)
Hash identifier: nFr85Yz2TFZVD3bn/Yc+B0WyLSwmtRMHMyR1flPW84k=
Subject key identifier: 44:D2:4A:A8:B5:9A:BB:75:3D:E0:66:3D:72:BC:34:3D:F1:32:67:61
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01993A5335E86C62FF7508349F0759CD10E8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RNJKqLWau3U94GY9crw0PfEyZ2E.roa
Signing time: Thu 11 Sep 2025 19:49:15 +0000
ROA not before: Thu 11 Sep 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:53:35:e8:6c:62:ff:75:08:34:9f:07:59:cd:10:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 11 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d24aa8b59abb753de0663d72bc343df1326761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:32:64:75:66:95:e7:e8:1a:07:1a:fe:3c:
5b:b4:9e:29:5b:e2:1e:81:89:41:2a:83:d7:a0:96:
f9:18:a7:11:6f:3d:8c:66:8b:b7:27:3b:25:5c:1e:
2b:3f:f3:df:f6:48:3e:22:8a:1e:33:f6:80:67:c3:
0e:ec:bb:e4:e8:10:19:c2:aa:98:fd:b9:62:5b:c0:
e9:bb:df:ad:55:f1:94:6d:23:04:53:95:43:ee:24:
2c:8a:a0:af:13:bf:32:01:e8:9b:30:41:26:b3:2c:
71:df:f6:88:3c:09:60:75:70:1f:28:8c:fd:c3:83:
d8:59:2c:a9:d3:c1:2b:52:43:3c:a2:70:b6:b5:62:
e8:72:f3:b5:ee:e9:9d:b1:60:7a:03:10:3f:df:28:
90:79:35:78:92:cf:de:e5:0e:8f:58:d5:81:5d:87:
e2:5f:be:99:a4:d4:1b:29:9d:cc:b2:c4:27:af:a5:
3a:ed:eb:a3:f9:e3:89:b9:90:66:0e:52:ab:ae:12:
57:7b:f1:18:93:26:66:9e:f3:13:68:be:9a:f6:f1:
ad:fb:fa:92:fa:48:46:8b:73:72:54:dd:a3:5f:4f:
fc:50:ba:31:5e:86:26:36:4e:1c:c4:a7:d5:fb:a6:
8d:fa:3a:bb:c7:fa:30:3c:25:a8:c7:0b:fd:0a:ca:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:4A:A8:B5:9A:BB:75:3D:E0:66:3D:72:BC:34:3D:F1:32:67:61
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RNJKqLWau3U94GY9crw0PfEyZ2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e6:49:e6:15:c7:1e:2b:46:8f:8d:19:87:2d:20:3b:5f:fd:
25:c3:df:7d:1f:07:a6:79:4e:ec:93:71:59:39:d0:db:3d:d0:
8f:7a:87:7f:1d:7b:ed:b2:24:1e:78:d3:7b:45:b9:f6:eb:15:
6c:f2:21:c3:25:22:3b:dd:a7:9a:50:51:2e:db:d6:93:00:a6:
ea:e5:7f:5c:67:7a:6a:b0:78:ac:d9:c7:80:12:60:aa:ca:39:
24:3c:67:d9:8a:49:83:55:2d:7e:08:69:d4:f9:a8:0c:b2:65:
fc:24:b9:45:e2:a8:48:22:0c:d7:d3:23:3e:a7:1f:4c:4a:58:
40:5f:13:e2:fd:46:88:8e:ac:0f:bd:7e:1c:cd:4a:32:ed:48:
7d:4b:c5:be:ca:bc:ca:2b:74:c0:1f:1e:7f:61:a1:7e:2a:f0:
2e:b1:b1:5f:c9:b2:21:1f:fa:42:0d:75:62:8c:a5:f2:1a:bb:
e1:c0:46:a4:e8:a7:ff:77:96:84:49:7c:ef:22:e7:e6:2b:d2:
49:bf:f4:15:05:c7:44:48:c9:0d:e8:30:2f:e1:fa:09:65:c8:
57:75:08:1e:e4:62:10:fa:60:af:fc:b7:6c:14:c8:ca:76:ad:
77:59:9a:67:07:0a:d1:7d:9c:ce:7d:0c:6e:33:03:96:9f:98:
6f:87:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:08:57 2025 by rpki-client