Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa
File: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (raw, json)
Hash identifier: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=
Subject key identifier: 35:2D:D7:5C:CA:6E:50:9E:DE:E9:32:11:6C:B8:5C:FD:32:46:9C:58
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01989E2D96F3FDCAEDE8B8B1589D7FE643EB
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa
Signing time: Tue 12 Aug 2025 12:07:24 +0000
ROA not before: Tue 12 Aug 2025 12:07:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8613
IP address blocks: 185.8.204.0/22 maxlen: 24
195.200.128.0/19 maxlen: 24
212.102.192.0/19 maxlen: 24
2a00:b300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:2d:96:f3:fd:ca:ed:e8:b8:b1:58:9d:7f:e6:43:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Aug 12 12:07:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=352dd75cca6e509edee932116cb85cfd32469c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:47:30:f9:0f:91:b1:32:0f:be:66:43:42:
75:19:3d:b0:7c:4e:38:af:b6:f5:b3:a6:6a:b2:97:
3e:8f:f9:26:4f:df:38:70:31:28:60:65:f9:df:ef:
35:dd:4b:94:bc:a2:2b:af:ad:76:f7:3f:9f:ba:d7:
2b:bb:cf:c8:44:a2:8d:bd:3f:56:6a:95:cc:53:ed:
9e:91:59:cd:ac:fc:60:92:11:99:1a:4e:1d:a2:5d:
81:1b:b5:a0:b7:ba:f4:a2:b0:3e:f9:46:cd:74:1a:
89:f0:73:cf:81:1e:ce:fd:13:e7:7c:3d:42:c7:b4:
b7:ce:a7:59:7f:e2:76:99:b1:6c:8d:64:51:42:c3:
f8:b2:f0:c9:17:a6:31:cb:aa:d5:bc:8b:26:a5:0a:
34:2e:4a:d6:48:a7:05:e2:e5:5f:96:24:47:fe:b2:
66:34:69:20:b8:3b:2a:43:74:d9:02:68:fc:5e:72:
c6:89:fc:f4:65:e1:84:6b:32:a4:ac:a6:29:b1:25:
2c:a8:0b:55:93:02:b0:ce:d8:a3:e0:59:a7:ea:d7:
9c:b5:52:05:48:3d:88:a5:ec:1c:7c:ed:2e:42:a1:
c7:51:d0:e9:32:92:ac:87:6b:d8:f1:ae:93:99:eb:
56:20:3b:f1:1d:f0:f3:4b:ab:87:b9:73:9d:5e:12:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:D7:5C:CA:6E:50:9E:DE:E9:32:11:6C:B8:5C:FD:32:46:9C:58
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.204.0/22
195.200.128.0/19
212.102.192.0/19
IPv6:
2a00:b300::/32
Signature Algorithm: sha256WithRSAEncryption
57:98:8e:83:13:15:af:05:b1:78:5b:0c:ef:d5:62:93:a4:ea:
02:06:56:ae:2a:ea:2d:be:5d:4b:27:9e:58:3b:fe:d4:e2:c2:
f8:99:76:f1:6b:c1:88:48:bf:e8:9d:44:07:2c:61:cb:1e:43:
ac:17:18:86:d7:e0:59:65:ea:22:e6:1a:60:ac:e2:a6:c8:d7:
48:62:38:a4:cb:41:4e:e0:6a:2e:b9:00:e9:5e:de:1c:39:a3:
06:2e:2c:32:02:60:aa:12:48:33:e4:cb:9d:ce:23:c0:33:46:
79:f7:7b:79:fc:c1:85:2f:57:36:69:44:08:6b:18:ae:c5:95:
55:51:a7:1f:34:28:35:41:27:1a:38:18:3a:cb:ff:a3:f6:31:
34:63:01:6d:8c:6e:0c:9a:83:8c:4c:14:fa:6e:88:52:41:a2:
2f:75:3d:a7:4f:77:3d:0e:fc:22:18:6b:48:87:0e:74:ed:62:
e7:a7:51:20:b5:c5:38:8f:71:28:1a:2e:7d:8e:f0:94:ac:5b:
28:1d:a8:95:1c:0e:0c:f9:67:97:7b:7d:77:af:b3:66:1d:cd:
f9:5f:14:5e:7d:ab:60:1b:56:7a:a2:37:44:25:3a:61:31:a4:
fd:98:08:7b:42:f8:19:06:1c:d4:41:df:12:83:be:13:ad:ee:
89:de:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:43 2025 by rpki-client