Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/nCbygDSQqVJActb3a9ygHH55YMo.roa
File: nCbygDSQqVJActb3a9ygHH55YMo.roa (raw, json)
Hash identifier: q7RNrOka1+1oTdyfp9kvm4i2FWeBDfQoN31cSGJUoVg=
Subject key identifier: 9C:26:F2:80:34:90:A9:52:40:72:D6:F7:6B:DC:A0:1C:7E:79:60:CA
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0199E7F94D3578C0EFCAE1D50B7CA19C3746
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/nCbygDSQqVJActb3a9ygHH55YMo.roa
Signing time: Wed 15 Oct 2025 13:04:58 +0000
ROA not before: Wed 15 Oct 2025 13:04:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135074
IP address blocks: 91.192.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:f9:4d:35:78:c0:ef:ca:e1:d5:0b:7c:a1:9c:37:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Oct 15 13:04:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c26f2803490a9524072d6f76bdca01c7e7960ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:5e:07:61:9b:cc:de:30:8e:54:98:b4:be:
80:bc:b1:b2:76:25:4b:30:2e:13:ba:4e:9a:c0:82:
4f:07:f2:ef:47:8f:17:21:d9:ee:3a:51:37:34:49:
81:cf:b9:bb:b5:a8:7a:ac:91:9c:99:fd:d4:bf:0a:
25:39:9f:fd:43:d4:e1:ea:9e:4f:09:8f:23:6b:0e:
09:61:0a:cb:54:64:7f:4c:06:e7:da:fe:4c:79:70:
21:c0:6c:97:d5:f4:8b:a5:5e:7a:df:c8:aa:71:ed:
aa:a8:68:c3:4d:ad:91:61:44:8b:1c:3c:82:60:34:
6f:80:34:6e:4b:4b:65:70:2c:79:eb:2c:c0:3a:e4:
9a:a4:7c:06:10:2b:e7:c4:23:9b:14:e7:f7:ff:4e:
68:02:68:30:a7:da:6a:ef:6d:82:c0:d1:12:d2:31:
65:30:f7:45:5b:a9:d5:a5:5f:4e:9b:c0:48:b5:99:
c1:ed:b1:7b:2f:5f:c7:66:94:6f:71:55:66:d0:8b:
03:2a:3e:51:51:21:2e:8b:6e:e9:1b:43:05:36:35:
b1:94:d7:d1:02:27:3d:47:7e:e6:e2:e1:b3:f8:69:
11:4d:1b:19:9b:5a:cf:f3:92:7e:7a:a2:05:63:f1:
07:b7:88:2e:2c:4c:1e:d9:96:93:ef:82:42:1b:2b:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:F2:80:34:90:A9:52:40:72:D6:F7:6B:DC:A0:1C:7E:79:60:CA
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/nCbygDSQqVJActb3a9ygHH55YMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.107.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d9:fe:91:aa:d1:a4:4a:d3:06:22:2b:d0:0f:a5:c3:a5:69:
2f:fe:a8:8c:6c:39:70:5a:a0:6f:da:ef:0c:7f:91:7b:28:b5:
de:cb:1a:fe:4f:60:e5:46:ac:ad:2a:fb:17:42:27:c0:c4:d2:
f1:d4:8a:71:6b:f2:ac:e7:1c:28:22:dc:cd:34:a8:b6:b6:a1:
ce:0d:f4:fd:13:52:51:eb:43:17:f0:d1:ab:23:66:e3:a5:8b:
ad:5b:cd:83:59:52:29:a7:95:b3:ae:ee:7e:f9:76:f4:39:d1:
64:28:53:e7:b7:58:98:bb:3a:ba:db:00:db:0a:0b:5d:67:93:
68:50:f3:c9:1f:d3:ab:3c:20:17:5d:20:22:be:1b:cc:a7:26:
2f:50:84:a1:87:c3:a8:ca:48:27:c9:19:4f:2c:80:84:19:95:
fd:18:43:a0:c8:bd:44:71:07:0b:91:e6:05:ed:69:a6:30:6f:
ca:31:b9:73:97:a0:e8:d2:5b:6c:f7:33:b9:3e:b4:e4:f3:dc:
5a:23:f2:7e:00:9d:b8:54:da:92:33:fb:ef:d2:0b:57:08:93:
95:a3:ab:ed:92:c7:b4:af:52:41:70:2c:73:5a:00:5a:f8:54:
56:40:b9:47:d4:06:3d:b7:c4:5f:80:44:a2:0b:ef:0c:9e:a3:
73:9c:a8:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnn+U01eMDvyuHVC3yhnDdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjUxMDE1MTMwNDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzI2ZjI4MDM0OTBhOTUyNDA3MmQ2Zjc2YmRjYTAxYzdlNzk2MGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9leB2GbzN4wjlSYtL6AvLGydiVL
MC4Tuk6awIJPB/LvR48XIdnuOlE3NEmBz7m7tah6rJGcmf3UvwolOZ/9Q9Th6p5P
CY8jaw4JYQrLVGR/TAbn2v5MeXAhwGyX1fSLpV5638iqce2qqGjDTa2RYUSLHDyC
YDRvgDRuS0tlcCx56yzAOuSapHwGECvnxCObFOf3/05oAmgwp9pq722CwNES0jFl
MPdFW6nVpV9Om8BItZnB7bF7L1/HZpRvcVVm0IsDKj5RUSEui27pG0MFNjWxlNfR
Aic9R37m4uGz+GkRTRsZm1rP85J+eqIFY/EHt4guLEwe2ZaT74JCGyvJxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwm8oA0kKlSQHLW92vcoBx+eWDKMB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvbkNieWdEU1FxVkpBY3RiM2E5eWdISDU1WU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8BrMA0G
CSqGSIb3DQEBCwUAA4IBAQC72f6RqtGkStMGIivQD6XDpWkv/qiMbDlwWqBv2u8M
f5F7KLXeyxr+T2DlRqytKvsXQifAxNLx1Ipxa/Ks5xwoItzNNKi2tqHODfT9E1JR
60MX8NGrI2bjpYutW82DWVIpp5Wzru5++Xb0OdFkKFPnt1iYuzq62wDbCgtdZ5No
UPPJH9OrPCAXXSAivhvMpyYvUIShh8OoykgnyRlPLICEGZX9GEOgyL1EcQcLkeYF
7WmmMG/KMblzl6Do0lts9zO5PrTk89xaI/J+AJ24VNqSM/vv0gtXCJOVo6vtkse0
r1JBcCxzWgBa+FRWQLlH1AY9t8RfgESiC+8MnqNznKhl
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:46 2025 by rpki-client