Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NdTtAC5NC7zo3eB9KLXcSE2YWfc.roa
File: NdTtAC5NC7zo3eB9KLXcSE2YWfc.roa (raw, json)
Hash identifier: WouN+W6WNR7ruTQHowtjnU3Sjiq84git53HMoXMWcCU=
Subject key identifier: 35:D4:ED:00:2E:4D:0B:BC:E8:DD:E0:7D:28:B5:DC:48:4D:98:59:F7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199C3EB8D999403A914D2F5659A72967DF3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NdTtAC5NC7zo3eB9KLXcSE2YWfc.roa
Signing time: Wed 08 Oct 2025 13:03:38 +0000
ROA not before: Wed 08 Oct 2025 13:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 194.231.214.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:eb:8d:99:94:03:a9:14:d2:f5:65:9a:72:96:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 8 13:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35d4ed002e4d0bbce8dde07d28b5dc484d9859f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:e7:88:86:0b:6a:25:2d:3b:80:1f:26:65:
f2:ea:4c:3c:d3:dd:c9:b9:df:60:06:2c:26:3e:8b:
ee:e6:62:65:c4:5f:68:6f:7f:7e:89:7d:67:71:fc:
c5:ff:6d:2e:bc:49:ed:c1:9b:26:40:f8:8c:a5:7c:
5a:aa:8d:4c:4e:d0:34:a1:cd:30:ee:ed:7b:1c:e2:
28:8f:46:46:12:00:b2:d4:f8:5d:e9:26:ac:d9:1d:
d0:53:67:24:4f:7a:68:de:c1:01:f4:3e:6a:fc:a7:
8c:35:44:7c:0a:77:04:e5:b0:b2:93:86:40:de:c4:
d5:46:87:1f:b4:3f:8c:24:45:4b:fb:60:b8:54:a8:
50:d8:1a:80:76:19:24:5f:95:eb:33:80:8a:1f:e5:
1b:34:b7:1a:59:9e:58:b8:e6:39:ab:c8:76:ac:d8:
7d:89:be:42:3b:4a:d7:ae:56:5f:8f:89:ad:e5:65:
c5:98:d1:0b:85:e7:8e:08:42:9b:5b:77:91:95:53:
63:34:17:3c:b6:56:da:50:cb:98:1d:e8:14:f3:70:
2e:b7:45:5d:20:dd:49:33:f9:e4:7f:2f:f4:b0:86:
4f:ff:97:f9:76:d1:dc:84:02:d7:a1:bb:2a:83:90:
8e:38:53:79:b2:9f:7c:c8:58:ed:a6:69:3d:c3:5c:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:ED:00:2E:4D:0B:BC:E8:DD:E0:7D:28:B5:DC:48:4D:98:59:F7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NdTtAC5NC7zo3eB9KLXcSE2YWfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.214.0/24
194.231.223.0/24
Signature Algorithm: sha256WithRSAEncryption
22:60:b2:37:9a:62:ba:23:9c:11:d1:d3:0d:7b:3f:87:9d:d9:
98:46:60:c6:38:88:4c:91:a5:34:71:a4:9b:96:4a:94:2b:3d:
6f:9c:0a:ea:da:49:d1:c4:45:6c:4d:07:ae:ce:ee:47:35:a1:
1c:84:12:e0:54:b7:d3:30:54:1b:ea:45:1b:b8:a8:73:33:ef:
a7:89:c4:a0:76:a7:12:50:4c:6f:c5:5b:d6:b1:77:a2:cb:f1:
33:7f:1d:68:64:da:ad:a4:4c:df:14:13:e1:7a:21:82:c6:fe:
58:dd:09:b8:84:65:a7:a9:39:f9:00:a8:cb:b8:ea:29:f0:4a:
a0:c4:b5:0b:9d:d8:95:48:2b:ea:10:3f:93:a0:0c:9b:ac:e7:
9a:1c:87:fd:17:59:13:30:5f:49:4a:1f:10:f0:69:31:ee:7b:
e3:94:73:0b:ca:2f:ed:94:46:84:cb:00:7b:fc:26:ee:c0:1c:
77:66:d3:c5:4e:57:92:43:2f:1a:be:cb:ef:64:78:16:32:bb:
46:fc:50:47:6f:66:be:32:56:ed:00:1d:80:07:a8:66:31:74:
7a:e2:11:d2:37:c1:6f:df:ae:ea:08:36:88:ff:df:76:fb:d3:
87:ac:c3:51:29:b0:3e:5f:32:97:b0:3a:7a:ff:dd:3e:bd:c5:
5d:48:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:20 2025 by rpki-client