Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NxoBaTwpoUDE5B6qIjGxWkS3rlw.roa
File: NxoBaTwpoUDE5B6qIjGxWkS3rlw.roa (raw, json)
Hash identifier: IvXzC09EcWeKjF3TjvcuGyJo7PyJOvCemvJbV1raTKg=
Subject key identifier: 37:1A:01:69:3C:29:A1:40:C4:E4:1E:AA:22:31:B1:5A:44:B7:AE:5C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199DC322665E342F05F1B410F48936FE79A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NxoBaTwpoUDE5B6qIjGxWkS3rlw.roa
Signing time: Mon 13 Oct 2025 06:11:38 +0000
ROA not before: Mon 13 Oct 2025 06:11:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50049
IP address blocks: 62.50.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:32:26:65:e3:42:f0:5f:1b:41:0f:48:93:6f:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 13 06:11:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=371a01693c29a140c4e41eaa2231b15a44b7ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:01:71:d7:11:c8:a4:c4:72:72:96:2e:69:
af:f3:71:ee:82:28:48:2a:de:94:15:f4:68:ac:f5:
b3:58:c9:d9:16:31:66:b5:96:e7:4b:2f:6a:6a:37:
17:07:ee:c4:e2:e8:5c:88:41:34:82:fe:a2:ea:96:
9c:c4:df:87:80:f2:b1:37:6c:22:ec:f7:2e:5e:a5:
2b:f7:8f:d0:e8:19:fe:af:c1:38:46:70:49:aa:a2:
6f:8e:44:af:e6:d7:4f:30:3d:77:1a:4e:6f:cc:56:
f6:3d:16:0d:29:90:3f:7f:b2:8a:0a:8a:09:20:12:
48:eb:4b:0a:c1:db:dc:cd:c9:ed:74:c4:fa:ec:5f:
b5:10:ea:82:a9:46:e1:3b:b1:78:39:ad:b9:8b:07:
b5:5c:c3:45:e1:72:ea:23:9c:04:f8:08:ba:fd:d0:
81:16:01:e9:e3:b5:61:78:02:54:b2:fc:54:27:90:
64:1a:d5:c8:2d:e7:48:6c:cd:89:37:26:62:56:a5:
ec:7a:7e:84:19:9e:22:71:cd:12:89:51:47:3d:e3:
09:24:59:1b:30:ca:69:2b:2a:9a:38:57:82:9a:c2:
c6:cb:21:a6:14:c7:c1:f0:49:9d:fe:1a:7b:fb:4e:
c5:81:51:9a:f2:bf:76:1b:bc:da:9e:4a:f3:46:c4:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:01:69:3C:29:A1:40:C4:E4:1E:AA:22:31:B1:5A:44:B7:AE:5C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NxoBaTwpoUDE5B6qIjGxWkS3rlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a5:ac:bc:a4:32:d4:7f:69:16:96:a7:36:eb:01:91:b3:b9:
d0:dc:93:e7:0a:a5:3f:cf:e0:46:b9:6c:52:7d:e7:fe:ad:14:
29:c2:e1:d2:82:d7:06:b2:67:fc:cb:24:c3:9e:6f:0d:d9:7a:
b9:7b:bd:7a:14:9c:f9:16:ca:6c:3f:0d:68:b7:2b:16:bd:9a:
0b:d8:15:6f:d7:0c:d1:0e:46:d8:87:42:76:fc:60:ad:f9:04:
ec:ac:b4:c0:22:83:cc:63:90:eb:de:76:10:8c:a8:0f:27:ab:
70:8b:37:e0:0e:63:95:e1:5c:fd:2b:c8:35:f6:05:ef:a4:49:
8e:ee:66:3a:e6:b8:40:cc:60:52:7e:48:52:a6:aa:38:14:5d:
d0:c0:56:9d:1f:8a:7f:07:80:c4:a0:a8:71:70:02:fb:b9:0c:
b6:50:2f:81:d1:a2:49:fa:35:93:56:19:95:5e:32:fb:24:1e:
0d:1a:be:75:d5:38:0e:b2:68:55:7c:e4:7e:29:ff:d5:ee:8d:
f1:6b:d1:f9:7c:e8:dd:e3:74:fe:b3:78:f8:e0:f9:44:76:05:
5f:e7:70:f0:5d:ee:ec:e4:53:80:c6:b0:56:49:cb:9e:35:90:
f7:e9:db:1c:2b:10:f5:7a:e8:f7:8f:8b:4b:f5:83:b2:69:45:
c2:4b:8c:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZncMiZl40LwXxtBD0iTb+eaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDEzMDYxMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzFhMDE2OTNjMjlhMTQwYzRlNDFlYWEyMjMxYjE1YTQ0YjdhZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIEBcdcRyKTEcnKWLmmv83HugihI
Kt6UFfRorPWzWMnZFjFmtZbnSy9qajcXB+7E4uhciEE0gv6i6pacxN+HgPKxN2wi
7PcuXqUr94/Q6Bn+r8E4RnBJqqJvjkSv5tdPMD13Gk5vzFb2PRYNKZA/f7KKCooJ
IBJI60sKwdvczcntdMT67F+1EOqCqUbhO7F4Oa25iwe1XMNF4XLqI5wE+Ai6/dCB
FgHp47VheAJUsvxUJ5BkGtXILedIbM2JNyZiVqXsen6EGZ4icc0SiVFHPeMJJFkb
MMppKyqaOFeCmsLGyyGmFMfB8Emd/hp7+07FgVGa8r92G7zankrzRsRb+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcaAWk8KaFAxOQeqiIxsVpEt65cMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvTnhvQmFUd3BvVURFNUI2cUlqR3hXa1Mzcmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjKQMA0G
CSqGSIb3DQEBCwUAA4IBAQA1pay8pDLUf2kWlqc26wGRs7nQ3JPnCqU/z+BGuWxS
fef+rRQpwuHSgtcGsmf8yyTDnm8N2Xq5e716FJz5FspsPw1otysWvZoL2BVv1wzR
DkbYh0J2/GCt+QTsrLTAIoPMY5Dr3nYQjKgPJ6twizfgDmOV4Vz9K8g19gXvpEmO
7mY65rhAzGBSfkhSpqo4FF3QwFadH4p/B4DEoKhxcAL7uQy2UC+B0aJJ+jWTVhmV
XjL7JB4NGr511TgOsmhVfOR+Kf/V7o3xa9H5fOjd43T+s3j44PlEdgVf53DwXe7s
5FOAxrBWScueNZD36dscKxD1euj3j4tL9YOyaUXCS4y6
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:12:58 2025 by rpki-client