Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/i_NmaTPLK9I3LDbxzisPRHc7_RE.roa
File: i_NmaTPLK9I3LDbxzisPRHc7_RE.roa (raw, json)
Hash identifier: dlhjxvCuyYaZawcUYmgGcJLyjb37q0esdOaF9YVMNNY=
Subject key identifier: 8B:F3:66:69:33:CB:2B:D2:37:2C:36:F1:CE:2B:0F:44:77:3B:FD:11
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199E673E37C8E5D41063CE440DDA46F3DDA
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/i_NmaTPLK9I3LDbxzisPRHc7_RE.roa
Signing time: Wed 15 Oct 2025 05:59:38 +0000
ROA not before: Wed 15 Oct 2025 05:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 62.192.110.0/24 maxlen: 24
194.231.136.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/24 maxlen: 24
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:73:e3:7c:8e:5d:41:06:3c:e4:40:dd:a4:6f:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 15 05:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bf3666933cb2bd2372c36f1ce2b0f44773bfd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:eb:5a:16:90:ab:2b:d4:a2:3e:ac:d2:a4:
f3:1b:52:99:72:8a:ed:a2:2a:3a:56:83:70:a7:63:
76:1e:59:61:09:9a:ab:68:2c:6f:39:cf:e9:51:dd:
3c:b8:92:38:e7:a7:20:e6:60:be:fb:8d:08:78:1a:
5b:5b:38:68:f4:a3:e0:51:f5:cd:7b:a2:af:6a:27:
04:1d:10:26:64:58:9d:2f:01:4a:b1:3d:93:0e:98:
c4:d4:7f:fe:78:d4:3a:12:8a:eb:c9:38:6e:30:aa:
57:39:25:d5:1d:49:77:c0:c9:45:ed:00:ed:e9:7c:
1d:94:3f:b9:6d:f8:01:22:95:fd:6b:b2:9a:54:00:
82:72:1a:fd:8a:70:f8:0a:b4:26:97:5c:94:46:7d:
e9:64:e2:52:ec:c4:4b:87:ec:3a:f6:7a:8e:a5:e2:
d7:67:46:b3:9f:45:84:23:a2:9a:bb:dd:2e:f0:c8:
d6:d8:c9:eb:87:7b:01:26:cb:f3:d3:39:f3:ba:a2:
e5:68:22:87:1e:db:c9:bb:84:64:a7:50:49:e1:da:
7d:28:09:3f:d1:25:70:bd:47:74:a1:94:7a:d7:26:
36:1a:09:f0:58:7e:f4:64:8f:93:23:7d:c7:f7:c2:
9f:82:f9:3d:de:f1:76:62:16:ad:be:e0:cc:45:6c:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:66:69:33:CB:2B:D2:37:2C:36:F1:CE:2B:0F:44:77:3B:FD:11
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/i_NmaTPLK9I3LDbxzisPRHc7_RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.110.0/24
194.231.136.0/24
194.231.150.0-194.231.154.255
194.231.158.0/24
194.231.198.0/24
194.231.201.0-194.231.212.255
Signature Algorithm: sha256WithRSAEncryption
bf:d9:8a:c9:d2:6c:1e:66:a6:d1:c4:27:1e:c8:a5:85:9c:aa:
1a:6c:7b:31:e0:0c:40:11:12:7a:6a:d7:d9:b5:28:8a:74:ec:
a4:8e:de:b2:40:d2:7f:fe:0a:ee:32:f7:89:cd:7b:6e:3f:b3:
7a:21:94:dc:1e:09:35:1a:b0:3f:67:9a:12:b5:f5:dd:ee:64:
bf:dd:21:ff:6e:b1:49:b6:ab:b1:25:ad:02:01:a1:2c:0a:16:
1b:db:36:ce:47:83:31:cb:9b:dc:16:4d:98:d8:c3:c4:52:6b:
96:28:a1:80:6c:ba:97:76:f8:79:5e:f9:20:18:10:4b:80:b0:
76:06:3f:07:36:72:e8:1f:ac:7d:42:31:12:dd:25:a7:43:1c:
aa:95:04:96:d2:f5:be:c3:b8:7b:0e:fa:c9:1d:9c:f1:bf:85:
c1:27:79:8a:ac:0c:c3:a2:9c:73:3b:97:31:ee:a9:e4:1d:5e:
ed:97:6d:fc:d9:11:16:16:a3:b1:d1:46:79:35:b7:46:09:1e:
72:52:6b:41:cb:b9:d6:b6:ac:fc:28:15:db:a9:06:cc:a3:9f:
70:99:45:32:6e:79:e9:a2:6f:7e:bb:10:34:2d:20:67:c5:84:
48:cf:6a:19:14:4d:de:d5:f6:52:52:62:53:84:5a:9e:7a:4f:
92:00:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:58 2025 by rpki-client