Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/N99N5uWMIrQ8LjCJuNOmsU4YHrA.roa
File: N99N5uWMIrQ8LjCJuNOmsU4YHrA.roa (raw, json)
Hash identifier: Vxcy3FAQ9wvKVutRhz6cjFdOl9fvO+V6qA+CiMGZesU=
Subject key identifier: 37:DF:4D:E6:E5:8C:22:B4:3C:2E:30:89:B8:D3:A6:B1:4E:18:1E:B0
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 0199A4DABD8245E7B79A2A7ABABB2DE8E3A9
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/N99N5uWMIrQ8LjCJuNOmsU4YHrA.roa
Signing time: Thu 02 Oct 2025 12:17:02 +0000
ROA not before: Thu 02 Oct 2025 12:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 86.54.82.0/24 maxlen: 24
86.54.83.0/24 maxlen: 24
185.186.76.0/24 maxlen: 24
185.186.77.0/24 maxlen: 24
185.186.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:da:bd:82:45:e7:b7:9a:2a:7a:ba:bb:2d:e8:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Oct 2 12:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37df4de6e58c22b43c2e3089b8d3a6b14e181eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:2e:66:c9:c8:3c:d5:54:5d:be:d0:a0:3a:
ab:8e:80:d6:a1:d2:ff:e0:80:07:f5:b0:21:03:18:
41:66:6e:5f:93:fa:ff:4e:18:14:26:94:45:c6:93:
2b:48:6c:77:e0:82:23:a3:b1:94:b3:68:2a:b9:eb:
f1:ad:a0:e0:56:ae:a8:ad:36:6a:49:9e:8c:e8:13:
77:7c:04:a6:96:09:22:a6:59:9b:8d:f4:7d:74:c0:
d5:24:c4:d0:b1:19:e0:e1:ae:a1:82:f4:b9:e6:9c:
c8:6b:76:07:41:9b:b9:84:ff:1a:2b:42:43:4e:9c:
c0:1b:c3:b7:71:76:d3:0d:8d:d9:eb:e6:bc:f6:d9:
89:a4:51:f3:e5:4d:d0:81:81:89:c4:fa:24:d8:27:
f4:65:dc:3f:b9:95:2d:8b:36:39:74:50:53:df:a0:
44:21:15:3c:51:36:f6:9a:95:92:32:0c:7b:bf:62:
26:f7:06:84:0c:d7:51:e5:59:0c:a4:2a:02:9a:ae:
79:99:54:54:13:4f:c7:11:f9:1b:98:9e:da:c7:7d:
86:62:ff:a8:56:2c:6e:e0:df:9f:cb:7f:83:60:d1:
98:64:78:fd:6a:ec:3b:34:61:c4:ba:57:af:ec:45:
8c:82:15:79:f4:4a:eb:9e:b0:ad:6d:3d:16:cd:ff:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:4D:E6:E5:8C:22:B4:3C:2E:30:89:B8:D3:A6:B1:4E:18:1E:B0
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/N99N5uWMIrQ8LjCJuNOmsU4YHrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.82.0/23
185.186.76.0-185.186.78.255
Signature Algorithm: sha256WithRSAEncryption
06:19:69:33:0c:43:1d:3d:2a:dc:61:9d:c8:41:80:c3:29:46:
65:c6:c1:0e:36:f9:6e:dd:b5:fc:a8:bc:8d:c5:0b:ab:38:d2:
16:b5:b7:cc:42:be:c7:3b:ca:d5:a1:fe:18:b3:4d:a3:ea:79:
88:89:ba:01:8d:c5:e1:6d:95:fe:36:bf:ed:2b:ae:29:8f:b1:
03:02:68:c0:d8:9b:56:99:ac:78:37:e8:cf:b7:91:c6:89:c1:
fb:3c:25:7a:3f:63:59:ab:c1:74:39:9b:37:b5:24:58:fd:c1:
d8:ac:e7:e9:f8:c5:27:e0:ef:56:91:a6:72:40:89:05:22:28:
62:4c:33:a8:60:ec:4b:a4:06:2c:89:cc:1a:90:45:87:e7:0f:
3e:8b:38:75:97:19:f0:55:87:07:d7:a0:89:1d:e3:01:d0:b1:
16:e3:da:ea:e7:cc:7f:60:a7:70:15:9e:e0:5d:59:52:37:75:
db:fa:b0:34:35:26:73:f3:21:60:4e:68:7c:1d:87:20:4d:1c:
27:a6:c3:06:7d:46:60:89:10:ec:1e:cc:13:32:db:c7:10:15:
dc:69:b5:1b:0b:99:8a:0e:59:4d:ad:6d:a7:99:a2:64:a9:ef:
ae:67:01:e5:28:2e:1c:8d:a3:b9:88:98:d4:79:f4:9d:29:64:
74:4c:00:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:23 2025 by rpki-client