Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5tNY6R5nQM-NGCQXrogApDsCOng.roa
File: 5tNY6R5nQM-NGCQXrogApDsCOng.roa (raw, json)
Hash identifier: NwGLHdRRp8JnFUGucUiZrBbZjmqJLbPnUXWN771dJsw=
Subject key identifier: E6:D3:58:E9:1E:67:40:CF:8D:18:24:17:AE:88:00:A4:3B:02:3A:78
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019996DB5E6B391A3EA9AE57C961863ADF29
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5tNY6R5nQM-NGCQXrogApDsCOng.roa
Signing time: Mon 29 Sep 2025 19:03:02 +0000
ROA not before: Mon 29 Sep 2025 19:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:db:5e:6b:39:1a:3e:a9:ae:57:c9:61:86:3a:df:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 29 19:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6d358e91e6740cf8d182417ae8800a43b023a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:c7:87:71:47:e3:3c:c0:93:51:e1:8e:17:
9d:68:f9:da:90:50:8f:7d:06:0c:9b:51:6c:52:cd:
ad:c6:ea:cc:49:45:c0:98:42:bd:74:4d:15:62:60:
67:58:d9:06:de:25:cd:87:f6:07:f2:69:78:e1:57:
01:7a:3d:9c:ec:38:57:a0:22:e8:dc:0d:b8:62:63:
39:89:9e:a4:0d:c7:e8:6a:0a:12:75:9c:22:f1:8a:
c8:11:23:18:c8:2f:3c:9e:0c:58:88:1f:03:1d:cc:
e7:e2:5a:9f:89:bf:5d:4b:55:b0:f0:10:e5:04:bc:
74:48:1c:67:f9:06:78:48:7d:a7:8f:ea:a1:e3:39:
8e:77:c2:bc:59:f2:c0:ac:c4:db:27:de:d2:42:fe:
2b:64:e4:5e:aa:c6:2f:e9:13:6b:e8:cc:6e:a9:e5:
cd:33:59:1b:0a:e9:c8:44:35:00:80:14:30:d4:28:
83:ae:a3:8a:e2:31:cf:af:37:04:5c:79:34:d8:fe:
f7:60:19:a0:c4:0b:93:e3:90:40:b2:0d:1c:f7:b3:
cd:5d:f3:81:c7:f2:c9:ff:18:7a:b8:c3:18:1f:33:
99:00:47:91:d7:5c:99:13:1d:1a:a9:86:0c:9c:5a:
5c:de:bc:59:25:3c:1c:af:fa:9b:81:87:41:bf:21:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:58:E9:1E:67:40:CF:8D:18:24:17:AE:88:00:A4:3B:02:3A:78
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5tNY6R5nQM-NGCQXrogApDsCOng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f5:1b:33:31:46:dd:f7:31:e0:4a:05:52:7b:03:6f:e6:72:
77:05:c9:ab:1a:2a:30:aa:20:0d:02:bc:1a:21:54:17:0d:74:
ee:4b:91:f5:ac:b4:bb:23:20:b7:97:9a:eb:da:e2:42:29:4d:
47:56:27:60:20:bf:45:70:a4:ed:fd:a7:f8:c1:68:91:59:38:
00:b2:1d:7f:83:38:12:28:83:85:d3:a9:c2:c7:50:e8:20:de:
ab:ce:e0:b4:3a:b8:96:2d:ac:99:9a:35:82:4c:ea:bf:4c:52:
4b:51:7b:30:00:94:80:93:7e:94:9c:df:d2:97:7b:a3:68:76:
07:86:6f:d1:9c:a5:ff:f5:60:34:72:3f:d5:11:82:72:8d:fa:
db:d2:7e:67:70:74:2d:7c:8f:a6:07:29:a9:75:6c:88:4c:85:
9c:15:93:e4:cf:9a:26:2c:75:e9:b2:a2:98:b9:d5:73:98:96:
f9:6d:8b:1b:3d:e7:7f:50:91:d5:fc:0f:f8:8b:ec:c0:a0:2c:
13:f8:12:8a:81:2f:e3:2c:47:c2:75:e7:ba:44:5c:73:e1:6d:
3a:9c:b4:b4:9c:43:98:b5:06:43:72:a7:3b:cf:9c:ba:92:a1:
e4:e0:5e:09:ff:0d:3b:6e:a1:5f:23:f6:3c:90:1c:43:98:8c:
fe:2b:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:10 2025 by rpki-client