Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n7caHcRYBHCX4r8K7FHkxTHdIbI.roa
File: n7caHcRYBHCX4r8K7FHkxTHdIbI.roa (raw, json)
Hash identifier: 8fHn3m24osIoLYCF/DXdEf53BQ5r9pWDe43LpKLXiQY=
Subject key identifier: 9F:B7:1A:1D:C4:58:04:70:97:E2:BF:0A:EC:51:E4:C5:31:DD:21:B2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0198BC16D28402C18DD4203FEBA3B51604DD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n7caHcRYBHCX4r8K7FHkxTHdIbI.roa
Signing time: Mon 18 Aug 2025 07:31:08 +0000
ROA not before: Mon 18 Aug 2025 07:31:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215555
IP address blocks: 188.132.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:16:d2:84:02:c1:8d:d4:20:3f:eb:a3:b5:16:04:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 18 07:31:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb71a1dc458047097e2bf0aec51e4c531dd21b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:89:68:e4:2c:83:e3:5e:1b:f5:5d:08:f2:
2e:4c:d8:89:74:be:34:64:35:84:c9:8d:d7:dd:9d:
78:3e:8c:01:29:d3:a5:7a:b4:a6:8f:10:82:0d:f8:
2f:5f:77:9c:15:b6:74:5e:dc:88:ea:59:37:36:02:
d1:8e:3c:ca:f2:56:5a:44:29:b3:0b:51:8d:a2:f2:
ac:d7:7c:ea:07:a6:87:4c:96:e0:7b:60:18:ed:21:
a0:5b:39:c0:b4:83:61:25:09:25:20:ac:40:cc:02:
84:4c:0d:81:5b:b9:ce:9f:89:61:5f:b4:1d:d0:68:
6e:20:b6:fb:71:2e:37:b4:46:0e:1e:68:cf:85:48:
98:db:d0:dd:3e:6e:26:70:fd:d6:6d:86:cd:7c:45:
f4:7c:03:a3:08:33:6a:c4:ef:e1:38:e1:94:9a:86:
f5:0e:4e:f7:9b:b9:5f:e4:bd:6b:65:d2:29:75:85:
cf:64:b3:d9:1a:f8:80:3d:d2:e3:00:05:5a:e8:08:
ae:d6:0a:65:2e:15:63:6f:d5:35:09:23:d1:ce:c7:
b6:af:ca:42:ae:74:44:09:86:f2:05:90:fb:e2:a6:
d4:25:3f:f4:ee:8e:ae:85:c0:f0:2f:2c:31:20:3a:
48:a7:8f:c7:55:7d:55:81:d9:eb:17:72:87:50:c3:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:1A:1D:C4:58:04:70:97:E2:BF:0A:EC:51:E4:C5:31:DD:21:B2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n7caHcRYBHCX4r8K7FHkxTHdIbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
26:95:b6:ee:50:8b:68:55:59:92:7a:17:91:fd:af:40:90:1d:
d3:9f:c0:27:b6:ff:0e:77:09:1a:1d:0b:f3:0e:03:ce:46:be:
1d:c6:fa:e0:2e:e8:07:2c:f8:a8:49:10:7a:d2:b1:40:ac:a7:
96:34:ee:38:89:73:6c:db:ce:0c:e4:1b:85:44:4f:b9:bd:86:
11:e5:9c:e3:54:52:bf:e3:8a:f4:e4:20:1e:bb:cd:c9:a0:d9:
6d:19:f4:d2:ec:58:1e:42:7f:8b:81:00:a7:81:2a:25:9e:01:
fc:63:89:a9:a1:6b:95:df:28:8f:f3:c1:09:14:b6:dd:bf:3d:
05:03:be:fc:25:ad:f3:8b:72:02:6c:b0:2f:43:47:38:a7:4f:
0d:7a:35:b6:7c:8e:71:dd:e7:33:13:f8:6c:30:62:28:9a:40:
5a:a5:3b:12:44:7e:35:f3:dc:e1:9f:43:93:0a:f9:ed:ad:ca:
ea:ef:ec:62:af:22:cf:ec:98:68:e2:b4:46:20:e4:58:36:82:
42:72:da:71:58:3c:02:4f:1f:45:67:65:bc:82:73:a2:67:87:
63:d0:b4:66:d6:44:4d:f8:fb:c7:b7:3d:69:d1:f3:6e:40:ca:
16:3a:95:66:58:66:11:e3:d4:eb:8e:3e:a8:4d:f4:5c:45:07:
04:07:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:58:27 2025 by rpki-client