Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa
File: NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa (raw, json)
Hash identifier: rpCYWQAUZby9hvUsdkbZ1E+JsPoOrGo+9DJrYWN/+/Y=
Subject key identifier: 35:4A:AF:89:B4:2E:E9:D5:A1:E8:4A:39:7B:45:A4:4D:58:22:00:EB
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 0199CED966EA3B306CF877227BAE311E9C53
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa
Signing time: Fri 10 Oct 2025 15:59:37 +0000
ROA not before: Fri 10 Oct 2025 15:59:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 94.26.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:d9:66:ea:3b:30:6c:f8:77:22:7b:ae:31:1e:9c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Oct 10 15:59:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=354aaf89b42ee9d5a1e84a397b45a44d582200eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:37:4a:a3:81:5b:39:fa:06:cd:23:84:16:
0d:0d:a5:f1:dc:45:bd:73:a0:70:46:60:af:10:8d:
37:be:00:cf:e2:4f:cd:79:02:8b:38:c2:5b:01:fe:
9d:17:f3:02:1e:7e:46:82:9f:95:34:0b:f0:5c:26:
b5:62:e8:21:6e:99:c1:fa:bd:80:4a:58:8a:e4:cb:
fb:01:1f:5f:7e:7f:54:54:e9:16:3b:c1:e4:24:9b:
24:1f:c4:ac:73:39:74:5a:0d:42:24:be:e8:4f:27:
7b:32:f5:fe:e8:1c:e8:c8:7b:19:ea:95:84:b6:0a:
17:46:61:66:30:56:bb:a5:02:16:f0:33:1d:79:e7:
12:35:31:a8:f6:d0:45:cb:eb:b8:e1:d2:fb:24:ab:
14:cd:78:0d:aa:26:10:86:e7:09:31:26:e2:c6:57:
24:89:31:1d:6d:eb:69:10:77:0d:8d:d9:ef:1c:f4:
1a:91:5c:7b:5f:6b:35:7a:90:c2:5a:52:4a:4c:ea:
75:ed:4b:04:bc:21:63:68:8d:c6:85:b2:3b:77:4e:
ac:a2:be:47:d2:41:9f:b1:2b:08:d4:74:fd:62:c1:
76:9b:39:e7:a9:e0:cd:63:6e:cb:d3:48:be:33:0f:
a8:58:e7:2c:be:e3:06:b4:99:4c:ff:5b:f9:47:91:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4A:AF:89:B4:2E:E9:D5:A1:E8:4A:39:7B:45:A4:4D:58:22:00:EB
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.88.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0b:ff:92:c3:8e:12:47:2d:23:5d:18:78:fa:d8:3d:d7:cb:
db:3d:ff:4f:d9:91:73:61:c4:cb:e4:79:d6:0b:18:a1:6e:16:
51:f4:6f:83:6a:04:d4:30:a5:58:0c:7b:c8:78:e5:8c:39:30:
83:7f:23:4a:6c:9a:34:93:ee:32:75:a1:f1:50:79:c9:03:8a:
3c:11:d3:24:ac:e9:ba:15:81:35:4f:ca:eb:55:0b:68:10:ba:
61:90:a4:23:25:29:68:bf:c5:a7:53:64:20:67:7d:c0:2f:1e:
3d:0d:a2:76:af:4f:72:1d:44:94:e7:a0:e2:a0:1e:48:80:f3:
0b:8f:7b:0f:77:af:3f:d7:91:8a:d6:dd:f8:54:e1:01:43:e3:
5c:ee:68:6b:26:11:a3:fb:fb:b0:29:17:23:4c:fa:85:b0:3f:
89:48:49:10:9c:ed:47:13:89:f6:fd:a9:b9:3a:b9:19:d5:5c:
99:60:e8:02:2b:40:d4:e1:b0:1d:2a:a5:e7:e8:15:14:ee:d3:
84:cd:69:df:4f:2a:66:39:e7:23:da:6f:54:d5:8e:7a:c3:c7:
6c:e4:9b:85:c3:9f:03:a0:80:7c:56:26:c7:35:eb:ea:76:d3:
af:80:26:ca:db:ce:a8:24:a2:23:ef:18:f5:22:81:f6:d8:8a:
37:c9:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:28 2025 by rpki-client