Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/nHuVyjc3KMoSX7dk6oCcJzZC7yI.roa
File: nHuVyjc3KMoSX7dk6oCcJzZC7yI.roa (raw, json)
Hash identifier: 8kNlY4DAN29iBV2YoNVORKEQ7cx+NbbKiFTFq2jo6ec=
Subject key identifier: 9C:7B:95:CA:37:37:28:CA:12:5F:B7:64:EA:80:9C:27:36:42:EF:22
Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial: 0199E20A1E6D4EA35C31E6906E0F0F1230A5
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/nHuVyjc3KMoSX7dk6oCcJzZC7yI.roa
Signing time: Tue 14 Oct 2025 09:25:37 +0000
ROA not before: Tue 14 Oct 2025 09:25:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205936
IP address blocks: 86.106.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:0a:1e:6d:4e:a3:5c:31:e6:90:6e:0f:0f:12:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Validity
Not Before: Oct 14 09:25:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c7b95ca373728ca125fb764ea809c273642ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:03:f8:3b:40:40:5f:d7:ac:35:eb:30:61:
ab:54:8c:ee:48:b1:95:ad:d2:18:3c:c5:eb:ef:c4:
14:e3:8c:a7:10:7d:25:f6:35:72:8a:10:d4:6d:17:
09:15:48:4b:98:e5:fb:86:6c:55:4e:cd:28:21:cd:
60:8f:1b:64:56:18:3f:11:33:e7:9c:91:a0:aa:52:
f0:23:b5:a0:df:e0:85:27:e0:1e:dc:80:a2:fa:44:
65:46:98:b5:24:77:b2:a2:95:57:cd:b1:b2:bd:41:
7f:47:b9:86:a5:5f:b6:52:4f:2e:87:eb:d8:4f:7c:
cd:80:13:b4:da:4b:aa:b1:5c:4d:8e:2c:4b:b9:1b:
b8:6b:17:b1:0e:1a:09:98:61:97:ac:10:e6:57:e2:
de:1f:47:e4:4d:46:b1:87:8c:c2:1c:dd:e2:a0:27:
d6:0e:2f:89:5a:b1:32:54:69:6a:4a:e3:ff:60:8a:
eb:d3:33:c2:0e:bc:c2:f2:2a:70:8f:93:78:ae:83:
68:e6:cb:b6:ff:2d:f8:f6:53:06:a9:e3:fc:08:22:
f8:47:c0:45:54:93:d7:22:3d:5e:b5:07:b7:39:bb:
38:24:b6:4b:62:45:40:5d:bb:9c:26:84:e6:30:73:
6c:07:8e:d8:57:00:4c:21:06:f5:e4:9e:18:8c:d0:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7B:95:CA:37:37:28:CA:12:5F:B7:64:EA:80:9C:27:36:42:EF:22
X509v3 Authority Key Identifier:
keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/nHuVyjc3KMoSX7dk6oCcJzZC7yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.76.0/24
Signature Algorithm: sha256WithRSAEncryption
13:61:89:1c:40:56:04:c1:ad:df:56:07:a4:23:1e:43:75:ce:
a8:76:30:ee:a2:0d:58:45:df:6f:70:85:3c:9f:e8:d2:bf:f0:
e8:ec:3d:c1:6a:91:11:1e:91:1f:a8:ac:89:d0:d3:d4:99:d6:
ba:b2:2d:96:b9:be:91:f5:b9:a9:ae:31:6d:7f:e3:a4:6c:20:
98:68:c4:38:0c:7e:1b:7e:ba:19:7b:fd:18:60:e0:ac:7d:0d:
68:b9:65:98:c9:52:09:9f:81:d0:2a:e6:4a:dd:f2:4c:91:38:
3b:6e:b1:39:4f:d4:a3:47:66:18:cd:21:13:2c:70:61:8b:dd:
11:19:7e:35:da:78:1e:7a:2a:f5:62:2c:ce:56:4a:4d:3d:91:
7d:b0:af:1d:42:93:23:6a:c3:51:24:5b:21:f5:cf:01:51:78:
24:41:8f:23:fd:2a:8c:29:da:4f:00:8e:57:43:cb:79:90:a5:
c6:91:ea:a7:2d:18:6f:ae:2b:56:8d:82:aa:6c:d2:64:de:2e:
e0:5c:ec:86:37:dc:d9:b8:6f:2e:b6:ec:2e:4b:6a:53:bc:57:
00:e6:83:ca:99:da:c2:be:17:55:6f:7b:dc:3d:22:6c:1b:6a:
62:41:0d:ae:0a:02:c0:a0:94:56:c7:5f:a5:ae:2e:a2:2c:5c:
41:c4:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:16:10 2025 by rpki-client