Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa
File: Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa (raw, json)
Hash identifier: z0Wt+SHMhk+eKo3V2z0COv5ilnG0T4vZIO6vh0M7eRI=
Subject key identifier: 36:BB:FC:46:6C:42:65:2C:25:AE:86:0D:8D:A0:B3:0B:F8:0D:45:B0
Certificate issuer: /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial: 0198F607B2190D24BBF75B4B49302CB8FFA4
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa
Signing time: Fri 29 Aug 2025 13:32:36 +0000
ROA not before: Fri 29 Aug 2025 13:32:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.15.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:07:b2:19:0d:24:bb:f7:5b:4b:49:30:2c:b8:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Validity
Not Before: Aug 29 13:32:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36bbfc466c42652c25ae860d8da0b30bf80d45b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:48:e9:be:dc:4a:54:7b:0c:c5:a3:f0:16:0d:
e3:73:28:56:20:d8:47:48:78:3e:09:5e:0b:97:d7:
23:3f:cc:ad:4e:8e:7f:4e:40:1e:92:ab:27:f9:44:
4e:7d:2f:3a:cf:54:58:dc:08:02:23:46:ba:02:8c:
e6:ab:7e:4f:59:af:7d:5e:c6:31:cc:09:33:73:3a:
a8:f4:96:ed:9f:14:f8:e7:22:f6:d6:a3:ac:35:cb:
12:3d:c9:21:c8:ba:fc:f6:a7:55:ef:71:2a:2f:d4:
14:5a:fc:2f:ab:67:4d:9a:d8:c0:a0:d2:19:7f:cb:
be:d3:9b:11:d2:34:e7:e7:23:f3:49:83:2e:5d:18:
b2:e8:3e:09:7d:a0:3b:ce:20:4d:32:dd:7b:b8:55:
fd:18:59:82:b9:8f:f1:92:3b:2d:bb:5b:31:55:7d:
12:3e:56:7f:7a:20:d6:f5:15:7a:aa:48:b9:b3:95:
7d:84:29:8b:a7:b0:a1:0e:10:5a:95:c9:99:85:1d:
63:58:05:2a:0e:af:b3:00:38:7c:3e:79:95:56:a9:
89:81:28:b0:3d:08:e6:25:f5:25:f8:ab:ad:07:3c:
b1:cd:30:cc:7e:19:01:0c:91:6c:38:da:20:c2:ba:
38:09:cb:61:ee:e3:81:9e:cf:29:63:38:20:da:37:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:FC:46:6C:42:65:2C:25:AE:86:0D:8D:A0:B3:0B:F8:0D:45:B0
X509v3 Authority Key Identifier:
keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bd:d3:d0:3c:38:85:c8:01:da:0d:53:54:0c:f9:6e:bd:25:
5a:c1:f1:84:33:dc:33:9f:ab:5b:50:86:92:f8:eb:ed:9b:66:
7d:d3:43:79:d9:79:fd:3d:7e:21:55:42:9a:cd:df:73:b9:ed:
91:14:5c:3b:c5:b0:22:fb:e3:86:ca:d2:59:7e:26:11:1d:96:
8e:1e:2f:2c:4d:6f:8e:5f:f3:b6:c2:ee:4b:56:87:1d:aa:4d:
aa:67:67:ef:e7:09:0a:97:b9:81:94:0d:a3:1e:c1:a0:1a:09:
a5:65:c5:22:f5:00:52:39:a0:6e:b8:2d:30:d7:8b:2a:02:00:
9f:ec:3a:3d:03:94:ef:fb:28:06:e8:d6:6f:ab:98:9d:bc:93:
ae:8d:d2:db:b1:84:7a:99:88:e4:98:d7:ec:ba:11:c2:e5:78:
a6:a4:3b:82:e8:9a:0c:ed:f0:ea:27:d9:80:08:ab:1b:7c:6f:
a6:4a:88:f3:18:da:8f:a7:37:ee:e9:c6:fc:c2:3c:72:3e:a2:
a6:c0:01:d6:55:5d:08:2e:d4:23:ef:9a:a4:14:94:bb:2e:94:
b0:a9:95:a2:9d:7d:8d:60:64:ee:98:cc:5a:d1:37:74:e4:d9:
17:d9:95:77:97:f4:e3:10:47:56:f2:c8:4e:48:da:af:f5:55:
ba:8b:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:52 2025 by rpki-client