Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/NEPVSXjqT46bRniV4fcHp7pNd9I.roa
File: NEPVSXjqT46bRniV4fcHp7pNd9I.roa (raw, json)
Hash identifier: cRn+2MSENb6w9bePKCbLQTtEQgCQcGDUoWkOY828NLc=
Subject key identifier: 34:43:D5:49:78:EA:4F:8E:9B:46:78:95:E1:F7:07:A7:BA:4D:77:D2
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 01967C4972E82907E89337AAB1292872F227
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/NEPVSXjqT46bRniV4fcHp7pNd9I.roa
Signing time: Mon 28 Apr 2025 12:05:10 +0000
ROA not before: Mon 28 Apr 2025 12:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29534
IP address blocks: 195.140.244.0/24 maxlen: 24
195.140.245.0/24 maxlen: 24
195.140.246.0/24 maxlen: 24
195.140.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:49:72:e8:29:07:e8:93:37:aa:b1:29:28:72:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Apr 28 12:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3443d54978ea4f8e9b467895e1f707a7ba4d77d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:88:83:47:8a:c7:48:95:d2:80:90:51:87:
70:df:7f:67:69:c0:9b:28:d0:8b:e1:53:e4:03:cb:
5a:f4:03:d3:4f:d9:60:1a:d0:d9:8f:58:2c:84:33:
e8:65:35:ad:1f:8b:fb:5e:18:90:7e:e6:c9:03:4a:
ac:e0:97:76:86:a4:6a:cb:37:70:eb:45:94:45:5a:
40:09:c5:0b:25:34:e3:66:bf:c1:f6:cf:5e:42:e9:
58:e2:44:ee:8f:b9:16:aa:05:89:56:dd:7b:97:7f:
eb:f3:de:f0:17:c7:42:5a:97:83:49:08:fc:38:a2:
a6:05:ee:39:65:f2:8a:f0:b3:b9:a0:37:d9:ff:b2:
a3:5b:b8:8c:05:94:ba:b5:a1:5d:87:f4:11:4b:d2:
3d:6d:b9:70:51:52:15:ad:8c:56:d1:5a:d8:fa:57:
85:e9:c1:dd:4d:33:67:16:d2:7a:a5:eb:cc:fa:09:
22:1b:54:e3:3a:84:6a:c1:f8:fe:89:0d:6c:fd:99:
68:8a:4d:33:64:f6:95:13:64:c7:0f:de:ce:d0:2e:
82:95:d2:2e:6b:40:61:86:6f:b4:7e:ee:af:c2:69:
6c:6f:e0:43:1e:04:8a:ea:85:8c:c4:3e:97:ca:b9:
0e:0a:b9:2b:79:81:ad:26:d4:b9:fa:48:93:0c:a6:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:43:D5:49:78:EA:4F:8E:9B:46:78:95:E1:F7:07:A7:BA:4D:77:D2
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/NEPVSXjqT46bRniV4fcHp7pNd9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.244.0/22
Signature Algorithm: sha256WithRSAEncryption
48:f2:53:d7:88:db:7e:4c:0d:ce:de:89:07:50:82:94:44:72:
6b:5f:f7:b8:c5:88:dd:cc:d0:67:a5:c5:2e:87:a2:10:fe:1f:
d5:52:ff:0f:9b:99:4e:97:b4:2f:b0:5d:be:fe:08:20:10:86:
a1:c3:a9:95:ae:dc:4a:60:76:72:77:ba:ce:c9:62:51:0f:43:
d1:21:f3:be:22:c3:a2:07:2d:b4:b7:5a:06:f5:38:ed:3c:fc:
85:70:9d:94:e1:fe:fd:ce:51:42:5b:9a:3e:a5:f3:36:ab:dd:
d9:96:66:b0:93:63:80:48:5b:3a:48:79:46:1b:6f:bb:b2:f2:
45:8b:1a:34:2e:f3:b3:df:d8:c2:a2:e7:45:47:91:6f:2a:8b:
1d:3e:7c:a5:52:6d:7a:93:3f:01:c3:c1:fe:2b:87:5b:68:09:
af:0e:ca:56:87:8c:a4:c0:f0:5c:79:53:aa:d0:cd:11:96:2d:
bd:2c:2a:4b:ff:4c:7c:f4:65:83:70:2b:bb:d9:38:89:ba:d7:
bd:e4:e1:d7:35:8e:11:cf:d1:b2:55:8f:84:e9:77:80:cc:39:
94:21:fb:a5:4c:68:2a:53:77:fa:87:e9:38:7c:28:b3:c8:e4:
b8:e1:c8:31:6f:4a:14:5c:6e:80:f0:49:9b:8e:5b:f2:1e:4f:
ce:e7:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:37:40 2025 by rpki-client