Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/N8LNjpmOeVZYvg1jyz1lgIODcEY.roa
File: N8LNjpmOeVZYvg1jyz1lgIODcEY.roa (raw, json)
Hash identifier: 9cYZxOQ70YEa6To3ZyqXq1X8m5FcvDVxbleGk2DvQvo=
Subject key identifier: 37:C2:CD:8E:99:8E:79:56:58:BE:0D:63:CB:3D:65:80:83:83:70:46
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0199C89E8FE314F14BACE379EFC2EA506F67
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/N8LNjpmOeVZYvg1jyz1lgIODcEY.roa
Signing time: Thu 09 Oct 2025 10:57:38 +0000
ROA not before: Thu 09 Oct 2025 10:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 93.191.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:9e:8f:e3:14:f1:4b:ac:e3:79:ef:c2:ea:50:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 9 10:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c2cd8e998e795658be0d63cb3d658083837046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:2d:83:54:38:70:ba:f0:4e:e7:9f:c1:2e:
9c:89:2d:48:bc:82:02:02:3f:99:e2:11:97:b3:8b:
7d:37:60:d7:4e:9d:85:05:69:e9:5a:af:ef:5c:b2:
5d:c3:63:6f:6c:17:13:ae:1c:1b:67:74:9f:ac:7d:
bc:fd:e0:2d:a7:ec:47:77:54:26:6a:ab:f8:8c:d4:
0f:1b:8f:ed:8d:ad:77:4e:46:8d:5f:8f:b2:2d:3b:
27:b1:db:6f:ce:03:c6:0a:49:36:af:6c:18:e8:ed:
90:28:7a:5c:8c:46:44:fa:03:53:a7:82:66:cc:19:
36:3b:12:32:0d:7a:88:54:4e:ee:a0:4b:78:2d:0f:
25:3f:0e:60:52:59:39:8a:38:9f:81:dd:1e:49:16:
7c:3c:d3:cf:f2:92:59:9f:40:c3:2a:68:61:43:c5:
c3:9b:31:79:f8:1c:04:eb:f0:a0:22:20:8f:89:fd:
15:70:af:a9:bf:0b:45:11:25:ec:44:cc:4b:2f:40:
b9:14:9f:eb:c1:6b:0a:17:65:50:37:63:40:34:2e:
93:d6:c5:c8:43:12:2b:ad:2b:b7:43:04:6a:f1:f8:
4b:10:1a:a3:8a:f0:8d:0f:f6:c8:46:d3:45:b6:d2:
d2:6f:63:fd:1e:31:39:7f:26:c3:37:39:71:58:91:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:CD:8E:99:8E:79:56:58:BE:0D:63:CB:3D:65:80:83:83:70:46
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/N8LNjpmOeVZYvg1jyz1lgIODcEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.170.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f1:b4:fc:3c:b5:12:15:d3:0b:04:ec:9b:8f:82:b8:8c:1c:
14:bb:2e:a6:8e:a7:d6:bd:55:b1:41:49:75:a4:20:7f:cf:7f:
26:3f:ea:e8:ed:92:e2:5f:d9:f4:8c:45:64:88:0e:86:4d:c4:
ef:50:f0:2d:fc:d6:db:57:04:e4:77:a9:73:88:9d:71:23:2d:
b9:dd:c8:9b:b9:3f:af:31:7b:e1:b7:d6:5d:15:0d:73:96:e6:
72:74:71:36:8a:f8:2c:64:a1:65:f0:bf:91:d4:6b:bd:58:8d:
c0:a3:06:29:f2:ce:c2:3d:88:0f:0d:4f:79:3e:ab:3a:af:86:
16:ce:cd:6a:fd:19:83:80:48:11:c4:66:60:8f:40:06:f4:c1:
ff:9e:6b:d6:76:d6:0c:83:3c:a7:4c:a1:11:e3:51:0a:ec:bd:
85:13:77:34:9a:c8:4e:35:3b:9b:60:21:bd:87:18:5e:8d:2e:
ff:04:f4:0c:ab:9a:bc:57:2b:4f:57:d3:80:93:39:1a:5b:6c:
91:22:14:4f:36:cb:19:30:b7:a0:ac:59:c2:e0:15:71:5a:c7:
ec:6d:41:b9:1b:ab:dd:d0:38:a8:7e:da:30:96:56:d8:31:35:
62:3e:03:06:db:86:44:24:c0:17:0a:9a:f3:23:d5:56:95:7b:
3a:a1:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:07 2025 by rpki-client