Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/RPNVta1i_68ETzE6TtaaOFHYjFg.roa
File: RPNVta1i_68ETzE6TtaaOFHYjFg.roa (raw, json)
Hash identifier: FJ6/94/8Wm2f6M9BRBCD4vKtrBrwPPP4N1wQnShAIwQ=
Subject key identifier: 44:F3:55:B5:AD:62:FF:AF:04:4F:31:3A:4E:D6:9A:38:51:D8:8C:58
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0199E7AD4FEF027FA312DFF50AA12397C1AA
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/RPNVta1i_68ETzE6TtaaOFHYjFg.roa
Signing time: Wed 15 Oct 2025 11:41:59 +0000
ROA not before: Wed 15 Oct 2025 11:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199056
IP address blocks: 194.39.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:ad:4f:ef:02:7f:a3:12:df:f5:0a:a1:23:97:c1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Oct 15 11:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44f355b5ad62ffaf044f313a4ed69a3851d88c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:cf:27:9c:5c:74:3c:11:24:df:0c:f7:e0:
25:88:0b:6c:2b:b2:7a:4c:13:0f:90:ee:26:27:bc:
cf:00:82:f6:59:33:ae:cf:16:b0:48:73:de:19:41:
01:d6:65:57:8b:f8:36:00:fd:75:27:a9:68:1b:32:
ff:d7:eb:c3:7c:d5:aa:fc:ca:0b:ba:8c:a6:3e:a1:
ce:3f:f5:c2:06:61:53:b7:24:21:da:bc:94:5d:b9:
f8:95:6c:6c:ed:8c:d5:2c:a7:fc:28:0c:8e:22:47:
3c:5b:d4:8f:8c:22:85:c4:0c:cd:ba:81:93:a2:21:
67:24:2f:95:5c:f8:46:40:98:f2:11:e7:2b:22:08:
12:5a:d9:8e:c1:95:df:8b:53:af:12:9a:0d:06:2f:
4d:2f:a1:67:52:f3:f5:21:71:40:2d:b5:82:89:06:
7a:c7:9c:b5:8d:38:ef:76:77:99:88:2c:b9:20:2d:
16:5e:38:51:bd:10:57:3b:8a:0c:0d:dd:5a:1a:90:
c7:eb:f9:2d:d2:40:26:ef:7c:e0:ed:dc:f3:a6:d2:
69:7f:31:79:e7:3a:fc:3e:35:e1:97:e0:68:67:84:
e7:90:a0:88:8f:6f:24:94:30:21:53:fb:ad:d5:7e:
f6:a7:8c:82:d2:6d:5f:e8:26:cd:30:07:45:22:78:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:55:B5:AD:62:FF:AF:04:4F:31:3A:4E:D6:9A:38:51:D8:8C:58
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/RPNVta1i_68ETzE6TtaaOFHYjFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.128.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:44:eb:56:20:9e:12:1c:6f:2a:b3:66:6e:08:b0:c9:d1:9b:
b7:83:fd:da:cc:fd:59:5d:15:c8:1e:2a:9e:86:11:0f:60:e3:
3a:26:3e:59:7a:62:fa:5d:b6:e3:b2:4b:17:d4:af:55:2c:d4:
15:fe:e2:be:8a:f4:01:33:01:5c:2c:dc:87:e4:dd:fa:84:32:
ba:83:14:7b:8d:c1:8e:ac:43:9f:ba:9e:6a:b2:cc:d9:2a:0f:
6a:16:ce:ea:fb:e7:c4:ec:ab:eb:12:93:9a:d9:f4:83:d0:27:
44:98:70:ee:bd:7c:4f:33:aa:0a:b5:ba:c3:8b:a8:8a:5b:59:
4c:cb:17:f5:f2:84:39:df:0c:d0:f1:77:7d:d0:dd:70:3b:54:
a4:c1:37:cc:41:75:86:48:f2:da:0e:20:6a:3b:c1:d1:62:a9:
a3:3e:26:b6:f1:94:df:b1:cc:00:ca:1a:60:20:40:5f:18:11:
58:6d:5a:a9:ab:3b:8b:4b:c6:0d:1b:ce:11:a7:09:4a:80:84:
3e:71:bd:6c:95:98:bb:67:d4:14:dc:4e:08:ac:03:35:0a:59:
35:97:05:0d:cd:78:0e:95:cd:f0:4d:0e:a4:d0:73:87:79:13:
a6:c8:c8:b5:98:a9:38:64:b1:e0:93:c2:5b:a5:3a:09:53:23:
09:ec:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:19 2025 by rpki-client