Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/NzEriaZTpDkqwVRNF_I3q26fJac.roa
File: NzEriaZTpDkqwVRNF_I3q26fJac.roa (raw, json)
Hash identifier: 5HBSEtVrkCJbGySatpCNL7zvqvX7ECzhRNaOA0/PR/E=
Subject key identifier: 37:31:2B:89:A6:53:A4:39:2A:C1:54:4D:17:F2:37:AB:6E:9F:25:A7
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01999960CFC41A692B75936B2A9489302DDD
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/NzEriaZTpDkqwVRNF_I3q26fJac.roa
Signing time: Tue 30 Sep 2025 06:48:02 +0000
ROA not before: Tue 30 Sep 2025 06:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25306
IP address blocks: 194.225.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:60:cf:c4:1a:69:2b:75:93:6b:2a:94:89:30:2d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 30 06:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37312b89a653a4392ac1544d17f237ab6e9f25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:03:e5:d0:89:fd:43:c7:89:a1:5f:9c:fb:
79:c5:1f:71:98:62:0d:5f:21:ab:b8:69:0e:1a:ae:
17:73:ba:5b:02:4b:7d:b9:14:ce:a3:5c:73:d4:80:
3a:69:e3:a1:a9:17:c7:68:fd:1b:cc:9f:90:2f:3b:
ee:22:89:60:cd:97:99:65:f6:d2:6c:cf:3a:f9:c0:
43:9c:cd:51:44:16:22:66:1a:83:c7:04:79:2d:4c:
fa:33:fe:1e:0e:e5:4e:2b:5b:65:90:c7:1c:dd:74:
88:5c:2d:94:85:f5:5c:33:e6:03:86:7b:3f:64:7f:
8e:43:c7:c9:05:c5:d2:d3:7f:5e:84:22:3a:ff:77:
b3:b8:88:2f:ff:63:45:ef:da:a4:74:72:57:1a:41:
6a:b9:d0:cd:86:f5:ff:26:aa:6b:86:5c:e5:2a:59:
a8:86:4b:58:8f:c0:61:40:12:8d:3b:64:23:e1:18:
ae:08:d6:b0:0c:9e:f1:f1:dc:88:11:75:c1:fe:1c:
cd:64:83:16:42:47:51:45:66:39:88:0b:c4:3f:d7:
d3:12:da:ca:5e:77:79:21:8f:7f:33:36:4e:9f:91:
cc:b0:0b:6a:1c:7e:5d:59:8c:8e:94:4c:55:2f:a9:
51:a3:4e:38:e9:84:de:ca:30:70:54:8d:0f:d8:33:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:2B:89:A6:53:A4:39:2A:C1:54:4D:17:F2:37:AB:6E:9F:25:A7
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/NzEriaZTpDkqwVRNF_I3q26fJac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:10:87:6b:d7:8d:a9:3b:cf:7a:d0:77:08:a1:83:4f:18:b0:
73:00:76:fc:1f:c2:fe:46:db:90:93:f9:af:d3:f3:4a:68:13:
58:6f:06:4e:5d:a9:30:aa:35:5c:e7:dc:bf:89:2c:89:7c:4a:
a5:0d:07:6c:92:e1:b3:36:26:6c:26:31:dd:41:cf:d8:72:8a:
5b:96:49:8d:54:7c:58:e9:82:6a:66:9b:9c:2c:22:11:c1:ba:
12:ad:03:96:c0:2d:65:5f:d4:5b:e5:c0:63:9d:79:81:eb:4c:
79:ae:f4:21:d1:ac:bd:04:6c:68:f2:f1:13:39:16:23:52:ef:
84:03:5d:70:57:b1:7b:c8:a6:dd:6a:85:9a:8e:7b:f4:f3:dd:
f2:af:7d:c1:5f:33:47:f1:4f:28:65:c6:a2:c6:9f:53:ea:9b:
78:e1:03:f1:10:51:f2:37:05:fb:7a:06:e6:27:fc:47:5d:0c:
cc:d3:10:78:81:ff:ca:1f:a4:b8:a1:ad:75:71:ac:1b:6a:fa:
0e:9b:dc:45:16:06:81:bf:a6:4b:d5:67:05:4d:e3:1a:e2:f9:
b2:e5:b1:ad:5c:26:a1:c1:fc:45:02:6e:95:67:56:6e:d1:2c:
34:c0:1d:a6:10:e2:00:ae:3e:2f:91:36:6c:1b:87:e9:e2:a9:
ab:d2:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:50 2025 by rpki-client