Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NIcgdxAMNSr8otH9BZssGOBk3-Q.roa
File: NIcgdxAMNSr8otH9BZssGOBk3-Q.roa (raw, json)
Hash identifier: 0GKGjwVCUrCZTb1qOwMAklbkPAEVm3CfLXY648Mn5rs=
Subject key identifier: 34:87:20:77:10:0C:35:2A:FC:A2:D1:FD:05:9B:2C:18:E0:64:DF:E4
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0199D826B14B553D245549B3827782E702FD
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NIcgdxAMNSr8otH9BZssGOBk3-Q.roa
Signing time: Sun 12 Oct 2025 11:20:38 +0000
ROA not before: Sun 12 Oct 2025 11:20:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208328
IP address blocks: 194.36.26.0/24 maxlen: 24
194.36.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d8:26:b1:4b:55:3d:24:55:49:b3:82:77:82:e7:02:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 12 11:20:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34872077100c352afca2d1fd059b2c18e064dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:cc:ac:4e:78:52:73:f8:00:be:85:c7:29:
b1:ad:bf:4c:ed:88:dc:bf:e1:b3:a7:18:f5:64:3b:
de:31:0d:7a:8c:c2:3d:c8:69:a4:3e:fc:13:8f:7d:
e4:b6:27:2e:f7:98:01:4b:f4:5a:5d:2c:6f:81:87:
7e:15:c6:65:08:b2:b0:29:fa:f2:66:68:1e:7e:92:
c9:84:b0:a7:1d:74:57:5b:61:a9:6b:89:f5:2c:5c:
fc:09:6b:b2:10:cd:c1:53:a1:d5:bc:41:89:27:3a:
8e:29:53:0b:e1:b5:dc:eb:51:fa:55:ec:98:11:60:
c8:87:63:32:17:ef:dd:12:c2:b0:ff:a0:18:97:c7:
dc:bf:74:77:cb:96:9b:b8:6e:67:ec:70:29:2c:10:
89:34:32:4f:dd:65:bb:e4:8c:e1:66:41:56:5e:31:
25:11:47:3a:4e:a6:c7:aa:be:d9:d2:18:61:32:07:
17:0e:07:f5:bd:dc:65:b5:03:b2:bc:04:8c:f4:84:
16:9b:96:98:26:21:78:aa:ec:6a:5f:c6:f3:df:0c:
a6:d8:e2:00:ae:b9:c9:6a:d6:7e:0b:88:25:85:26:
25:e1:57:93:a7:42:df:34:d9:b0:12:0e:26:a8:6a:
a9:f7:63:e7:ce:d7:d1:7d:7b:37:dc:7d:6b:3e:de:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:20:77:10:0C:35:2A:FC:A2:D1:FD:05:9B:2C:18:E0:64:DF:E4
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NIcgdxAMNSr8otH9BZssGOBk3-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.26.0/23
Signature Algorithm: sha256WithRSAEncryption
92:bb:d9:f5:07:12:86:97:16:66:1f:22:4f:22:f5:30:c1:09:
2b:ff:7b:3e:23:e2:9a:2c:98:b7:4f:4c:bd:9f:ca:b0:cb:78:
e7:d7:11:3f:22:40:e8:8e:4d:41:64:85:e7:7b:4c:43:3a:d5:
f9:6d:ad:96:22:a4:c1:5d:fe:f9:00:34:9e:86:d5:de:f9:c5:
10:8f:38:d5:40:30:99:ee:fa:3b:a0:82:d4:28:3c:05:9c:87:
87:4d:90:fc:98:a8:be:f5:08:18:33:26:a7:45:b5:72:83:36:
49:17:38:bc:0c:80:47:d4:81:ee:ab:0b:88:ed:d0:e2:9b:88:
f2:dd:fb:89:86:79:a0:c1:ab:17:dc:26:3d:ec:ba:c0:97:5b:
99:14:7f:3c:cf:06:f5:fb:3b:40:9f:23:10:a9:f0:6a:e7:80:
bf:18:f9:74:9a:1e:7d:b1:73:d2:bf:ce:b6:05:46:5c:4b:1a:
e7:3b:14:81:44:58:6e:ea:3d:b0:73:21:f1:dc:84:8f:04:e8:
fd:99:3a:d7:c4:54:02:a8:e1:09:56:95:ae:40:e5:ca:a2:a8:
32:70:9b:eb:95:fd:b6:fe:55:6f:cb:78:8f:ed:5c:14:35:d0:
7f:87:07:a1:1a:49:2c:13:56:47:7f:e8:4b:f1:08:03:98:69:
d9:b5:9c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:52 2025 by rpki-client