Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/_v0NtmG5_yKo9LL9efw9jEUpiWQ.roa
File: _v0NtmG5_yKo9LL9efw9jEUpiWQ.roa (raw, json)
Hash identifier: WV8iO5bnkC8NMndORk/JEXPjs9aVxMgYQxrcXgM1XWk=
Subject key identifier: FE:FD:0D:B6:61:B9:FF:22:A8:F4:B2:FD:79:FC:3D:8C:45:29:89:64
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 019930805C9EB304EC02D7E277C4D232B2D1
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/_v0NtmG5_yKo9LL9efw9jEUpiWQ.roa
Signing time: Tue 09 Sep 2025 22:02:22 +0000
ROA not before: Tue 09 Sep 2025 22:02:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 146.19.247.0/24 maxlen: 24
212.52.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:80:5c:9e:b3:04:ec:02:d7:e2:77:c4:d2:32:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Sep 9 22:02:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fefd0db661b9ff22a8f4b2fd79fc3d8c45298964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:41:19:c3:4f:6b:db:f4:f9:18:2a:c6:89:cf:
36:41:6f:98:70:5e:1f:43:6f:b3:37:cf:20:f3:87:
42:e6:2a:06:22:9d:ff:f0:2e:26:16:90:fe:fc:89:
0f:a6:fe:e5:6a:01:bd:1f:48:bd:ef:cc:0b:2f:55:
e7:ff:9a:95:81:88:a1:74:a5:21:eb:21:05:7f:fb:
7f:22:c0:42:0a:30:a6:9e:33:1c:51:a2:c5:83:b1:
b3:e8:c5:64:e4:85:f0:d9:6d:31:94:93:93:1f:46:
77:3c:a8:04:1a:c6:15:7d:1d:be:44:f1:2f:01:61:
93:88:d1:be:94:35:97:9f:a9:8f:03:bc:24:e7:4f:
ca:f0:db:13:23:ba:a3:a8:be:5d:e0:7b:13:ca:28:
cb:6a:94:e1:59:c1:41:c1:ae:6d:c6:a8:2f:24:56:
60:31:e3:a9:53:7f:1e:ea:a9:41:d4:02:32:1a:f4:
e0:ab:a8:68:a1:06:a2:cd:51:09:b9:71:5e:5b:32:
96:4e:19:b6:c9:23:64:85:ce:4e:a6:be:6f:76:08:
ef:6d:0d:db:af:2b:08:cf:30:9c:06:e3:e6:b4:ba:
d1:2e:eb:3d:56:f5:af:ee:74:b6:7d:fa:c1:5a:78:
37:6d:c2:64:87:57:37:5f:a9:6a:ea:c0:92:b3:d7:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:0D:B6:61:B9:FF:22:A8:F4:B2:FD:79:FC:3D:8C:45:29:89:64
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/_v0NtmG5_yKo9LL9efw9jEUpiWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.247.0/24
212.52.1.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f0:99:7b:ae:e7:7a:a2:d4:06:65:ea:c6:45:d4:fd:7f:b2:
cd:44:1b:73:41:d4:48:07:f3:7c:71:93:32:70:09:5d:10:d5:
53:4e:dc:86:23:08:42:36:59:09:47:a4:19:76:cb:e2:a7:ac:
ab:8a:02:3a:64:c3:bf:6f:bf:93:63:1e:d8:28:68:05:35:45:
e8:95:4d:4c:f5:4c:72:1f:57:8f:6a:54:65:7b:a6:b3:10:81:
7a:64:a0:34:85:04:1b:7e:43:95:66:19:05:7f:b8:e1:5d:f3:
aa:84:40:fa:7f:cb:76:19:2f:f0:f2:66:50:35:6d:46:fd:08:
41:f0:cc:23:23:07:95:09:fc:27:a4:d4:e1:07:15:ee:fa:7e:
c6:3b:8b:07:b3:7e:02:12:b3:81:e4:92:71:65:fb:da:b1:54:
c7:e6:ee:77:36:aa:8f:57:54:b1:ad:84:75:a4:20:b1:e7:e0:
df:f3:71:bb:cb:5a:f3:34:18:f1:da:c7:45:cc:ef:ec:a6:6b:
e4:5f:d4:cf:ad:76:27:77:7e:64:6f:9b:2b:57:4a:38:71:f3:
7a:3b:87:d1:1f:9d:1a:bd:1c:f8:c7:db:4b:ba:34:1d:08:7e:
06:ec:1e:5d:43:be:c4:8c:bd:81:b8:a5:64:28:6c:3e:ba:cf:
41:bc:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:37 2025 by rpki-client