Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/nby_53YhCGKgd_Ni5Owu4DE7Y4Y.roa
File: nby_53YhCGKgd_Ni5Owu4DE7Y4Y.roa (raw, json)
Hash identifier: xs39s7W+uvrKL4R2jMfnrV+okHOeQ4JNClxXIFBgr2A=
Subject key identifier: 9D:BC:BF:E7:76:21:08:62:A0:77:F3:62:E4:EC:2E:E0:31:3B:63:86
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 0199F29A3EBC5409DA9C64281F58C666FCBB
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/nby_53YhCGKgd_Ni5Owu4DE7Y4Y.roa
Signing time: Fri 17 Oct 2025 14:36:58 +0000
ROA not before: Fri 17 Oct 2025 14:36:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:3400:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:9a:3e:bc:54:09:da:9c:64:28:1f:58:c6:66:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Oct 17 14:36:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbcbfe776210862a077f362e4ec2ee0313b6386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:e0:96:ad:41:30:5b:97:7e:03:80:ac:44:
48:04:a4:ac:81:1e:df:18:af:17:ca:c4:4b:60:9d:
33:39:d2:40:67:fe:61:60:c7:da:be:2f:0e:0a:75:
77:bd:9e:04:11:ad:56:7b:f1:b6:64:33:1d:ac:b6:
4d:57:47:16:57:cd:ed:db:f6:e2:b6:50:59:b4:b2:
b0:2c:30:05:f3:41:58:47:31:90:b0:c6:94:86:5e:
b0:86:19:7d:b1:06:d2:a8:51:bd:91:2a:8d:ff:10:
78:c2:5a:3f:d9:ed:8c:7a:81:01:68:b5:e2:00:86:
84:bd:49:86:56:6f:a1:1a:23:84:f2:ad:51:f4:8e:
7a:30:c8:5e:b9:05:a1:5d:66:1a:54:95:27:7b:cf:
35:5b:0e:a9:79:80:90:c6:b7:fa:de:ef:b6:d0:d3:
c8:a0:ea:e3:be:09:cd:3b:99:6e:e4:ce:cc:58:b9:
d2:29:11:99:c8:00:fc:ca:df:c9:76:0b:36:ad:d4:
6c:ae:35:af:29:ce:d1:1f:d0:fd:78:77:f5:8d:65:
85:47:70:15:f0:c9:c8:8a:ae:6f:b4:d0:69:18:e6:
16:28:4b:b9:bb:91:ee:8f:1d:b8:4a:d6:d8:a6:a9:
43:0c:35:09:74:f2:3a:92:e8:cc:83:e2:17:6d:96:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:BF:E7:76:21:08:62:A0:77:F3:62:E4:EC:2E:E0:31:3B:63:86
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/nby_53YhCGKgd_Ni5Owu4DE7Y4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3400:400::/40
Signature Algorithm: sha256WithRSAEncryption
90:64:f5:b2:44:5b:ec:2e:36:7c:35:73:7f:ee:3f:0d:55:17:
0b:c8:85:87:dc:67:66:9b:b9:28:e1:11:66:43:d0:dc:52:98:
f0:1b:77:25:ee:94:1a:23:4e:03:42:09:48:40:e6:76:b8:c7:
db:d6:7b:fc:c5:65:e2:73:1b:60:e1:0d:f5:6d:37:36:65:89:
71:59:34:61:41:c4:59:c2:87:fe:58:e1:75:e3:fc:31:44:2d:
54:91:ac:c8:d1:0a:c5:ba:14:c3:2b:4b:b4:86:c0:34:4a:15:
6f:5f:9a:c4:2d:c8:eb:e1:0f:d9:01:28:eb:21:bf:a2:25:8a:
5c:70:cc:aa:58:f5:52:fe:8e:09:ce:57:88:0c:f4:3a:d2:ba:
05:ae:4f:fb:63:ae:d3:9d:18:94:a0:c5:aa:58:e6:1e:16:64:
6a:be:91:bf:94:ce:5b:f1:f8:83:28:3c:ab:2d:f0:1a:d3:f8:
36:78:10:06:7e:a9:83:c5:cc:1e:dc:89:9f:b5:f1:5b:0f:21:
ad:6d:3e:9b:f7:bf:47:3d:2b:b5:a7:47:83:a4:50:58:e9:6d:
19:67:fe:fa:02:ec:b5:f7:85:ca:30:bb:1a:bc:1b:ee:92:1d:
52:11:1f:3d:3a:28:63:3f:52:86:73:d5:16:34:78:d3:b8:1a:
18:6c:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:44 2025 by rpki-client