Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/Nf9NANpHpYDyjvffxc3Yokjh2Xo.roa
File: Nf9NANpHpYDyjvffxc3Yokjh2Xo.roa (raw, json)
Hash identifier: a6nBEkn4InmMm+Pg6s6MSypG+gVY7YcwBjZWW41SjW0=
Subject key identifier: 35:FF:4D:00:DA:47:A5:80:F2:8E:F7:DF:C5:CD:D8:A2:48:E1:D9:7A
Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial: 0198850C37684EFF55A6269C3A70C5F84FCF
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/Nf9NANpHpYDyjvffxc3Yokjh2Xo.roa
Signing time: Thu 07 Aug 2025 15:00:26 +0000
ROA not before: Thu 07 Aug 2025 15:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207581
IP address blocks: 79.137.132.0/24 maxlen: 24
79.137.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:0c:37:68:4e:ff:55:a6:26:9c:3a:70:c5:f8:4f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Validity
Not Before: Aug 7 15:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ff4d00da47a580f28ef7dfc5cdd8a248e1d97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:5e:cc:0e:5f:18:cf:7e:2c:5e:71:a1:3f:
e5:7c:6f:3f:9e:e5:48:0e:1b:fe:bd:aa:1f:45:a9:
d6:a6:81:a2:97:5d:14:5a:8b:19:dc:47:43:1f:b2:
ff:25:c6:1d:1e:c9:50:f0:9b:ec:3c:6d:cb:2c:27:
c0:55:5a:81:66:6b:24:2a:97:81:c6:da:1b:ef:67:
7e:c1:34:13:d9:3a:64:02:4c:46:46:f4:c2:31:22:
ba:9c:96:4f:97:e8:f3:32:f0:dd:d7:cf:bc:a0:e0:
22:01:b6:18:13:07:bb:95:cd:23:80:cb:96:a9:27:
84:b9:73:d5:e5:99:a0:6f:87:44:0e:b4:7a:eb:75:
ce:44:e6:f1:16:64:2b:37:23:2e:27:86:4c:11:c3:
c8:a0:86:05:52:95:a3:14:88:1e:12:6e:21:47:83:
9e:a6:f8:1d:03:72:71:f3:44:06:f9:00:2b:45:75:
95:b0:94:93:65:8d:96:89:54:a5:c2:00:e3:ad:16:
81:72:bf:b3:f1:8b:f2:4d:1c:5f:53:31:3b:40:37:
ad:a8:68:96:de:0a:fb:75:a3:43:49:0c:a7:29:bb:
0e:58:be:17:bf:de:9b:17:42:0c:64:7b:91:61:4c:
0e:88:31:e9:a9:e8:4b:15:59:44:e7:16:5d:67:53:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:4D:00:DA:47:A5:80:F2:8E:F7:DF:C5:CD:D8:A2:48:E1:D9:7A
X509v3 Authority Key Identifier:
keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/Nf9NANpHpYDyjvffxc3Yokjh2Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.132.0/24
79.137.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:3c:0a:86:d7:f0:ae:f3:a4:01:ef:e4:6b:e2:40:bd:03:9e:
e9:bf:ab:47:a2:4e:7b:c2:32:1d:6c:bf:b7:2c:1c:00:9d:ac:
b4:62:2c:82:de:c1:45:dd:43:ad:a5:99:0d:09:f5:bb:e4:b7:
c9:8e:70:43:39:da:b7:a7:d8:a6:05:ef:64:fa:60:70:3c:95:
35:75:ab:22:9e:46:41:bc:2c:97:e4:b1:10:39:77:db:6d:3e:
9f:29:2b:e8:b1:07:bf:73:39:40:52:21:1d:ab:b8:d6:de:b9:
96:72:22:71:8d:9d:04:62:d6:26:29:ad:1b:84:22:82:0c:e9:
68:32:e7:25:80:4d:f9:32:26:2e:f2:8c:d5:84:cf:a8:72:a3:
b3:26:db:34:a2:06:c0:65:bb:a5:0b:ae:79:c5:12:a9:f1:13:
b2:ef:81:3a:8c:15:35:89:70:f4:92:5a:fe:8b:80:7c:7b:fd:
0a:8e:cf:0a:98:2a:11:37:26:72:a8:bc:0c:29:39:67:dd:05:
04:8a:bf:d8:59:b8:22:33:31:57:8f:cf:d6:2d:b0:70:3c:45:
89:78:a6:10:fe:ce:e5:02:ce:03:1b:7a:e7:57:ff:a2:83:b4:
3e:44:27:c4:31:36:3f:4e:02:05:90:da:09:c9:26:22:0a:aa:
85:77:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:42 2025 by rpki-client