Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/N0dUKPrjFoc0y8MW0LZVdnxSnBI.roa
File: N0dUKPrjFoc0y8MW0LZVdnxSnBI.roa (raw, json)
Hash identifier: GOCzo5+8biESJ82NDr0uRyIZsN+18Kfk+tP9JYURZW4=
Subject key identifier: 37:47:54:28:FA:E3:16:87:34:CB:C3:16:D0:B6:55:76:7C:52:9C:12
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01989DC9CBE8D67FA4838315CACEC8FD3DB3
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/N0dUKPrjFoc0y8MW0LZVdnxSnBI.roa
Signing time: Tue 12 Aug 2025 10:18:24 +0000
ROA not before: Tue 12 Aug 2025 10:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209076
IP address blocks: 2a0e:cc00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:c9:cb:e8:d6:7f:a4:83:83:15:ca:ce:c8:fd:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Aug 12 10:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37475428fae3168734cbc316d0b655767c529c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:1b:0d:bb:55:c1:17:bf:58:34:5e:5c:03:
11:22:95:7d:21:c1:d3:e0:69:eb:55:77:55:c2:2e:
09:a0:4a:8c:b7:f4:78:ed:44:6d:51:d0:2b:0b:d1:
c3:48:4b:8c:ec:bd:8e:34:38:99:14:bb:1f:7e:64:
e2:3d:43:57:58:8e:fd:38:48:ec:e2:0e:b2:ec:56:
d6:19:99:88:2d:a0:bd:18:32:66:b0:02:d9:75:ed:
da:c2:ca:1b:fa:1f:b3:22:b8:59:87:56:9f:d8:98:
d0:78:71:25:e5:88:3e:33:7c:c6:73:e0:0d:1b:e2:
31:27:3e:27:f6:f6:7c:cf:13:19:63:07:72:7b:fa:
62:6f:4a:05:c9:44:79:73:4c:0f:0d:26:58:42:03:
4f:41:f3:2c:04:5b:c8:ee:f2:be:de:89:7b:42:d2:
4d:c2:35:6f:6f:73:f4:aa:da:7e:8b:d3:f3:30:95:
c1:eb:e7:19:af:51:43:01:58:a1:50:4f:13:56:6e:
e4:96:1b:d9:67:6e:bb:2b:34:99:4d:e5:98:9a:90:
ad:b9:88:e3:d8:e1:2a:68:b6:0a:34:ba:6b:df:1e:
d0:72:82:3b:68:f5:5e:8a:18:59:65:a8:72:b3:3c:
cc:32:b0:2f:d7:cc:78:e6:6b:64:0f:89:be:86:92:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:54:28:FA:E3:16:87:34:CB:C3:16:D0:B6:55:76:7C:52:9C:12
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/N0dUKPrjFoc0y8MW0LZVdnxSnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cc00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:08:6c:df:ff:3d:0c:f5:21:7e:f8:e1:6e:3a:45:6f:04:fc:
ba:eb:bd:29:ab:5d:6d:50:d3:fa:25:1d:2e:bd:b6:bf:73:d1:
7e:15:32:52:51:2e:c3:88:9d:7a:e2:5b:8f:e7:de:11:d3:35:
a9:19:69:e6:22:8f:29:fc:d1:74:29:a5:2c:d3:1d:32:40:cd:
56:e5:86:bd:1e:a1:53:97:d4:9b:0e:d9:31:fd:8d:63:c4:8f:
18:59:2d:98:32:09:32:da:84:d6:dd:e1:b5:4d:08:05:02:08:
d7:24:5b:a7:12:67:de:60:71:8c:cb:0e:90:17:d4:e9:50:8c:
73:26:81:20:40:10:8e:59:9b:d1:54:f6:c6:9d:1d:30:99:3d:
a9:d6:8e:13:f7:9e:66:91:c2:66:a0:92:12:a4:e5:4e:3d:bb:
82:5a:38:8d:ac:ba:56:1a:95:7a:db:ab:54:87:79:bf:6c:76:
6a:8b:1d:44:5a:c8:30:7a:b5:d0:9c:a0:e9:1e:62:28:0e:3d:
c4:bf:1b:db:ac:34:c7:a9:ac:e7:6f:11:63:90:9a:c2:8f:4b:
27:f1:50:cb:4e:21:8c:21:a4:63:72:45:66:56:37:ad:96:96:
bf:42:e3:49:66:b0:e9:e0:48:99:d5:12:3c:a9:3d:e9:33:18:
d2:ec:89:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZidycvo1n+kg4MVys7I/T2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl
YTM0ZWMwHhcNMjUwODEyMTAxODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQ3NTQyOGZhZTMxNjg3MzRjYmMzMTZkMGI2NTU3NjdjNTI5YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GYbDbtVwRe/WDReXAMRIpV9IcHT
4GnrVXdVwi4JoEqMt/R47URtUdArC9HDSEuM7L2ONDiZFLsffmTiPUNXWI79OEjs
4g6y7FbWGZmILaC9GDJmsALZde3awsob+h+zIrhZh1af2JjQeHEl5Yg+M3zGc+AN
G+IxJz4n9vZ8zxMZYwdye/pib0oFyUR5c0wPDSZYQgNPQfMsBFvI7vK+3ol7QtJN
wjVvb3P0qtp+i9PzMJXB6+cZr1FDAVihUE8TVm7klhvZZ267KzSZTeWYmpCtuYjj
2OEqaLYKNLpr3x7QcoI7aPVeihhZZahyszzMMrAv18x45mtkD4m+hpKW3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDdHVCj64xaHNMvDFtC2VXZ8UpwSMB8GA1UdIwQY
MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEvTjBkVUtQcmpGb2MweThNVzBMWlZkbnhTbkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7MADAN
BgkqhkiG9w0BAQsFAAOCAQEAbghs3/89DPUhfvjhbjpFbwT8uuu9KatdbVDT+iUd
Lr22v3PRfhUyUlEuw4ideuJbj+feEdM1qRlp5iKPKfzRdCmlLNMdMkDNVuWGvR6h
U5fUmw7ZMf2NY8SPGFktmDIJMtqE1t3htU0IBQII1yRbpxJn3mBxjMsOkBfU6VCM
cyaBIEAQjlmb0VT2xp0dMJk9qdaOE/eeZpHCZqCSEqTlTj27glo4jay6VhqVetur
VId5v2x2aosdRFrIMHq10Jyg6R5iKA49xL8b26w0x6ms528RY5Cawo9LJ/FQy04h
jCGkY3JFZlY3rZaWv0LjSWaw6eBImdUSPKk96TMY0uyJYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:24 2025 by rpki-client