Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa
File: NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa (raw, json)
Hash identifier: Qmu587A5vz0QqePux9/8aXshlrfRjr3JIejbf/nnhGw=
Subject key identifier: 36:44:66:84:0C:22:06:F6:7E:98:8D:F0:B3:B0:28:52:D9:EF:26:5C
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 0199C3C8C2CE6A59D45C02B7C965832EF46C
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa
Signing time: Wed 08 Oct 2025 12:25:38 +0000
ROA not before: Wed 08 Oct 2025 12:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2027
IP address blocks: 2a0b:cbc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:c8:c2:ce:6a:59:d4:5c:02:b7:c9:65:83:2e:f4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Oct 8 12:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=364466840c2206f67e988df0b3b02852d9ef265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:7f:d2:21:32:9a:8d:1b:3a:28:db:d2:62:
56:f9:55:fd:9b:b9:40:d4:71:ba:2e:59:7b:50:43:
6e:2c:81:d4:90:46:4f:f5:db:ba:20:9c:91:94:55:
88:b9:62:47:51:53:76:7e:57:61:1b:e4:1b:50:3e:
a6:11:a2:d5:02:b9:f0:96:77:6f:c7:a8:96:da:9e:
9b:75:f9:00:15:f4:87:01:9c:8d:c4:e5:48:ef:92:
e3:12:6a:26:38:89:54:6c:e7:9a:e2:c1:eb:ab:04:
02:c7:7b:68:eb:04:0b:fd:fd:31:9e:a6:85:3d:bb:
2e:b7:e6:d5:c0:e2:70:4f:f3:25:b0:f4:2e:bb:2e:
81:3b:a6:44:52:e2:41:92:2e:31:b1:aa:09:73:8d:
58:5a:f5:f1:0d:b6:7b:4a:33:77:96:94:9d:80:ea:
94:c6:46:e7:0e:41:61:c9:d9:4b:1c:ea:37:55:68:
55:63:ae:9c:ab:87:c8:7d:8d:59:0e:0b:8f:26:14:
b3:02:b5:7d:04:36:01:7b:9c:d7:9d:74:cb:b2:e5:
ee:7a:6e:70:07:e9:95:99:61:8e:e9:be:97:7e:8b:
75:46:2f:13:79:97:08:c1:5d:68:ad:a0:3a:a5:8a:
51:48:b6:3e:6a:90:7e:e4:d7:2a:9b:46:85:ba:d0:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:44:66:84:0C:22:06:F6:7E:98:8D:F0:B3:B0:28:52:D9:EF:26:5C
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:c7:92:6b:d3:6a:be:3c:c6:c1:87:86:7a:da:14:df:bb:b0:
e2:0e:ad:74:7c:c5:31:0e:23:77:f2:f3:77:f2:c1:4b:e2:fa:
e6:f7:c2:7e:29:30:ab:a3:1f:e0:e9:4e:8b:c9:3b:37:c4:0a:
32:39:24:45:fc:8a:37:fd:70:53:dd:b0:8b:9e:98:54:2e:e3:
53:1f:6b:ee:e6:de:8a:b7:26:77:e6:0f:c3:db:9c:e3:37:cf:
71:f4:12:32:77:82:78:2c:0a:4c:b9:ed:48:23:d8:34:ca:60:
a8:15:80:ae:7b:c2:a9:08:ca:30:6d:02:88:88:33:2f:b9:0b:
27:fa:d2:b0:e9:c6:e0:59:e3:28:7c:d5:c7:53:c8:a5:6d:04:
17:c0:65:4c:89:b7:02:5a:2b:77:f4:84:7c:64:f7:af:19:fb:
ee:69:a0:d8:4e:d9:77:4c:8f:ec:60:29:82:19:74:02:91:e8:
d0:d3:a6:11:ec:b9:84:29:df:7f:7d:37:f9:f4:08:6d:c6:71:
30:a2:c4:fb:82:d8:f6:ff:75:1c:eb:74:02:75:72:08:bf:43:
c4:9e:aa:f4:9d:c1:86:37:50:ec:85:2c:fe:40:b1:fa:19:c2:
4e:ed:7c:8e:c6:d9:d1:03:2f:6a:67:fd:3e:fd:e7:31:10:9d:
e1:02:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:16 2025 by rpki-client