Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NbkjWG5eJ8CeB5zFZDSEp7r2iqk.roa
File: NbkjWG5eJ8CeB5zFZDSEp7r2iqk.roa (raw, json)
Hash identifier: YtbKklasaBLYXzQUjk/hbXjM1SQkDaI/N+BulGHymok=
Subject key identifier: 35:B9:23:58:6E:5E:27:C0:9E:07:9C:C5:64:34:84:A7:BA:F6:8A:A9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198D15152A72ACF1B0FA7327C4E9DAFD801
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NbkjWG5eJ8CeB5zFZDSEp7r2iqk.roa
Signing time: Fri 22 Aug 2025 10:27:04 +0000
ROA not before: Fri 22 Aug 2025 10:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47152
IP address blocks: 2a12:f5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:51:52:a7:2a:cf:1b:0f:a7:32:7c:4e:9d:af:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 22 10:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b923586e5e27c09e079cc5643484a7baf68aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:9d:f7:c7:36:f5:42:a9:2f:5b:bc:de:e8:
86:e9:8f:62:68:fb:72:55:01:c6:61:45:19:58:28:
53:b4:15:b7:78:03:a9:c0:0c:be:b7:17:14:42:63:
e5:eb:74:23:47:9f:c8:7c:00:db:9c:c0:e2:7f:ca:
e3:a5:ec:fb:32:48:a8:75:d0:4d:14:12:d5:75:c3:
62:14:f1:91:29:66:3b:8f:ec:02:a8:53:9b:79:03:
c2:7e:ca:15:e6:b4:fd:ae:9b:a2:da:27:5e:bf:6b:
68:68:30:38:3a:b3:18:7a:80:ad:bc:cf:a0:47:67:
d0:45:81:80:f1:7d:51:87:ba:51:1f:81:1b:f8:ed:
5f:34:3d:57:30:7a:92:4b:86:82:5f:6b:c1:fd:9d:
97:60:ce:0d:76:50:0b:3e:20:15:b4:2b:fa:d6:07:
29:f0:a0:e6:98:f0:66:41:71:0b:7e:cf:95:12:5e:
6e:24:48:a4:0b:c4:f3:a4:63:a6:6a:09:d9:fb:ca:
cc:52:2d:c1:89:d0:39:61:50:92:b5:ce:ee:6a:c8:
23:3e:e7:f6:cc:d9:66:12:01:f0:40:63:cc:05:a7:
ea:57:1d:90:6d:cb:6d:44:11:fd:6a:99:28:b6:d3:
c7:c2:e9:0a:7f:11:46:8e:9a:a5:c1:ba:30:f9:dc:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:23:58:6E:5E:27:C0:9E:07:9C:C5:64:34:84:A7:BA:F6:8A:A9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NbkjWG5eJ8CeB5zFZDSEp7r2iqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f5c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:e6:2e:54:af:be:5c:1d:32:5a:63:86:f4:64:ca:76:81:d9:
2d:81:7c:74:20:28:43:63:7e:7e:0e:a9:5b:47:5f:1d:81:72:
39:e1:a1:67:26:fc:06:1e:e4:28:04:76:2a:ec:de:9f:ee:c7:
e8:fd:36:ad:8a:99:0a:91:ec:65:16:44:2d:97:97:43:13:87:
c4:9a:d8:0c:ad:99:c4:61:10:06:34:0e:50:de:00:cc:2c:1c:
3c:d9:f9:8f:36:c5:b9:94:41:9b:1e:e6:41:8f:0f:20:51:04:
b2:c4:f1:29:67:cd:1e:03:50:0e:c9:d0:d5:3f:52:e5:2b:eb:
28:43:6f:b9:9b:7e:1c:62:e3:00:8a:86:24:4c:76:6c:b4:19:
5a:0b:1d:5d:f6:63:64:0f:5a:93:7c:50:53:95:10:b6:ca:76:
c3:03:92:12:fe:e2:7c:81:8f:3a:ba:af:4e:f5:2c:8c:7d:1e:
e8:1c:84:59:06:45:11:33:0d:a5:ba:d5:b1:da:d1:1a:e1:4c:
b2:19:b0:ea:f5:45:e4:84:37:f8:98:22:bc:38:d6:d2:77:60:
3b:c2:ac:4e:be:22:ca:09:01:92:6a:b7:76:5b:13:8d:66:ed:
1b:d9:d8:02:67:a8:55:1d:4f:f4:fa:2a:67:6c:2f:68:ee:ed:
f5:8e:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:30 2025 by rpki-client