Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1-NLVATAgt0gJ1Aq1hVfcdxCumPA.roa
File: 1-NLVATAgt0gJ1Aq1hVfcdxCumPA.roa (raw, json)
Hash identifier: uN2xa+HJ9utBDoQL6cY2MSlIep6ZvrR+uOyLGFZW9Xg=
Subject key identifier: F8:D2:D5:01:30:20:B7:48:09:D4:0A:B5:85:57:DC:77:10:AE:98:F0
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0199C1ABAF2368B319C0726354D4A28777CF
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1-NLVATAgt0gJ1Aq1hVfcdxCumPA.roa
Signing time: Wed 08 Oct 2025 02:34:38 +0000
ROA not before: Wed 08 Oct 2025 02:34:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214743
IP address blocks: 178.236.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c1:ab:af:23:68:b3:19:c0:72:63:54:d4:a2:87:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Oct 8 02:34:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d2d5013020b74809d40ab58557dc7710ae98f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:a4:8e:3c:6a:45:85:7d:ed:36:a0:0c:2d:
58:57:82:c5:e1:3f:d9:d4:79:d3:a2:d9:da:ac:c9:
97:29:8f:8e:91:40:41:1e:2e:1a:91:44:bf:de:97:
82:ec:9b:b8:54:80:76:54:96:5c:c2:40:38:52:43:
0b:c9:80:1b:09:0a:44:cf:f1:5a:ff:9c:d5:cd:5b:
40:09:2b:40:9c:47:be:97:03:1b:ad:88:bf:44:b0:
f1:e9:ea:cf:8a:67:8d:c1:ab:48:de:df:55:ff:2e:
dc:50:48:05:66:7b:88:05:6f:ee:61:17:3e:8d:1c:
f1:3c:03:ca:be:56:4a:a4:00:24:fe:b0:c1:06:cb:
53:6d:7a:9f:77:0e:4e:ec:f9:79:72:d0:9b:b7:bf:
93:bb:73:37:e0:6f:45:41:c9:8c:dd:a6:07:ba:b5:
94:04:6c:34:13:3d:c5:fb:59:90:2f:d1:6e:67:90:
67:7f:7c:74:be:b9:e5:72:e2:33:6b:0d:3e:d2:cf:
91:46:bd:32:f6:33:97:e7:8b:28:f4:5c:59:6f:48:
01:22:4b:a1:b3:74:e0:87:f4:1e:c2:01:48:48:13:
ef:b5:e8:47:d1:e0:89:92:11:e8:29:60:0c:df:ba:
da:26:36:9c:ee:df:95:52:e4:04:e4:18:d3:b4:7c:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D2:D5:01:30:20:B7:48:09:D4:0A:B5:85:57:DC:77:10:AE:98:F0
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1-NLVATAgt0gJ1Aq1hVfcdxCumPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.46.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9a:a2:69:76:40:3a:d2:7d:87:98:5d:9a:dd:d3:55:cd:4c:
c2:ca:cf:8c:c3:7d:06:9c:fc:69:ab:82:f5:7d:a3:04:f5:3d:
64:a7:8f:39:2d:91:6a:90:57:84:7f:11:c5:83:6c:b1:81:4e:
4f:c7:7b:8b:65:8b:10:1c:20:39:6b:b3:12:82:44:19:72:98:
40:41:a0:57:a6:3a:c2:62:34:6e:38:36:b3:c5:6e:e8:e5:8a:
6e:3e:4b:17:f8:bb:93:c4:8c:20:de:05:a8:21:c9:f3:49:d7:
aa:b4:29:b2:29:40:5c:72:23:47:f7:e3:bb:06:53:85:97:85:
20:fb:6d:36:50:4a:2b:27:5f:8b:7d:8a:38:b2:2f:06:4f:f7:
1c:4e:20:2e:df:26:88:94:15:b8:00:35:c8:3c:87:62:1a:8c:
f0:26:fd:6c:51:1e:1e:77:2e:6a:51:66:5a:62:f9:70:fd:a8:
9e:01:1e:53:ec:5d:74:09:14:77:0c:4f:51:0c:55:85:30:7b:
e9:e7:59:77:3b:5f:e4:78:93:07:58:bb:9f:26:6a:b8:92:48:
0e:9f:1b:43:be:2a:e0:32:1a:ff:a3:78:7d:90:e1:ce:a2:e1:
c0:34:6f:17:54:9d:de:d3:f6:61:7e:e0:58:b8:62:c2:6e:2f:
93:23:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:27 2025 by rpki-client