Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa
File: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (raw, json)
Hash identifier: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=
Subject key identifier: 9C:35:D9:C1:D0:72:03:1B:B3:77:07:F4:65:7B:7F:7A:17:D2:24:92
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0199997D321A0C713CED08A0AD94A8CACAE0
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa
Signing time: Tue 30 Sep 2025 07:19:02 +0000
ROA not before: Tue 30 Sep 2025 07:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 45.87.44.0/22 maxlen: 24
91.227.184.0/24 maxlen: 24
91.234.192.0/24 maxlen: 24
147.78.198.0/24 maxlen: 24
147.78.199.0/24 maxlen: 24
178.239.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:7d:32:1a:0c:71:3c:ed:08:a0:ad:94:a8:ca:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 30 07:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c35d9c1d072031bb37707f4657b7f7a17d22492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:24:b1:4f:f7:54:c6:e8:0f:e2:bc:3f:df:
e2:ba:88:d0:a7:bf:d5:95:04:5b:23:ee:45:e7:3b:
97:c3:cd:dc:be:49:ed:53:e9:d2:ff:36:46:56:e4:
2f:b2:f3:63:62:c5:f4:80:3b:4c:d6:e2:62:68:eb:
db:d6:f7:2e:ed:fe:52:22:56:f1:b7:66:fe:d5:8e:
c4:33:15:49:c5:5d:46:0f:e3:14:d5:b5:dc:aa:01:
6b:c2:44:f6:8b:59:68:1c:57:22:be:68:73:50:24:
bd:9c:ed:e0:4e:67:33:ba:34:f2:18:b7:e1:ff:da:
90:29:a6:7d:6e:00:62:dd:c9:97:2d:43:ef:14:bd:
57:b9:79:bc:2d:df:27:7a:2d:b6:15:e6:66:1e:61:
3f:86:60:ce:dd:5d:d6:b3:71:d8:fa:07:35:b2:71:
3c:ce:22:e8:63:ab:61:9a:1c:0a:19:64:52:b2:b8:
e0:07:b2:47:7a:eb:bb:22:4f:e0:10:5c:c4:f5:66:
b3:7f:20:a4:b5:3f:ba:00:70:d2:7b:b5:f8:bf:f9:
fa:48:71:b3:7a:f4:1f:83:0b:b5:89:4b:6a:d6:83:
89:d5:c6:c3:ce:03:2b:14:70:06:c8:31:04:61:09:
2a:33:f6:6d:a3:ef:b3:52:51:ea:cb:17:8f:ae:e9:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:D9:C1:D0:72:03:1B:B3:77:07:F4:65:7B:7F:7A:17:D2:24:92
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.44.0/22
91.227.184.0/24
91.234.192.0/24
147.78.198.0/23
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:bc:b3:c8:f8:61:0a:5f:e5:d1:ef:67:4f:1c:0f:aa:d3:09:
7d:60:27:8b:65:e8:17:8b:16:d5:fc:4f:96:d1:21:9a:a2:dc:
bd:6d:0c:a5:23:28:05:71:a2:08:19:e6:4d:57:d4:72:62:42:
20:34:28:3a:a5:ec:84:54:64:62:0c:80:0c:0b:21:5a:1c:0d:
b2:98:d8:aa:a1:f4:e7:38:52:d1:29:41:96:75:46:fd:ba:bb:
ff:28:35:c4:fa:d7:15:71:5f:74:2c:b9:ca:4a:ac:99:00:11:
e5:51:a9:f1:2b:7f:52:04:97:c2:32:16:4c:c6:9f:16:df:f6:
51:e5:67:36:71:e0:b4:dd:b8:ad:2e:6f:89:6f:09:89:ea:1d:
bf:38:ac:2c:50:df:d3:13:1b:87:18:b8:ae:6f:ed:53:fb:d9:
44:f5:6d:b8:56:35:1b:d8:72:87:a6:ab:4c:12:7a:48:47:52:
bb:97:52:04:39:42:4a:28:15:21:20:2e:3f:ad:e8:37:46:48:
a1:37:0c:bb:a0:8b:d7:86:ac:b5:88:60:44:ee:47:cd:d8:79:
e8:83:f7:c5:0e:ca:bb:67:e3:57:c7:16:ba:31:0c:86:ff:11:
53:46:c0:44:a3:fc:b1:d4:01:a4:6a:34:0b:ef:8b:5e:89:0c:
aa:f4:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:01 2025 by rpki-client