Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa
File: nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa (raw, json)
Hash identifier: DqkhFi8/nJkoAICivrur3pXP8/0mP1960uQN7oDPzao=
Subject key identifier: 9D:19:0C:84:0C:2B:12:62:06:15:2A:39:2A:D9:0F:23:84:28:E4:2A
Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6
Certificate serial: 0198C79D7E8807A51CC1A9CF7F8F3451BBE2
Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa
Signing time: Wed 20 Aug 2025 13:14:04 +0000
ROA not before: Wed 20 Aug 2025 13:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209892
IP address blocks: 193.28.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:9d:7e:88:07:a5:1c:c1:a9:cf:7f:8f:34:51:bb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6
Validity
Not Before: Aug 20 13:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d190c840c2b126206152a392ad90f238428e42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:c2:ac:47:e6:93:4d:d9:c0:c4:26:ab:76:
58:78:36:c1:9a:e2:f5:04:83:2a:a2:d6:07:95:2a:
a3:3e:5b:e4:e1:8c:6e:8e:a9:52:73:96:d5:36:4f:
e7:a8:14:c8:7c:49:cc:47:1a:3f:68:ed:14:b7:e3:
13:e2:11:16:28:ae:cd:62:93:3b:34:a5:b1:93:d2:
71:4e:16:d4:5b:fa:96:69:50:0f:75:ca:b7:56:49:
48:6f:cf:f4:24:6e:2e:6a:7c:9e:cd:9e:53:2f:9d:
78:3b:74:ab:63:53:3b:2f:24:89:0a:9a:ec:8d:b1:
be:d3:0b:57:4e:4e:60:5a:70:3b:f5:75:6f:26:ab:
56:8c:23:9b:6b:c1:32:e5:f2:93:ef:cb:87:fe:52:
ca:8d:8b:0d:76:b6:46:e5:7f:aa:cb:3f:34:16:04:
14:1c:7a:75:3d:08:1b:41:08:62:20:6f:b8:c9:d6:
ea:31:2b:20:37:68:8d:f9:73:26:6a:41:81:57:23:
57:42:d2:6d:fd:6c:cb:3d:b2:f9:8e:76:be:57:c0:
d7:0d:8f:18:95:00:5b:39:54:fa:4f:cf:e6:e3:77:
ce:94:35:3b:da:e8:11:db:59:ae:ee:8f:71:74:97:
f3:f5:88:e5:6c:8c:a5:3c:35:6a:b3:47:00:9f:6b:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:0C:84:0C:2B:12:62:06:15:2A:39:2A:D9:0F:23:84:28:E4:2A
X509v3 Authority Key Identifier:
keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:89:f7:1f:13:af:5f:2a:e0:e5:18:ef:76:fe:6c:e9:cf:54:
c8:31:4d:97:91:91:88:bc:94:e0:b9:59:40:cd:b7:08:67:53:
28:b0:9f:46:24:a0:b0:91:ac:86:9f:06:2c:56:92:58:7d:70:
cd:8b:28:15:da:0f:41:57:67:ec:a0:ae:d6:43:ff:07:7f:0a:
b9:ab:39:dc:e1:18:6a:66:59:0c:56:ed:2e:c0:fa:6d:52:f9:
67:0a:20:25:0c:69:ac:d0:8a:ff:86:fa:51:17:ce:d5:60:73:
d3:42:0b:9d:b2:3e:28:2c:89:2f:e4:0a:63:cf:4c:a8:8b:32:
ce:cd:5b:6c:80:db:e8:2d:84:87:c9:0d:67:69:1e:83:ee:f8:
e2:39:6e:b1:94:90:0e:d7:b6:e3:8d:d6:dc:df:db:32:99:a2:
cf:ec:dc:7a:d6:2a:cf:c9:d4:2c:8b:f7:40:bb:80:78:28:2e:
97:20:b2:22:35:bb:5c:02:23:86:a3:51:2f:39:e4:2d:66:2d:
9d:84:dc:9a:5a:2f:6d:6f:14:34:48:38:69:de:e9:35:e9:07:
c9:87:b4:07:3e:db:de:8f:ad:0f:bc:48:e2:6a:1f:55:4a:44:
68:7d:f7:5a:19:07:79:af:f3:89:2d:e2:85:ca:6f:92:96:7b:
b0:b6:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:27:01 2025 by rpki-client