Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/NaTaPKfujJr1Jp0amujqpmQcKM4.roa
File: NaTaPKfujJr1Jp0amujqpmQcKM4.roa (raw, json)
Hash identifier: D7evRFh9Yxe+0NOmwrrS5eICjJ6z7dDqjSv+6CysBxM=
Subject key identifier: 35:A4:DA:3C:A7:EE:8C:9A:F5:26:9D:1A:9A:E8:EA:A6:64:1C:28:CE
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019985BDA7392F3F9B5194B01410D8912676
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/NaTaPKfujJr1Jp0amujqpmQcKM4.roa
Signing time: Fri 26 Sep 2025 11:17:02 +0000
ROA not before: Fri 26 Sep 2025 11:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8285
IP address blocks: 193.68.89.0/24 maxlen: 24
2a06:e8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:bd:a7:39:2f:3f:9b:51:94:b0:14:10:d8:91:26:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 26 11:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35a4da3ca7ee8c9af5269d1a9ae8eaa6641c28ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:a3:32:63:50:66:ed:1e:98:84:e2:43:4f:
d4:07:25:69:1f:ae:ce:b7:47:05:90:ba:26:5c:33:
71:1b:15:0c:ce:3a:f5:b5:67:78:17:39:54:f6:6a:
cd:ce:cd:9f:56:83:34:db:e7:36:0c:33:3f:97:12:
5e:83:fd:19:79:21:4d:d1:fc:76:18:3c:18:5c:80:
9d:12:19:fd:7f:50:bf:13:e7:f5:a2:c2:fc:10:a1:
63:8c:b8:78:a4:b2:90:ae:31:1e:88:94:36:08:6c:
0e:48:b9:b2:d2:54:90:b0:6a:4a:26:e8:8a:e8:45:
ef:6f:4f:50:e7:fa:3b:82:5c:9c:6a:98:f2:93:bd:
f2:28:e9:a5:a0:f1:1e:5a:28:e6:aa:a6:57:a7:a5:
71:21:14:6b:ad:f6:85:b1:74:a7:29:d1:9f:37:ec:
6e:0d:01:27:2c:a1:a3:f7:55:57:02:fa:38:fa:a5:
35:99:34:21:65:fd:e8:18:c7:04:b3:5f:cf:fe:d0:
d1:98:9f:ce:8e:37:36:d8:e6:16:c2:c5:a9:75:cb:
78:9d:be:09:1a:11:63:ed:85:c1:d1:65:5c:aa:ab:
12:cf:78:09:e8:c5:b9:21:d4:94:24:60:cd:c2:a5:
8f:2e:a6:05:ce:a5:a5:b2:c3:a2:40:fb:08:44:fa:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:DA:3C:A7:EE:8C:9A:F5:26:9D:1A:9A:E8:EA:A6:64:1C:28:CE
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/NaTaPKfujJr1Jp0amujqpmQcKM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.89.0/24
IPv6:
2a06:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:ad:79:b9:a7:cd:de:ca:f6:46:34:30:e7:80:4b:6c:bc:d0:
01:92:80:fd:34:ca:60:4f:e4:f3:04:59:7f:fc:07:7a:ae:a2:
82:e5:22:61:21:2d:e1:6d:50:6a:c8:04:b4:15:7b:c5:26:18:
0f:a8:15:01:74:6f:ca:c3:d0:10:10:de:c9:3c:2a:7a:5d:c9:
78:71:de:fe:84:03:f0:50:49:4c:3a:b0:63:35:54:99:fb:e0:
12:18:c6:9d:52:8b:b1:64:00:bb:7d:0d:12:3b:29:9e:ba:1b:
8e:37:6c:42:29:71:1f:f0:d2:dc:48:73:96:49:94:8d:64:43:
41:9a:b3:d5:de:e1:86:24:61:a4:69:e3:39:f1:4f:09:dd:19:
f5:3d:bb:cb:c1:1d:2b:8c:46:2f:b8:62:d4:6d:cc:4c:18:e7:
e7:3e:40:2e:c3:36:57:eb:57:3c:59:19:af:c8:c0:e1:3e:0f:
51:65:cc:23:56:68:89:60:ed:b9:4d:51:6e:4d:3b:f1:f1:42:
1b:b1:25:20:ee:c9:e5:46:50:e6:b4:62:be:93:49:14:48:a8:
e6:4b:5e:27:cb:4a:7c:9e:88:51:ac:fc:64:3d:4c:5b:8e:b5:
c2:af:66:f1:ab:d1:23:e4:96:bc:3c:05:9f:f2:76:8f:8e:6b:
29:a3:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:54 2025 by rpki-client