Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NFZ8eLgpC9l6dMH34-bEaYztt0w.roa
File: NFZ8eLgpC9l6dMH34-bEaYztt0w.roa (raw, json)
Hash identifier: aOIX8CtMqHFskQm3oyhLkvyrEp9No67eN08w8zgIJUE=
Subject key identifier: 34:56:7C:78:B8:29:0B:D9:7A:74:C1:F7:E3:E6:C4:69:8C:ED:B7:4C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197911E7B7DAE2CE990D4FBA6D7AD63D811
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NFZ8eLgpC9l6dMH34-bEaYztt0w.roa
Signing time: Sat 21 Jun 2025 06:13:03 +0000
ROA not before: Sat 21 Jun 2025 06:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 88.209.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:1e:7b:7d:ae:2c:e9:90:d4:fb:a6:d7:ad:63:d8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 21 06:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34567c78b8290bd97a74c1f7e3e6c4698cedb74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:43:15:4e:bd:88:2e:3a:0e:c1:b9:e5:ed:
70:62:85:ae:ca:72:6f:d4:4a:27:10:e9:e5:7d:3d:
fb:a4:73:41:e7:29:2a:3a:58:90:db:6a:2d:f3:d5:
7a:a5:a1:dd:a3:6e:ea:cb:f1:3e:0f:94:77:73:f5:
b5:c4:d9:1b:31:fd:79:5a:19:e9:e0:c5:93:19:ff:
53:4c:c3:48:35:7c:1a:e9:64:c3:c7:df:ba:ba:6b:
41:1e:da:68:e3:cd:eb:99:76:25:92:df:5e:d8:c9:
0c:53:54:4f:8b:af:30:01:8e:d2:d1:79:93:a3:f5:
0f:13:37:c9:3d:fd:58:d3:12:95:41:2b:cd:fc:40:
9a:01:52:0c:9b:7d:64:6e:7f:ca:5a:28:04:82:78:
03:32:2f:5b:93:c0:f7:f4:9b:86:59:b6:be:f0:f4:
87:c0:58:ab:53:26:17:1d:e7:a7:8b:26:5a:24:73:
ac:ef:49:f3:73:8a:2c:63:c6:86:49:d2:45:83:60:
d8:9d:b9:92:f6:a2:03:27:67:b8:31:3c:20:4b:2d:
60:32:f9:1b:09:4b:f7:79:76:40:1b:46:b2:fd:65:
54:f6:0f:db:43:e3:f0:9d:f9:44:9c:30:1b:fd:30:
21:46:9c:12:8e:92:88:cd:e1:6e:3d:01:47:29:24:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:56:7C:78:B8:29:0B:D9:7A:74:C1:F7:E3:E6:C4:69:8C:ED:B7:4C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NFZ8eLgpC9l6dMH34-bEaYztt0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:61:9a:81:57:be:4f:ec:e6:9a:be:c5:89:9c:c8:64:1d:27:
cf:62:79:d9:cf:39:8f:b1:a6:df:58:8a:36:58:81:b8:71:35:
05:87:47:d0:f4:ba:b8:2d:01:31:13:a1:1d:ed:16:eb:c8:a6:
21:62:7e:6f:04:c8:0a:2d:72:52:9e:b5:7a:b6:de:0c:a7:dc:
64:9b:9c:39:00:ce:20:a4:6c:2d:b2:c7:43:1e:8f:1f:c4:41:
f8:a4:c5:57:fc:19:a3:c5:f4:51:f4:f6:26:de:15:f6:e1:3c:
43:ad:1a:f9:cb:7f:4c:04:79:c6:37:ed:d0:ff:0a:45:21:1e:
7f:9e:b2:7d:35:57:8f:cd:fe:85:3f:4f:da:05:93:6e:8d:ac:
72:be:b9:c7:3b:d7:8e:60:ea:6f:e5:f9:5d:a4:24:6a:46:67:
4f:e2:4a:9c:c6:96:12:34:3f:fc:64:b3:34:ce:d2:71:ed:cd:
f0:55:f9:9f:3b:12:f4:f3:35:ee:fc:d7:0f:a7:76:30:3f:5c:
b0:e8:c8:52:39:33:03:85:a1:5f:65:94:26:d6:3e:eb:e9:83:
a2:01:fb:22:6a:d7:33:0d:87:7d:34:bf:55:29:e9:4a:86:08:
93:c6:b3:2f:e8:a9:19:b4:63:ee:a8:8a:73:a3:86:42:86:40:
f8:8d:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:15:39 2025 by rpki-client