Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/N9DT59un9kPPAqydx65unLzNI5M.roa
File: N9DT59un9kPPAqydx65unLzNI5M.roa (raw, json)
Hash identifier: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=
Subject key identifier: 37:D0:D3:E7:DB:A7:F6:43:CF:02:AC:9D:C7:AE:6E:9C:BC:CD:23:93
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0198D5F4C23A30BA7F713FB2676C5E395813
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/N9DT59un9kPPAqydx65unLzNI5M.roa
Signing time: Sat 23 Aug 2025 08:04:04 +0000
ROA not before: Sat 23 Aug 2025 08:04:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 45.149.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f4:c2:3a:30:ba:7f:71:3f:b2:67:6c:5e:39:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 23 08:04:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37d0d3e7dba7f643cf02ac9dc7ae6e9cbccd2393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:b8:5a:79:cf:fa:d5:91:3e:6e:db:5e:09:
a7:8c:d4:1a:22:25:af:1d:33:56:27:7f:bc:af:15:
2b:e0:20:85:45:1c:40:22:f1:c2:5d:0b:d7:68:ec:
1e:28:98:fa:3f:5a:53:dd:30:9b:77:bb:29:d7:48:
d3:a3:ed:c9:1e:fa:e7:79:53:b7:70:7b:d1:2b:6d:
ae:2e:93:92:ab:e3:ca:2a:23:81:89:d9:8b:16:57:
d6:b9:cc:40:2c:c2:0e:ab:d2:05:0b:39:8c:be:02:
f2:5c:56:9a:40:40:a3:63:14:05:1f:b8:b9:45:5a:
22:6e:ba:7f:91:8a:a4:9c:13:ff:92:6c:d0:fa:9e:
88:f1:d0:9a:be:82:82:0f:18:d5:72:4f:7a:18:34:
3d:57:4b:7a:e8:35:5b:7e:d1:b9:4f:63:d4:81:67:
f6:96:2b:c6:f6:ae:50:40:9f:a8:d7:0b:b3:c6:99:
5f:33:19:99:e4:ac:92:3f:72:83:1c:72:c4:b3:7c:
bf:3f:39:fa:0a:9e:93:14:ec:6a:34:90:07:e3:c3:
b9:3c:87:e0:2d:73:85:7e:76:19:43:7a:0f:ee:57:
24:85:10:0f:f4:ce:37:c3:23:20:99:04:18:e2:e2:
19:99:05:f4:40:3c:3a:20:b5:16:0b:3a:ab:f8:c7:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:D3:E7:DB:A7:F6:43:CF:02:AC:9D:C7:AE:6E:9C:BC:CD:23:93
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/N9DT59un9kPPAqydx65unLzNI5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
22:aa:eb:d1:06:fa:6b:30:1e:a3:20:c7:df:24:f8:1b:d5:02:
9a:fb:1a:f1:7b:96:fe:c5:74:cb:11:d9:5c:fc:0d:86:4d:8d:
eb:dd:08:56:fb:51:9f:f8:21:28:36:d5:cf:22:cf:ed:9b:fe:
e3:5e:a1:b9:9a:fa:61:7f:5a:9c:57:3c:25:c1:fb:9d:5f:b5:
a0:34:43:26:b6:7b:b0:40:d8:03:ca:36:d2:e8:ba:f2:14:6f:
3a:0f:c3:c4:99:a1:e6:1a:a0:4b:58:c0:b3:66:2d:f6:c6:64:
7e:6f:c2:57:d4:5b:ce:00:c4:47:83:2b:28:ea:b8:1c:26:c1:
63:60:a6:9d:8d:74:72:1a:d7:14:2f:2f:bd:a3:78:79:2d:77:
8b:81:2c:b6:40:f8:44:01:27:dd:61:65:0c:6b:9a:a0:4f:32:
8f:56:f1:f1:88:5d:51:0e:6b:e9:b0:b9:62:2a:3a:0f:e9:cd:
2c:77:72:a0:46:09:dc:06:34:47:80:f8:4c:8f:48:30:ae:32:
4c:bf:8f:e0:69:aa:bc:9b:a8:16:1d:33:92:e3:1b:df:4b:9f:
3a:48:6f:e1:b1:44:d6:96:4d:7f:81:c8:90:f6:07:bf:31:81:
b7:d2:e0:97:71:f9:93:8d:f4:9e:be:cc:44:dc:d5:6f:33:ba:
07:66:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:13 2025 by rpki-client